New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

xss过滤 #307

Open

maocw opened this issue Nov 1, 2016 · 2 comments

maocw commented Nov 1, 2016

markdown现在不支持xss过滤吧，在编辑的时候，写一个alert，会及时执行诶

Author

maocw commented Nov 1, 2016

请教一下你们主页是如何在页面上过滤xss的

wazsmwazsm commented Nov 8, 2016

获取文本时不要直接存库里面，对数据进行XSS过滤一下再存，用框架的化基本都有XSS过滤的函数、类库这些可以使用，没使用框架可以自己写。

alromh87 added a commit to alromh87/editor.md that referenced this issue


          Improve RegExp filter

f5cb82c

fixes #pandao#612
fixes #pandao#662
fixes #pandao#697
fixes #pandao#700
fixes #pandao#701
fixes #pandao#709
fixes #pandao#715
fixes #pandao#764
fixes #pandao#816

### Probably:
fixes #pandao#307
fixes #pandao#560

alromh87 added a commit to alromh87/editor.md that referenced this issue


          Improve RegExp filter

067619e

fixes #pandao#612
fixes #pandao#662
fixes #pandao#697
fixes #pandao#700
fixes #pandao#701
fixes #pandao#709
fixes #pandao#715
fixes #pandao#764
fixes #pandao#816

fixes #pandao#307
fixes #pandao#560

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment