Replies: 3 comments 1 reply
-
Beta Was this translation helpful? Give feedback.
-
Would I be correct in saying the safelist is used to sanitize data being parsed by JSoup? |
Beta Was this translation helpful? Give feedback.
-
I think it would be a fine thing to add support for. We would need to review and see what kind (if any) validation needs to occur on the data (like e.g. checking they are all in the expected character range, etc). I would like to add a new set of default safelists that we can extend over time. I am reluctant to make changes to the existing default safelists. They can be named like HTML5, based on the concept that HTML5 itself is evolving. See also #1297 which is related. |
Beta Was this translation helpful? Give feedback.
-
Hi, why is the
data
protocol not allowed by default if I use thebasicWithImages
safe list to clean HTML content?Javadoc:
This safelist allows the same text tags as {@link #basic}, and also allows
img
tags, with appropriate attributes, withsrc
pointing tohttp
orhttps
.Beta Was this translation helpful? Give feedback.
All reactions