Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

增加一定程度的 XSS 安全过滤 #51

Closed
88250 opened this issue Apr 10, 2020 · 0 comments
Closed

增加一定程度的 XSS 安全过滤 #51

88250 opened this issue Apr 10, 2020 · 0 comments
Assignees
@88250
Labels
引入特性

Comments

@88250
Copy link
Owner

88250 commented Apr 10, 2020 •
edited
Loading

原始需求：Vanessa219/vditor#226

对最终渲染的 HTML 进行一定程度的 XSS 安全过滤，参考 bluemonday 的 UGC 策略进行实现。

  • 加入配置开关 Sanitize，默认不开启 XSS 安全过滤
  • 对于 HTML 渲染器根据开关进行处理
  • 对于 Vditor 渲染器（WG、IR）固定开启处理
@88250 88250 self-assigned this Apr 10, 2020
@88250 88250 mentioned this issue Apr 10, 2020
Closed
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51
7a4f9a8
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51
4e5782c
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51
303658e
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 Fix #51
8040965
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51 优化 JS 端体积
f3fb66f
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51 优化 JS 端体积
778ad10
88250 added a commit that referenced this issue Apr 10, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51 优化 JS 端体积
da00ea6
@88250 88250 closed this as completed in f8cd1d2 Apr 10, 2020
88250 added a commit that referenced this issue Apr 11, 2020
@88250
🔒 增加一定程度的 XSS 安全过滤 #51
6284590
@88250 88250 mentioned this issue May 7, 2020
Open
@88250 88250 mentioned this issue May 25, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@88250 88250

Labels
引入特性
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@88250