js-xss
js-xss copied to clipboard
Filter style tag content
According to the documentation style attributes can be filtered using CSS filter. How can I filter also values between style tags not only attributes?
E.g. <STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE>
is not filtered at all.
I have tried that
There is a package names cssfilter can filter style
attribute, but filter CSS style from <style>
tag is more complex than HTML, so this package xss
currently does not supported this feature.