Innovation Award
 April 2009
Number 9 |
When displaying HTML content submitted to a site by untrusted users, you need to be careful to not allow cross-site scripting and cross-site request forgery security exploits that can be performed by specially crafted HTML and Javascript.
Mozilla foundation people have defined a Content Security Policy that defines which HTML elements can be or not be included in a page.
This class can filter untrusted HTML using Mozilla Content Security Policy rules.
Manuel Lemos |
This class can be used to filter HTML based on Content Security Policy.
It takes a DOM Document object loaded with the structure of an HTML document and process it to find violations of the Content Security Policy definition.
The class changes the document structure to filter and enforce the policy definitions, so the application can serve a compliant HTML document.
| There are not enough user ratings to display for this class. |
| Class |
Dependency |
Why it is needed |
| IDNA Convert |
Optional |
convert to punycode |
No application links were specified for this class.

If you know an application of this package, send a message to the
author to add a link here.