OWASP Java HTML Sanitizer | OWASP Foundation
This website uses cookies to analyze our traffic and only share that information with our analytics partners. Accept What is this? The OWASP HTML Sanitizer Projects provides Java based HTML sanitization of untrusted HTML! About The OWASP HTML Sanitizer is a fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while
Insane in the IFRAME -- The case for client-side HTML sanitization
Insane in the IFRAME -- The case for client-side HTML sanitization Server-side HTML sanitization is a familiar web application building block, yet despite years of offensive security research, defensive “sanitizer science” is still a kind of voodoo magic. This talk will make the case that as server-side HTML sanitizers lack the ability to effectively simulate every potential user agent, the client
GitHub - YahooArchive/xss-filters: Secure XSS Filters.
More Secure. Context-dependent output filters that are developer-friendly. It is safe to apply these filters like so: document.write("<a href=" + xssFilters.uriInUnQuotedAttr(url) + ">" + xssFilters.uriInHTMLData(url) + "</a>"); In this example, the traditional wisdom of blindly escaping some special html entity characters (& < > ' " `) would not stop XSS (e.g., when url is equal to javascript:ale
GitHub - cure53/DOMPurify: DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.1.1. DOMPurify is written in JavaScript and works in all modern browsers (Safari (10+), Opera (15+), Edge, Firefox and Chrome - as well as almost anything else using Blink, Gecko o
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - OWASP/java-html-sanitizer: Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
Check-in of CSS sanitizer to Closure. Also · google/closure-library@49d9d20
Issues · microsoft/JSanity
GitHub - microsoft/JSanity: A secure-by-default, performance, cross-browser client-side HTML sanitization library
Forbid URI syntax in Soy where the scheme could be set by an attacker. · google/closure-templates@6f70615
Enabling new states and transitions for the portion of the URI that m… · google/closure-templates@b572098
Existing sanitized URIs or calls to URI templates should still be esc… · google/closure-templates@fa5dacf
caja/src/com/google/caja/plugin/html-sanitizer.js at master · googlearchive/caja
GitHub - leizongmin/js-xss: Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
GitHub - validatorjs/validator.js: String validation