Re: SimpleHtmlSanitizer is too much simple, where can I find a complete one?

2012-09-19 Thread gong min
yes, I know I can added all the tags I need. But how about HTML tag attributes? css? I want to keep as many as HTML's capability, but also keep far away from HTML xss attacks. I am realy a newbie, not only web but also java. I realy don't know how many things shold be considered. Also, if it work

Re: SimpleHtmlSanitizer is too much simple, where can I find a complete one?

2012-09-18 Thread Brandon Donnelson
I copied it and added all the tags I need. :) -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-web-toolkit/-/IyR9vXDFWCkJ. To post to this group, send email to

Re: SimpleHtmlSanitizer is too much simple, where can I find a complete one?

2012-09-18 Thread Ed
> > supported, where can I find a complete one? Why not make one yourself? The one in GWT is just an example... (I made one myself based on the GWT one). Op dinsdag 18 september 2012 16:01:45 UTC+2 schreef 退5的工科苹岷 het volgende: > > Dear all > > I want to save RichTextArea content into databas

SimpleHtmlSanitizer is too much simple, where can I find a complete one?

2012-09-18 Thread gong min
Dear all I want to save RichTextArea content into database, and it will show in HTML widgets later. Before save, RichTextArea.getHtml() will return HTML String, I have to Sanitize this String by SimpleHtmlSanitizer. But it is too much simple, even are not supported, where can I find a complete