Would it make sense to add a tag/function to validate and or sanitize HTML input to lucee?

106 views
Skip to first unread message

thorste...@googlemail.com

unread,
Apr 22, 2016, 5:35:17 AM4/22/16
to Lucee
Hi,
would it make sense to add a tag/function to validate and/or sanitize HTML input to lucee?

Maybe add all of the following libraries (if the licences allows it)
https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project
https://jsoup.org/
https://www.owasp.org/index.php/Category:OWASP_AntiSamy_Project
 
and let a param in the function decide which to use?

Regards
Thorsten

Michael Sprague

unread,
Apr 22, 2016, 7:50:37 AM4/22/16
to lucee

I love jSoup but considering using it is as easy as dropping the jar into your lib folder and using the following, I’m not sure there’s a need to build it into the language: objJsoup = createObject( "java", "org.jsoup.Jsoup" );​

Mike

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/e66cf8b2-8740-41e6-aa27-a7bb78c58038%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

Harry Klein

unread,
Apr 22, 2016, 8:16:05 AM4/22/16
to lucee

Brad Wood

unread,
Apr 22, 2016, 9:58:54 AM4/22/16
to Lucee
If you're a ColdBox user, just run 

box install cbantisamy

and you can call 

#getIntsance( "antisamy@cbantisamy" ).clean( ... )#

I think things like this which can start to bloat the engine with jars make a great candidate for extensions or modules.

Thanks!

~Brad

To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.


To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/e66cf8b2-8740-41e6-aa27-a7bb78c58038%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.

To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.

Pete Freitag

unread,
Apr 22, 2016, 4:19:43 PM4/22/16
to lu...@googlegroups.com
FYI, ACF11 added two functions for this (uses AntiSamy under the hood):


If you are looking for something that is pure CFML, checkout my scrubHTML function: https://github.com/foundeo/cfml-security/tree/master/securityutil

--
Pete Freitag
https://foundeo.com/ - ColdFusion Consulting & Products
http://hackmycf.com - CFML Server Security Scanner


~Brad

To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.


To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/e66cf8b2-8740-41e6-aa27-a7bb78c58038%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.

To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages