On Thu, Jun 10, 2010 at 2:11 PM, Mike Stay <[email protected]> wrote:

> On Thu, Jun 10, 2010 at 1:48 PM, Daniel Jomphe <[email protected]>
> wrote:
> > Gareth & Jasvir,
> >
> > Anything that runs only client-side is _underkill_ for my needs :)
> >
> > I really need server-side sanitization.
>
> You could always run them in Rhino or V8.
>

Sorry I misinterpreted - I didn't realize you needed a serverside solution.
 If you choose HTML_SAFE_STATIC as the goal of your pipeline, that should
give you safe html and safe css but without javascript.  I am not sure goals
are exposed to the commandline in PluginCompilerMain but if you're
integrating with an existing java pipeline, you can create an instance of
c.g.caja.plugin.PluginCompiler with the appropriate goal.

--
> Mike Stay - [email protected]
> http://www.cs.auckland.ac.nz/~mike
> http://reperiendi.wordpress.com
>

Reply via email to