java-html-sanitizer icon indicating copy to clipboard operation
java-html-sanitizer copied to clipboard

Published 20 hours ago • verified publisher icon OWASP

Allowing HTML attributes with _ as the first character in the name (#355)

Open SlickDomique opened this issue 10 months ago • 0 comments

I changed the condition in the HtmlStreamRenderer.isValidHtmlName for _ to not consider it invalid if it's the first character of the name. I also added a unit test that checks this case.

Fix for issue https://github.com/OWASP/java-html-sanitizer/issues/355

SlickDomique avatar Jan 22 '25 19:01 SlickDomique