Uploaded image for project: 'Gateway'
  1. Gateway
  2. GTWY-5560

SanitizeHtml Class Does not Protect Against Encoded Html

XMLWordPrintable

    • Icon: Defect Defect
    • Resolution: Done
    • Icon: Standard Standard
    • None
    • None
    • Security
    • None

      Problem:

      If html encoded strings are passed into our SanitizeHtml class they will be ignored.

      Acceptance Criteria:

      Improve SanitizeHtml class to address encoded HTML.
      Develop test cases for sanitization process.
      Trim strings, generally remove HTML characters, script tags, etc.
      Apply same methods to HTML encoded strings.

      Note: This class is applied to output (xml in particular) in general.

              cgrant Christy Grant
              nhook Nathan Hook
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: