issues
search
microcosm-cc
/
bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
https://github.com/microcosm-cc/bluemonday
BSD 3-Clause "New" or "Revised" License
3.12k
stars
176
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Go get fails to install lib
#104
darsenault
closed
3 years ago
5
Fix href sanitization bugs
#103
fewstera
closed
4 years ago
3
there is a badcase about filter html tags
#102
zhaolunallen
closed
3 years ago
1
Allowing img and whitelisting src urls
#101
prologic
closed
4 years ago
2
AllowStyles is not released
#100
c14h3
closed
4 years ago
1
Filter external resources
#99
emersion
opened
4 years ago
3
Add <style> support to allowStyles API
#98
emersion
opened
4 years ago
4
Sanitizing "Filter bypass based polyglot"
#97
micke136
closed
4 years ago
1
Sanitization of character entities are replacing for blank spaces
#96
heltonrlustosa
opened
4 years ago
4
Allowing comments
#95
edvjur
closed
3 years ago
3
nit: func stringInSlice should use EqualsFold
#94
riking
opened
4 years ago
0
handlers.go: license header is not a package comment
#93
riking
closed
3 years ago
0
AllowElements regex support
#92
theflyingcodr
closed
4 years ago
5
How to allow custom elements using a regex
#91
shaydoc
closed
4 years ago
6
[invalid] UGCPolicy does not strip attributes on links
#90
akasandra
closed
4 years ago
2
fixes URL sanitization with more than one query parameter
#89
platinummonkey
closed
5 years ago
1
URLs with multiple query parameters escape the `&` delimiter incorrectly
#88
platinummonkey
closed
5 years ago
0
Fixed issue with default handler for font-family not validating correctly
#87
StevenGutzwiller
closed
5 years ago
1
Add Noreferrer API
#86
StevenGutzwiller
closed
5 years ago
1
Add functionality to set rel="noreferrer" on a,area,link
#85
StevenGutzwiller
closed
5 years ago
3
Updated credits to add Steven Gutzwiller
#84
buro9
closed
5 years ago
0
Add Css Styling for element attributes
#83
StevenGutzwiller
closed
5 years ago
1
How to allow emojis?
#82
k0fi
closed
5 years ago
2
When a self-closing iframe is present, content afterward does not get sanitized.
#81
dy-dx
closed
4 years ago
7
README says supported versions 1.1–1.9, but .travis.yml tests 1.1–1.11
#80
dmitshur
closed
5 years ago
5
Stripping non-tags
#79
spekary
opened
5 years ago
5
Require referrerpolicy="no-referrer" on images?
#78
alltom
opened
5 years ago
1
Support Go Modules
#77
SamWhited
closed
5 years ago
4
Links are stripped when they shouldn't
#76
ghost
closed
5 years ago
1
fatal error: concurrent map writes
#75
Sakibs
opened
5 years ago
4
apostrophes get turned into HTML entities - take 2
#74
spekary
closed
5 years ago
10
Feature request: blacklist elements from policy
#73
jaredscheib
opened
6 years ago
1
Is Sanitize* safe to use by multiple goroutines
#72
powerman
closed
6 years ago
2
Some AllowAttrs.Matching regexp are not anchored
#71
powerman
opened
6 years ago
0
Logo proposal
#70
psikoz
closed
6 years ago
1
Add address to DefaultElementsWithoutAttrs
#69
Mungrel
closed
6 years ago
0
add iframe to default elements without attributes
#68
jtamary
closed
2 years ago
2
allow data attributes
#67
buddhamagnet
closed
6 years ago
0
AllowElements iframe doesn't work
#66
jtamary
closed
4 years ago
8
Add support for dataset attributes
#65
jtamary
closed
6 years ago
4
Url with ascii char encoded to hex
#64
batidiane
opened
6 years ago
2
A tag unnormal output
#63
aimuz
closed
6 years ago
0
Fix two very small typos
#62
arp242
closed
6 years ago
2
TokenReader for pre-sanitization transformations
#61
jhillyerd
opened
6 years ago
1
tag with semver for vgo
#60
flibustenet
closed
6 years ago
1
Was Sanitized Flag
#59
levidurfee
closed
6 years ago
1
Attribute Filter/Transform Callbacks
#58
jhillyerd
opened
6 years ago
6
Resolves #56 strings.ToLower() results in false match
#57
buro9
closed
6 years ago
0
Use of strings.ToLower() incorrectly escapes chars and allows for insertion of scripts
#56
buro9
closed
6 years ago
0
Resolves #54 by removing AllowDocType functionality
#55
buro9
closed
6 years ago
0
Previous
Next