Package org.apache.ofbiz.base.html

Class CustomSafePolicy

  • All Implemented Interfaces:
    SanitizerCustomPolicy
    public class CustomSafePolicy
extends java.lang.Object
implements SanitizerCustomPolicy
    Based on the AntiSamy Slashdot example. Slashdot (http://www.slashdot.org/) is a techie news site that allows users to respond anonymously to news posts with very limited HTML markup. Now Slashdot is not only one of the coolest sites around, it's also one that's been subject to many different successful attacks. Even more unfortunate is the fact that most of the attacks led users to the infamous goatse.cx picture (please don't go look it up). The rules for Slashdot are fairly strict: users can only submit the following HTML tags and no CSS: <b>, <u>, <i>, <a>, <blockquote>. Accordingly, we've built a policy file that allows fairly similar functionality. All text-formatting tags that operate directly on the font, color or emphasis have been allowed.

    • Field Summary

      Fields 
      Modifier and Type Field Description
      static org.owasp.html.PolicyFactory POLICY_DEFINITION
      A policy that can be used to produce policies that sanitize to HTML sinks via PolicyFactory.apply(org.owasp.html.HtmlStreamEventReceiver).

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.owasp.html.PolicyFactory getSanitizerPolicy()
      Used for getting the policy from the custom class which implements this interface

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Field Detail

      • POLICY_DEFINITION

        public static final org.owasp.html.PolicyFactory POLICY_DEFINITION
        A policy that can be used to produce policies that sanitize to HTML sinks via PolicyFactory.apply(org.owasp.html.HtmlStreamEventReceiver).

    • Constructor Detail

      • CustomSafePolicy

        public CustomSafePolicy()

    • Method Detail

      • getSanitizerPolicy

        public org.owasp.html.PolicyFactory getSanitizerPolicy()
        Description copied from interface: SanitizerCustomPolicy
        Used for getting the policy from the custom class which implements this interface
        Specified by:
        getSanitizerPolicy in interface SanitizerCustomPolicy
        Returns:
        the policy specified in the class will be returned