html-purify

html-purify copied to clipboard

How to filter xss but also to allow iframe Vimeo and Youtube video?

1

I am trying to add an exception for Vimeo and Youtube video iframes while purifying the html content. Can anyone please help me out to add such exception in this...

happy2share

Add proper quotes

6

@maditya please review I addressed the problems stated in https://github.com/yahoo/html-purify/pull/21 with an approach that centralizes a single place to capture and treat attribute values. c.c @yukinying @neraliu

adon-at-work

Fix tag balancing

15

**Changes** - fix: optional tags are ignored during balancing, i.e., well-balanced input will not be broken by attempting to close optional tags. - tag balancing logics simplified (accept closing tag...

adon-at-work

improved benchmark suite

5

use `benchmark` for benchmarking

adon-at-work

"x" is added to the src data part. For example before purifying: `` after purifying: `` "x-data:image/png" is an invalid value for image src. It turns out the images can...

xifengfang

vulnerability found in auto double quoting feature.

5

`` it's not vulnerable itself. but after purification, it becomes `` this boils down to the problem of always using double quote in html purifier since v1.0 https://github.com/yahoo/html-purify/blob/v1.0.0/src/html-purify.js#L66 reported here...

adon-at-work