java 为owasp解析器创建自定义清理程序

Posted 2021-05-08

private String sanitizeBottomText(String bottomText) {
  PolicyFactory allowClassOnI = new HtmlPolicyBuilder().allowAttributes("class").onElements("i").toFactory();
  PolicyFactory policy = Sanitizers.FORMATTING.and(Sanitizers.BLOCKS).and(Sanitizers.FORMATTING).and(Sanitizers.IMAGES).and(Sanitizers.STYLES).and(allowClassOnI);
  return policy.sanitize(bottomText);
}