search

xiebiao / owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy
0 stars 0 forks source link

Antisamy policy file for css expression #132

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What is the expected output? What do you see instead?
-I am trying to write code using css including below source

.examination_table{border-collapse:collapse !important;width:100% !important; 
border-top:2px solid #52ADCE !important; border-bottom:2px solid #52ADCE 
!important;}

like this. however, i guess !important is blocked by antisamy and i want to
add it as whitelist in antisamy policy file

plz help me~!

What version of the product are you using? On what operating system?
-antisamy policy file version 1.4.4

Please provide any additional information below.

Original issue reported on code.google.com by edae...@gmail.com on 3 May 2012 at 9:42

GoogleCodeExporter commented 9 years ago 
The 'important' thing definitely complicates the regular expression matching, 
and it may override the embedding page's intent regarding user input. Not sure 
this is a candidate for inclusion.

Original comment by arshan.d...@gmail.com on 24 Jun 2012 at 5:16

GoogleCodeExporter commented 9 years ago

Original comment by arshan.d...@gmail.com on 17 Sep 2012 at 1:58

GoogleCodeExporter commented 9 years ago 
Not sure if it would complicate the regular expression used to validate the CSS 
property value.  From what I understand the SAC parser, would pass to you 
whether the the important declaration had been set or not.

http://code.google.com/p/owaspantisamy/source/browse/trunk/Java/antisamy/src/mai
n/java/org/owasp/validator/css/CssHandler.java#478

Original comment by wvinc...@gmail.com on 18 Dec 2012 at 11:08