Additional allow attributes & tags - #259

Open

dab246 wants to merge 23 commits into

google:masterfrom

linagora:support_mail

Commits on Oct 23, 2024

Custom allow attributes & tags
dab246
committed
0fda3d8
Add validate base64 image tag
dab246
committed
c663ad9
Add validate CID source for image tag
dab246
committed
01c37cd

Commits on Oct 24, 2024

Allow `id` & `class` attribute
dab246
committed
fda32cd

Commits on Dec 15, 2025

feat(sanitize-html): add secure, high-performance HTML sanitization engine

dab246
authored and
hoangdat
committed
efa2b4e
feat(sanitize-html): add document for Secure HTML Sanitization Engine

dab246
authored and
hoangdat
committed
dc329ab
feat(sanitize-html): Improve sanitize html to XSS prevention

dab246
authored and
hoangdat
committed
1221aaf
feat(sanitize-html): prevent content loss by preserving text nodes and update tests

dab246
authored and
hoangdat
committed
df22ec3
fix(css-sanitizer): allow valid url() and restore missing allowed properties

dab246
authored and
hoangdat
committed
1db2906
fix(sanitize_html): remove group test is not implemented

dab246
authored and
hoangdat
committed
ebb41b9
fix(css-sanitizer): block protocol-relative URLs and comment-obfuscated URLs in CSS sanitizer

dab246
authored and
hoangdat
committed
53f0346
fix(css-sanitizer): Add more test case for block protocol-relative URLs and comment-obfuscated URLs in CSS sanitizer

dab246
authored and
hoangdat
committed
3aa9c82
fix(css-sanitizer): allow safe overflow properties and add comprehensive test coverage

dab246
authored and
hoangdat
committed
eac5302
fix(html_sanitizer): some Nitpick comments and conversation of coderabbit

dab246
authored and
hoangdat
committed
d8214f5
fix(sanitize): keep non-executable JS-like content in text nodes

dab246
authored and
hoangdat
committed
a47497e
Bump version to v3.0.0
dab246
committed
6627e13

Commits on Jan 9, 2026

sanitize_html: preserve and safely sanitize internal CSS

dab246
authored and
hoangdat
committed
cb19cbd
sanitize_html: Fix potential attribute injection via unescaped media attribute.

dab246
authored and
hoangdat
committed
87ac388
sanitize_html: preserve nested CSS with token-level sanitization

dab246
authored and
hoangdat
committed
9db73f5
fix(sanitizer): mitigate potential ReDoS in regex patterns

dab246
authored and
hoangdat
committed
1247d36
Bump version to v3.0.1
dab246
committed
21f9da9

Commits on May 18, 2026

fix(sanitizer): tighten unicodeEscapeReg to require 3+ consecutive \XX sequences
dab246
committed
a1e6dc0
Bump version to v3.0.2
dab246
committed
8ca32f0