HTML sanitization
Alexis King <[email protected]>
| Newsgroups | gmane.comp.lang.racket.user,gmane.lisp.scheme.plt |
|---|---|
| Message-ID | <[email protected]> |
Has anyone written an HTML sanitizer in Racket? A naïve one is not too difficult, given that it’s possible to create a very simple whitelist of elements and attributes, but getting it completely right isn’t as easy at it seems. For example, I’d like to allow <a href="..."> elements for the most part, but I’d still need to disallow attributes that use the <a href="javascript:..."> URL scheme to prevent XSS attacks using that vector. I’d be willing to try writing one myself, but I was wondering if anyone had already attempted something like this before so I could save myself the effort. Alexis -- You received this message because you are subscribed to the Google Groups "Racket Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to racket-users+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/[email protected] For more options, visit https://groups.google.com/d/optout.