OWASP / java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

OWASP/java-html-sanitizer Issues

Clarify which BSD license applies
Updated a month ago1
Licensing issue: BSD-3-Clause or BSD-2-Clause?
Updated a month ago1
ClassNotFoundException: org.owasp.shim.Java8Shim after update to 20240325.1
Updated 2 months ago4
On Java8Shim class, better to catch Throwable instead of Error
Updated 2 months ago
Possible to enforce having mutliple attributes on tag?
Updated 2 months ago
rel attributes are reordered in 20220608.1
Updated 2 months ago
Issues encountered while processing <a> tags
Updated 2 months ago
Question: What means Recognize foreign content syntactic context: mathml / svg?
Updated 2 months ago
Issue in 2024x version with styles
Updated 2 months ago
Release 20240325 cannot be transpiled
Closed 2 months ago1
Guava removal breaks compatibility (with JDK9)
Closed 2 months ago13
Sanitizing CSS
Updated 2 months ago3
Encoding malicious code instead of removing it
Updated 2 months ago4
noopener noreferrer getting added every time even if "noopener noreferrer" already exist
Updated 3 months ago4
Vulnerable dependency guava:30.1.jre
Updated 3 months ago3
Discrepancies of results when sanitizing allowed tags
Updated 3 months ago2
CSS property `overflow-wrap` not included in CssSchema definition list
Closed 4 months ago
Html sanitizer repeatedly adds rel="noopener noreferrer" even if it's pre-exist
Closed 4 months ago1
Index out of bound when empty list is passed to `allowAttributes(...).globally()`
Closed 4 months ago
Remove malicious code from svg content
Updated 4 months ago1
<span> elements get removed even when allowed by the policy
Updated 4 months ago2
SECURITY.MD currently does not contain sensible information
Updated 4 months ago
Stripping off the contents when Child Combinator are present in the media queries
Closed 5 months ago11
xxx-large font-size is discarded when allowStyling() is used
Closed 5 months ago6
bug: closing tag for </html> misplaced
Updated 6 months ago1
Stroke and stroke-width are considered invalid
Updated 6 months ago1
Extra characters got added during sanitization of html
Updated 6 months ago1
Behaviour with malformed HTML Input
Closed 6 months ago
Issue while disallowing attributes matching pattern
Updated 6 months ago
Sanitizer converting font names in 'style' attribute value to lower case
Updated 9 months ago
"<" symbol with text inputs getting cleared, after applied the sanitize
Updated a year ago3
org.springframework.web.multipart.support.MissingServletRequestPartException: Required request part 'issueModel' is not present
Updated a year ago1
How to customize the policy after defining the policy.
Updated a year ago
Question: How to not escape characters in plain text
Closed a year ago
I would like to validate
Closed a year ago3
independent attribute auto add value
Updated a year ago
Allow disabling the default attribute guards from HtmlPolicyBuilder
Updated 2 years ago
Encoding.encodeHtmlAttribOnto visibility
Updated 2 years ago
Sanitizing embedded css classes
Updated 2 years ago1
Incorrect escaping for inline svg+xml data image
Updated 2 years ago
Wrong sanitised output for link
Closed 2 years ago7
Stripping off the contents when the extra comment tag has added with never ending
Updated 2 years ago3
How to add new possible values(props) for existing DEFAULT css properties.
Updated 2 years ago
tel URIs: Incorrect escaping due to missing RFC 3966 "tel:" URI syntax support/parsing
Updated 2 years ago
Extra characters got added during sanitization of html
Closed 2 years ago2
float in style attribute will be remove when using allowStyling()
Closed 2 years ago
Content after script tag completely deleted?
Updated 2 years ago1
How to validate and throw error on invalid closing tags?
Updated 2 years ago
Issue for tr td th tbody
Updated 2 years ago
Consider clarifying thread safety javadocs
Updated 2 years ago