🏳️‍⚧️ Dee

Cloudflare are using it within a helper package that wraps internal JSON REST services.

I'd agree with the view that the "self" URL is special. I've done both things... adding it as the first property on a resource, and also adding it as a...

Ah... interesting. So you're getting as input `John Smith ` and it's seeing the email `` as a HTML tag. In essence the problem of using a HTML aware sanitizer...

I'm going to put some thought into what the interface for a fully integrated CSS sanitizer might be. This may take me a while as I'm flying around a bit...

That sounds like a really good API for this. I'd approve and merge PRs that followed that API.

Merged, thanks for the great addition.

How are you using this? Policy creation is not thread safe, and you should create the policy at startup (or guaranteed just once if you lazy create it later). Sanitization...

Yup, it is the modifying of the policy that isn't thread safe. I'll drop an example in here once I'm at work.

A good proposal, I'll get something done for this soon.

> extend bluemonday without requiring the user to parse the HTML before or after calling Sanitize() The problem with this is that the transformations could introduce unsafe changes that Sanitize()...