Modifier and Type | Field and Description |
---|---|
static PolicyFactory |
Sanitizers.BLOCKS
Allows common block elements including
<p> ,
<h1> , etc. |
static PolicyFactory |
Sanitizers.FORMATTING
Allows common formatting elements including
<b> , <i> , etc. |
static PolicyFactory |
Sanitizers.IMAGES
Allows
<img> elements from HTTP, HTTPS, and relative sources. |
static PolicyFactory |
Sanitizers.LINKS
Allows HTTP, HTTPS, MAILTO, and relative links.
|
static PolicyFactory |
Sanitizers.STYLES
Allows certain safe CSS properties in
style="..." attributes. |
static PolicyFactory |
Sanitizers.TABLES
Allows common table elements.
|
Modifier and Type | Method and Description |
---|---|
PolicyFactory |
PolicyFactory.and(PolicyFactory f)
Produces a factory that allows the union of the grants, and intersects
policies where they overlap on a particular granted attribute or element
name.
|
PolicyFactory |
HtmlPolicyBuilder.toFactory()
Like
HtmlPolicyBuilder.build(org.owasp.html.HtmlStreamEventReceiver) but can be reused to create many different policies
each backed by a different output channel. |
Modifier and Type | Method and Description |
---|---|
PolicyFactory |
PolicyFactory.and(PolicyFactory f)
Produces a factory that allows the union of the grants, and intersects
policies where they overlap on a particular granted attribute or element
name.
|
Copyright © 2016 OWASP. All rights reserved.