Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for sanitizing/filtering #1103

Open
DartBot opened this issue Jun 4, 2015 · 4 comments
Open

Add support for sanitizing/filtering #1103

DartBot opened this issue Jun 4, 2015 · 4 comments
Labels
package:html type-enhancement A request for a change that isn't a bug

Comments

@DartBot
Copy link

DartBot commented Jun 4, 2015

<img src="https://avatars.githubusercontent.com/u/5479?v=3" align="left" width="96" height="96"hspace="10"> Issue by sethladd
Originally opened as dart-lang/sdk#16694


I know that the readme talks about sanitizing being still unimplemented.

I made this task so that me and others can follow this particular work (couldn't find anything with the search).

We are using Web UI in our project and sometimes new SafeHtml.unsafe(...) even for user-supplied content which is bad, but we have to in order to support custom user-supplied HTML. Our hopes are that sooner or later we can replace those with code that sanitizes the bad input and makes sure it's clean by leveraging a whitelist approach.

@DartBot DartBot added the type-enhancement A request for a change that isn't a bug label Jun 4, 2015
@DartBot
Copy link
Author

DartBot commented Jun 4, 2015

@DartBot
Copy link
Author

DartBot commented Jun 4, 2015

<img src="https://avatars.githubusercontent.com/u/17034?v=3" align="left" width="48" height="48"hspace="10"> Comment by kevmoo


Added Pkg-Html5Lib label.

@DartBot
Copy link
Author

DartBot commented Jun 4, 2015

<img src="https://avatars.githubusercontent.com/u/17034?v=3" align="left" width="48" height="48"hspace="10"> Comment by kevmoo


Removed Library-Html5lib label.

@rspilker
Copy link

rspilker commented Jan 4, 2017

We've created a separate library for white-listing tags, attributes and values that uses this library. We are willing to donate this work. Alternatively, we can work together to meet all your needs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
package:html type-enhancement A request for a change that isn't a bug
Projects
None yet
Development

No branches or pull requests

3 participants