Revision history for SafeHTML
Revision [18252]
Last edited on 2008-01-28 00:10:43 by JavaWoman [Modified links pointing to docs server]Additions:
>>**see also:**---[[Docs:ThirdPartyInfo Third-party software bundled with Wikka]]>>
Deletions:
Additions:
=====Safely embedding HTML in Wikka pages=====
>>**see also:**---[[ThirdPartyInfo Third-party software bundled with Wikka]]>>
>>**see also:**---[[ThirdPartyInfo Third-party software bundled with Wikka]]>>
Revision [4307]
Edited on 2005-01-09 15:01:06 by RomanIvanov [title + reference to third-party info]Additions:
Wikka uses the SafeHTML Parser by RomanIvanov.
This parser strips down all potentially dangerous content within HTML:
- opening tag without its closing tag
- closing tag without its opening tag
- any of these tags: “base”, “basefont”, “head”, “html”, “body”, “applet”, “object”, “iframe”, “frame”, “frameset”, “script”, “layer”, “ilayer”, “embed”, “bgsound”, “link”, “meta”, “style”, “title”, “blink”, “xml” etc.
- any of these attributes: on*, data*, dynsrc
- javascript:/vbscript:/about: etc. protocols
- expression/behavior etc. in styles
- any other active content
Check [[http://pixel-apes.com/safehtml the SafeHTML home page]] for more info.
This parser strips down all potentially dangerous content within HTML:
- opening tag without its closing tag
- closing tag without its opening tag
- any of these tags: “base”, “basefont”, “head”, “html”, “body”, “applet”, “object”, “iframe”, “frame”, “frameset”, “script”, “layer”, “ilayer”, “embed”, “bgsound”, “link”, “meta”, “style”, “title”, “blink”, “xml” etc.
- any of these attributes: on*, data*, dynsrc
- javascript:/vbscript:/about: etc. protocols
- expression/behavior etc. in styles
- any other active content
Check [[http://pixel-apes.com/safehtml the SafeHTML home page]] for more info.
Deletions:
This parser strips down all potentially dangerous content within HTML:
- opening tag without its closing tag
- closing tag without its opening tag
- any of these tags: “base”, “basefont”, “head”, “html”, “body”, “applet”, “object”, “iframe”, “frame”, “frameset”, “script”, “layer”, “ilayer”, “embed”, “bgsound”, “link”, “meta”, “style”, “title”, “blink”, “xml” etc.
- any of these attributes: on*, data*, dynsrc
- javascript:/vbscript:/about: etc. protocols
- expression/behavior etc. in styles
- any other active content
Check [[http://www.npj.ru/kukutz/safehtml the SafeHTML home page]] for more info.
Additions:
Check [[http://www.npj.ru/kukutz/safehtml the SafeHTML home page]] for more info.
Deletions:
Additions:
This parser strips down all potentially dangerous content within HTML:
