OWASP Java HTML Sanitizer | OWASP Foundation
This website uses cookies to analyze our traffic and only share that information with our analytics partners. Accept What is this? The OWASP HTML Sanitizer Projects provides Java based HTML sanitization of untrusted HTML! About The OWASP HTML Sanitizer is a fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while
Insane in the IFRAME -- The case for client-side HTML sanitization
Insane in the IFRAME -- The case for client-side HTML sanitization Server-side HTML sanitization is a familiar web application building block, yet despite years of offensive security research, defensive “sanitizer science†is still a kind of voodoo magic. This talk will make the case that as server-side HTML sanitizers lack the ability to effectively simulate every potential user agent, the client
GitHub - cure53/DOMPurify: DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.2.2. DOMPurify is written in JavaScript and works in all modern browsers (Safari (10+), Opera (15+), Edge, Firefox and Chrome - as well as almost anything else using Blink, Gecko o
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - OWASP/java-html-sanitizer: Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
Check-in of CSS sanitizer to Closure. Also · google/closure-library@49d9d20
microsoft/JSanity
GitHub - microsoft/JSanity: A secure-by-default, performance, cross-browser client-side HTML sanitization library
Forbid URI syntax in Soy where the scheme could be set by an attacker. · google/closure-templates@6f70615
Enabling new states and transitions for the portion of the URI that m… · google/closure-templates@b572098
Existing sanitized URIs or calls to URI templates should still be esc… · google/closure-templates@fa5dacf
GitHub - YahooArchive/xss-filters: Secure XSS Filters.
caja/src/com/google/caja/plugin/html-sanitizer.js at master · googlearchive/caja
GitHub - leizongmin/js-xss: Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
GitHub - validatorjs/validator.js: String validation
{{#tags}}- {{label}}
{{/tags}}