diff options
| author | Thibault Delavallée <tde@openerp.com> | 2012-12-27 10:56:23 +0100 |
|---|---|---|
| committer | Thibault Delavallée <tde@openerp.com> | 2012-12-27 10:56:23 +0100 |
| commit | f7036e02fdca7b3952df30adb0b8e72c3e85940d (patch) | |
| tree | 0e1f91269399487b39a55665f87c76bd9591de01 /addons/web/doc/module/static/src/css/web_example.css.1.diff | |
| parent | 502abd4350b486fb5f64cb4200343b8916427d1b (diff) | |
| parent | 1c7b1b53d49fb48de3f3784e3a41e806ba35f135 (diff) | |
[MERGE] [IMP] HTML Sanitizer upgrade. Make it more tolerant to allow using style.
Server branch: html_sanitize now uses the builtin cleaner of lxml.html.clean. Style attribute is now allowed; the cleaner ensures no javascript or malicious code goes through those attributes. The old code is replaced by the use of the cleaner, called inside the current html_sanitize function.
Updated and added tests for the sanitizer. Malicious code injection is tested (mainly XSS). EDI-like html code is also tested.
bzr revid: tde@openerp.com-20121227095623-h13uth6dpmtgcssj
Diffstat (limited to 'addons/web/doc/module/static/src/css/web_example.css.1.diff')
0 files changed, 0 insertions, 0 deletions