bluemonday

bluemonday copied to clipboard

Due to https://github.com/golang/net/commit/06994584 HTML comment is escaped.

zhsj

Filter external resources

3

Sometimes it's desirable to disallow external resources (``, `background: url(…)`, etc), to prevent sanitized HTML from "calling home" (triggering HTTP requests, e.g. using pixel images for tracking purposes). For instance...

emersion

TokenReader for pre-sanitization transformations

1

Allows a chain of TokenReaders to manipulate the `html.Token` stream prior to bluemonday sanitizing it. Closes #58

jhillyerd

Add ability to specify inline style policies

4

Following on from #43 / #44, I've implemented a policy type and builder for style policies, following the same pattern as attribute policies. That means that you can whitelist individual...

pauln

Add <style> support to allowStyles API

4

douceur already supports parsing full CSS stylesheets. Would you accept a patch sanitizing `` elements content in addition to `style` attributes?

emersion

Stripping non-tags

5

`bluemonday.StrictPolicy().Sanitize("a

spekary

Sanitization of character entities are replacing for blank spaces

4

Hey. We are using bluemonday library in a new project and in some cases i need to save the string with characthers entities(&nbsp, &lt, &gt...). But, after sanitize some exemples...

heltonrlustosa

https://staticcheck.io/docs/checks#SA6005 In file sanitize.go: `if strings.ToLower(straw) == strings.ToLower(needle) {` should be `strings.EqualsFold(straw, needle)` or, even better, compile a regexp literal for needle and use it for the entire loop.

riking

css sanitization in style attributes

6

Per the bluemonday docs: > We are not yet including any tools to help whitelist and sanitize CSS. Which means that unless you wish to do the heavy lifting in...

gerad

Require referrerpolicy="no-referrer" on images?

1

I'd like bluemonday to add `referrerpolicy="no-referrer"` to all `img` tags, but I don't see a way to do that with the current API. Maybe we could get an API like...

alltom