|
||||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||
add(String).AttributeNameRemovalFilter.add(String).XMLFilters to protect against Cross-Site Scripting (XSS).XMLFilters to protect against Cross-Site Scripting (XSS).DeXSSFilterPipeline#DeXSS_CHANGE_LISTENER.XMLFilterImpl and provides the methods for DeXSSChangeListener.DeXSSFilterPipeline.BODY_ONLY true
And uses as parent a org.ccil.cowan.tagsoup.Parser with the following feature set:
org.ccil.cowan.tagsoup.Parser#ignoreBogonsFeature true
org.ccil.cowan.tagsoup.Parser#defaultAttributesFeature false
TODO: Should be made more configurable.
getProperty(#DeXSS_CHANGE_LISTENER)
DeXSSFilterPipeline.BODY_ONLY directly; other features are referred to the superclass.
DeXSSFilterPipeline.DEXSS_CHANGE_LISTENER directly; other properties are referred to the superclass.
DeXSSChangeListener
Serialized XML result
A summary indicating whether the input changed or not (based on whether there were any XSSChangeListener messages)
TODO: A better test and regression harness.
setProperty(DeXSSFilterPipeline.DEXSS_CHANGE_LISTENER, xssChangeListener)
DeXSSFilterPipeline.BODY_ONLY directly; other features are referred to the superclass.
XMLFilterImpl.setParent(XMLReader) and constructs the DeXSS filter pipeline first.
DeXSSFilterPipeline.DEXSS_CHANGE_LISTENER directly; other features are referred to the superclass.
|
||||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||