SanitizeHtml Class Does not Protect Against Encoded Html

XMLWordPrintable

    • Type: Defect
    • Resolution: Done
    • Priority: Standard
    • None
    • Affects Version/s: None
    • Component/s: Security
    • None

      Problem:

      If html encoded strings are passed into our SanitizeHtml class they will be ignored.

      Acceptance Criteria:

      Improve SanitizeHtml class to address encoded HTML.
      Develop test cases for sanitization process.
      Trim strings, generally remove HTML characters, script tags, etc.
      Apply same methods to HTML encoded strings.

      Note: This class is applied to output (xml in particular) in general.

              Assignee:
              Christy Grant
              Reporter:
              Nathan Hook
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: