Modifier and Type | Interface | Description |
---|---|---|
static interface |
AttributePolicy.JoinableAttributePolicy |
An attribute policy that is joinable.
|
Modifier and Type | Class | Description |
---|---|---|
class |
FilterUrlByProtocolAttributePolicy |
An attribute policy for attributes whose values are URLs that requires that
the value have no protocol or have an allowed protocol.
|
Modifier and Type | Field | Description |
---|---|---|
static AttributePolicy |
AttributePolicy.IDENTITY_ATTRIBUTE_POLICY |
An attribute policy that returns the value unchanged.
|
static AttributePolicy |
AttributePolicy.REJECT_ALL_ATTRIBUTE_POLICY |
An attribute policy that rejects all values.
|
Modifier and Type | Method | Description |
---|---|---|
static AttributePolicy |
AttributePolicy.Util.join(AttributePolicy... policies) |
An attribute policy equivalent to applying all the given policies in
order, failing early if any of them fails.
|
Modifier and Type | Method | Description |
---|---|---|
HtmlPolicyBuilder |
HtmlPolicyBuilder.allowUrlsInStyles(AttributePolicy newStyleUrlPolicy) |
Allow URLs in CSS styles.
|
static AttributePolicy |
AttributePolicy.Util.join(AttributePolicy... policies) |
An attribute policy equivalent to applying all the given policies in
order, failing early if any of them fails.
|
HtmlPolicyBuilder.AttributeBuilder |
HtmlPolicyBuilder.AttributeBuilder.matching(AttributePolicy attrPolicy) |
Filters and/or transforms the attribute values
allowed by later
allow* calls. |
Copyright © 2019 OWASP. All rights reserved.