-
Notifications
You must be signed in to change notification settings - Fork 26
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for sanitizing/filtering #1103
Comments
<img src="https://avatars.githubusercontent.com/u/5479?v=3" align="left" width="48" height="48"hspace="10"> Comment by sethladd Was https://github.com/dart-lang/html5lib-now-on-dart.googlecode.com/issues/67 |
<img src="https://avatars.githubusercontent.com/u/17034?v=3" align="left" width="48" height="48"hspace="10"> Comment by kevmoo Added Pkg-Html5Lib label. |
<img src="https://avatars.githubusercontent.com/u/17034?v=3" align="left" width="48" height="48"hspace="10"> Comment by kevmoo Removed Library-Html5lib label. |
We've created a separate library for white-listing tags, attributes and values that uses this library. We are willing to donate this work. Alternatively, we can work together to meet all your needs. |
<img src="https://avatars.githubusercontent.com/u/5479?v=3" align="left" width="96" height="96"hspace="10"> Issue by sethladd
Originally opened as dart-lang/sdk#16694
I know that the readme talks about sanitizing being still unimplemented.
I made this task so that me and others can follow this particular work (couldn't find anything with the search).
We are using Web UI in our project and sometimes new SafeHtml.unsafe(...) even for user-supplied content which is bad, but we have to in order to support custom user-supplied HTML. Our hopes are that sooner or later we can replace those with code that sanitizes the bad input and makes sure it's clean by leveraging a whitelist approach.
The text was updated successfully, but these errors were encountered: