| Modifier and Type | Field and Description |
|---|---|
static PolicyFactory |
Sanitizers.BLOCKS
Allows common block elements including
<p>,
<h1>, etc. |
static PolicyFactory |
Sanitizers.FORMATTING
Allows common formatting elements including
<b>, <i>, etc. |
static PolicyFactory |
Sanitizers.IMAGES
Allows
<img> elements from HTTP, HTTPS, and relative sources. |
static PolicyFactory |
Sanitizers.LINKS
Allows HTTP, HTTPS, MAILTO, and relative links.
|
static PolicyFactory |
Sanitizers.STYLES
Allows certain safe CSS properties in
style="..." attributes. |
static PolicyFactory |
Sanitizers.TABLES
Allows common table elements.
|
| Modifier and Type | Method and Description |
|---|---|
PolicyFactory |
PolicyFactory.and(PolicyFactory f)
Produces a factory that allows the union of the grants, and intersects
policies where they overlap on a particular granted attribute or element
name.
|
PolicyFactory |
HtmlPolicyBuilder.toFactory()
Like
HtmlPolicyBuilder.build(org.owasp.html.HtmlStreamEventReceiver) but can be reused to create many different policies
each backed by a different output channel. |
| Modifier and Type | Method and Description |
|---|---|
PolicyFactory |
PolicyFactory.and(PolicyFactory f)
Produces a factory that allows the union of the grants, and intersects
policies where they overlap on a particular granted attribute or element
name.
|
Copyright © 2016 OWASP. All rights reserved.