Adopt Symfony's HTML Sanitizer

Open on Drupal.org →

Created on 10 January 2024, 11 months ago

Problem/Motivation

...as a replacement for Drupal core's decades old XSS filtering solution.

https://symfony.com/doc/current/html_sanitizer.html

This is a follow on 🐛 Xss:filter() malforms inline image references with data uri scheme Needs work .

https://symfony.com/doc/current/html_sanitizer.html

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

✨ Feature request

Status

Active

Version

11.0 🔥

Component

Last updated 23 minutes ago

Maintained by
🇺🇸United States @effulgentsia
🇬🇧United Kingdom @catch
🇬🇧United Kingdom @alexpott
🇦🇺Australia @larowlan
🇺🇸United States @bnjmnm
🇫🇷France @nod_
🇪🇸Spain @ckrina
🇬🇧United Kingdom @justafish

Created by

🇭🇺Hungary mxr576 Hungary

Live updates comments and jobs are added and updated live.

Sign in to follow issues

Comments & Activities

Issue created by @mxr576
Comment 11 months ago →
🇭🇺Hungary mxr576 Hungary
Comment 11 months ago →
🇭🇺Hungary mxr576 Hungary
Ghost of Drupal Past
@longwave Replacing this code with something more modern would surely be welcome. When I ported KSES to become filter_xss for Drupal 4.5.6/4.6.4 WhatWG was but a year old and HTML5 didn't exist for another two years yet. And as far as I can see, this code didn't change at all in the near two decades since.

Source #3413396-7: Xss:filter() malforms inline image references with data uri scheme →

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024