Issue 1443 in google-caja: Whitelist data-* attributes

15 views
Skip to first unread message

googl...@googlecode.com

unread,
Jan 30, 2012, 2:57:46 PM1/30/12
to google-ca...@googlegroups.com
Status: New
Owner: ----
Labels: Type-Defect Priority-Medium jQuery

New issue 1443 by metaw...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

Domado strips unknown attributes. We know data-* attributes are safe and
are used all over the place in jQuery.

This'll require changing both Domado and the sanitizer.

googl...@googlecode.com

unread,
Feb 2, 2012, 2:51:49 PM2/2/12
to google-ca...@googlegroups.com
Updates:
Status: Duplicate
Mergedinto: 1041

Comment #1 on issue 1443 by metaw...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

(No comment was entered for this change.)

googl...@googlecode.com

unread,
Feb 2, 2012, 2:59:54 PM2/2/12
to google-ca...@googlegroups.com

Comment #2 on issue 1443 by jas...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

I think we should keep this separate from the expandos since we can handle
the data-* attributes explicitly.

googl...@googlecode.com

unread,
Feb 2, 2012, 3:03:56 PM2/2/12
to google-ca...@googlegroups.com
Updates:
Status: Accepted
Mergedinto:

Comment #3 on issue 1443 by metaw...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

(No comment was entered for this change.)

googl...@googlecode.com

unread,
Feb 10, 2012, 3:05:22 PM2/10/12
to google-ca...@googlegroups.com
Updates:
Owner: metaw...@gmail.com

Comment #4 on issue 1443 by metaw...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

For my information: http://codereview.appspot.com/5541069/ is a CL on which
I could model whitelisting data-* attributes.

googl...@googlecode.com

unread,
Feb 22, 2012, 1:42:46 PM2/22/12
to google-ca...@googlegroups.com
Updates:
Status: Fixed

Comment #5 on issue 1443 by metaw...@gmail.com: Whitelist data-* attributes
http://code.google.com/p/google-caja/issues/detail?id=1443

@r4783

Reply all
Reply to author
Forward
0 new messages