Modifier and Type | Class and Description |
---|---|
class |
FilterUrlByProtocolAttributePolicy
An attribute policy for attributes whose values are URLs that requires that
the value have no protocol or have an allowed protocol.
|
Modifier and Type | Field and Description |
---|---|
static AttributePolicy |
AttributePolicy.IDENTITY_ATTRIBUTE_POLICY
An attribute policy that returns the value unchanged.
|
static AttributePolicy |
AttributePolicy.REJECT_ALL_ATTRIBUTE_POLICY
An attribute policy that rejects all values.
|
Modifier and Type | Method and Description |
---|---|
static AttributePolicy |
AttributePolicy.Util.join(AttributePolicy... policies)
An attribute policy equivalent to applying all the given policies in
order, failing early if any of them fails.
|
Modifier and Type | Method and Description |
---|---|
HtmlPolicyBuilder |
HtmlPolicyBuilder.allowUrlsInStyles(AttributePolicy newStyleUrlPolicy)
Allow URLs in CSS styles.
|
static AttributePolicy |
AttributePolicy.Util.join(AttributePolicy... policies)
An attribute policy equivalent to applying all the given policies in
order, failing early if any of them fails.
|
HtmlPolicyBuilder.AttributeBuilder |
HtmlPolicyBuilder.AttributeBuilder.matching(AttributePolicy attrPolicy)
Filters and/or transforms the attribute values
allowed by later
allow* calls. |
Copyright © 2017 OWASP. All rights reserved.