class |
OWASPAntiSamyXSSFilter
Description:
OWASP AntiSamy XSSFilter
creates a DOM-Tree, parses it and filters everything invalid out, expect items in the policy-file
this is way better than trying to handle input by regexp's:
http://htmlparsing.icenine.ca/doku.php/#summary
OWASP AntiSamy docu: see http://www.owasp.org/index.php/AntiSamy
HTML Parser based on: http://nekohtml.sourceforge.net/ |