js-xss

js-xss copied to clipboard

How to use this packages in typescript project.

1

I want to use this package in my typescript project. How I will use this?

sheikharifulislam

Is there a way to preserve the case of whitelisted attributes when using `filterXSS`? Given this code: ```js const svgText = "" const WHITELIST = { svg: ['id', 'xmlns', 'viewBox',...

ok-martin

Hi, Is there a way and if so how to see what attributes have been removed/escaped from the input string? I am thinking of a `removedElements` property or similar. I...

Thomas-1985

This particular HTML snippet would cause the alert to be executed. The library however, doesn't prevent this.

LeanKhan

How to whitelist cookies from encoding using xss lib?

ashuorg

name: 'innerHTML', // xss白名单，可根据业务需求自己定制 value: `xss(_s(${directiveMeta.value}), { whiteList: { img: ['class', 'src', 'style', 'fileurl'], br: [], i: [], a: ['class', 'href', 'target'], span: ['class', 'style'], p: ['class'], font: ['style'], b:...

daweiyong

增加属性

4

比如说增加a标签noopener, iframe标签增加sandbox等

hackwaly

img src processed to empty

2

`` processed result is ``

wcnjeusr

src with blob:... is removed

1

Wanted behavior: src of blob type won't be removed.

tungnat97

The module encodes any < > even if they are not part of a tag

2

For example: `xss("This is a > test")` will result: `this is a &gt; test` I wonder if there is a way to sanitise only Tags?

tomerb15