leizongmin / js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
http://jsxss.com
Other
5.19k stars 630 forks source link

Filtering style tag value #210

Closed klukackova closed 3 years ago

klukackova commented 3 years ago

According to the documentation style attributes can be filtered using CSS filter. How can I filter also values between style tags not only attributes? E.g. <STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE>.