Commits

Breadcrumbs

History for

onmaster

User selector

All users

Datepicker

All time

Commit History

Commits on Dec 2, 2016

• Issue 37 case tag erroneously was 'javascript' not 'script'

  Show description for af9fa8b
  

  David Kitchen

  committed
  af9fa8b

  Copy full SHA for af9fa8b

Commits on Aug 30, 2016

• Resolves microcosm-cc#35

  

  David Kitchen

  committed
  b428609

  Copy full SHA for b428609

Commits on Aug 29, 2016

• Resolves microcosm-cc#33

  Show description for 0bbdd1a
  

  David Kitchen

  committed
  0bbdd1a

  Copy full SHA for 0bbdd1a

Commits on Jun 30, 2016

• Fix bug in which JavaScript and CSS was HTML escaped

  Show description for dafb236
  

  David Kitchen

  committed
  dafb236

  Copy full SHA for dafb236

Commits on Nov 2, 2015

• Addendum to microcosm-cc#23

  Show description for 4ac6f27
  

  David Kitchen

  committed
  4ac6f27

  Copy full SHA for 4ac6f27

Commits on Nov 1, 2015

• Renamed setOfElementsWithoutAttrs and updated docs

  Show description for 1f0bc57
  

  David Kitchen

  committed
  1f0bc57

  Copy full SHA for 1f0bc57

• Resolves microcosm-cc#23

  Show description for 8ddd9d9
  

  David Kitchen

  committed
  8ddd9d9

  Copy full SHA for 8ddd9d9

Commits on Oct 30, 2015

• fix bug with closingtagtoskip nested

  

  CMogilko

  committed
  aac7dc9

  Copy full SHA for aac7dc9

Commits on Sep 15, 2015

• Resolves issue microcosm-cc#18

  Show description for cf8cb48
  

  David Kitchen

  committed
  cf8cb48

  Copy full SHA for cf8cb48

Commits on Nov 12, 2014

• Use new golang.org/x/... import paths.

  Show description for 40bfba8
  dmitshur

  committed
  40bfba8

  Copy full SHA for 40bfba8

Commits on Sep 2, 2014

• Resolved issue microcosm-cc#9 which caused attributes to be duplicated when certain combinations of anchor options were used by the policy.

  

  David Kitchen

  committed
  88042e4

  Copy full SHA for 88042e4

Commits on Aug 11, 2014

• Added two new link methods, one restricts the use of rel='nofollow' to fully qualified links only, and the other allows you to define a policy in which fully qualified links are forced into target=…

  Show description for 96d73ba
  

  David Kitchen

  committed
  96d73ba

  Copy full SHA for 96d73ba

• Added two new link methods, one restricts the use of rel='nofollow' to fully qualified links only, and the other allows you to define a policy in which fully qualified links are forced into target=…

  Show description for 63440de
  

  David Kitchen

  committed
  63440de

  Copy full SHA for 63440de

Commits on Jul 6, 2014

• Added further whitespace tests on the Sanitize* methods and adjusted the work avoidance within SanitizeBytes to match Sanitize

  

  David Kitchen

  committed
  a18efc8

  Copy full SHA for a18efc8

• Resolves microcosm-cc#8 by adding a new test case comparing the whitespace of the different ways to Sanitize. The string version still performs a TrimSpace() but only to determine whether the input…

  Show description for 800d734
  

  David Kitchen

  committed
  800d734

  Copy full SHA for 800d734

Commits on Jul 5, 2014

• Added other signatures to Sanitize to allow developers to call Sanitize using whatever they have at hand

  

  David Kitchen

  committed
  09d2b81

  Copy full SHA for 09d2b81

• Applied golint and modified the Makefile to not declare the target system so that others can use it too

  

  David Kitchen

  committed
  fb2af23

  Copy full SHA for fb2af23

Commits on Jul 4, 2014

• Add AllowURLSchemeWithCustomPolicy() to allow external fine grain control over allowed URLs.

  Show description for 25b1b99
  dmitshur

  committed
  25b1b99

  Copy full SHA for 25b1b99

• Changed the sets to use struct{} instead of bool as the value of maps to make them more explicitly sets and bring them inline with other Go projects that implement sets.

  

  David Kitchen

  committed
  cede70e

  Copy full SHA for cede70e

• Improved readability of the checks for urlSchemes, skipElemContent and elsWithoutAttributes by using the boolean values assigned to the maps

  

  David Kitchen

  committed
  3829632

  Copy full SHA for 3829632

Commits on Jul 1, 2014

• Updated the way that sanitize acts on element content. We now permit character content between element start and end tags wherever it is a reasonable expectation that the user would have seen that …

  Show description for da925c4
  

  David Kitchen

  committed
  da925c4

  Copy full SHA for da925c4

Commits on Jun 15, 2014

• Added initialization of unexported maps

  

  David Kitchen

  committed
  5e9a715

  Copy full SHA for 5e9a715

• Changed q.cite into a URL policy aware URL

  

  David Kitchen

  committed
  6280065

  Copy full SHA for 6280065

Commits on Jun 13, 2014

• Expanded the documentation considerably and ensured godoc output is complete

  

  David Kitchen

  committed
  af63295

  Copy full SHA for af63295

Commits on Jun 12, 2014

• Removed the useless err from Sanitize(), we've moved to handling our errors rather than making them your problem

  

  David Kitchen

  committed
  bdca1a3

  Copy full SHA for bdca1a3

• URL parsing and sanitisation now implemented, with schema rules. More tests, some helpers to make common things easier. Lots of work analysing HTML elements to ensure meaningful but empty elements …

  Show description for 3616f0c
  

  David Kitchen

  committed
  3616f0c

  Copy full SHA for 3616f0c

• Update of the UGC policy to fully comment and explain the policy decisions made. Updated tests to reflect this, and built-in a default list of HTML elements that are fine without attributes

  

  David Kitchen

  committed
  5adab00

  Copy full SHA for 5adab00

• Moved errors into errors.go so that the type can be checked by callees and it's obvious which errors may be returned. Expanded readme with policy building examples. Renamed the shipped policies fil…

  Show description for 8742d40
  

  David Kitchen

  committed
  8742d40

  Copy full SHA for 8742d40

Commits on Jun 11, 2014

• Added tests for doctype and strict policy

  

  David Kitchen

  committed
  b66e1cc

  Copy full SHA for b66e1cc

• Added more tests, start of the AntiSamy tests, and some more tags that are perfectly fine being empty - will have to look those up at some point

  

  David Kitchen

  committed
  a4b45c4

  Copy full SHA for a4b45c4

• Added link tests and removed the id attribute from the UGC policy as it could allow users to break sites by duplicating identifiers or misdirecting site-specific JavaScript

  

  David Kitchen

  committed
  7c3b3e2

  Copy full SHA for 7c3b3e2

• Adding tests based on those used within OWASP Java Sanitizer

  

  David Kitchen

  committed
  eacda12

  Copy full SHA for eacda12

• Basic version of sanitization added, works for tags and elements in the default policy, does not yet include rel=nofollow on anchors

  

  David Kitchen

  committed
  dff9841

  Copy full SHA for dff9841

• Added stub sanitize.go, lower cased all html element and attribute names within the policy

  

  David Kitchen

  committed
  c708b29

  Copy full SHA for c708b29

Commits on Jun 10, 2014

• Reset repo for a fresh start

  

  David Kitchen

  committed
  9aef982

  Copy full SHA for 9aef982

Pagination

Previous

Next