rgbCode regex doesn't allow percents or spaces (antisamy.xml)

Looking at antisamy.xml, SVN revision 137:

<regexp name="rgbCode"
value="rgb\(([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[
0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])\)"/>

This allows values like rgb(40,100,200).
It does not allow rgb(40, 100, 200) or rgb(10%,20%,30%). As far as I can
tell, both of these are valid color specifications.
See http://www.w3.org/TR/CSS21/syndata.html#value-def-color

Original issue reported on code.google.com by danr...@gmail.com on 23 Dec 2009 at 8:19

rjatkins / owaspantisamy

rgbCode regex doesn't allow percents or spaces (antisamy.xml) #68