[Owasp-antisamy] inline style problem
Andrew Grosset
ag5743 at telus.net
Sat Mar 14 14:50:58 EDT 2009
Hi,
when trying to parse an inline style such as <div
style='color:#000'></div> it returns false
showing ":"(colon) is not allowed even though my regular expression
allows it. To get round the problem
I change all "style" to "astyle" (any other word will do) and change the
xml file as well ("style" changed to "astyle").
I am using Railo (coldfusion).
anyone else had a problem with inline style, is this a bug, although my
hack of changing "style" to something else works
it seems to indicate a fundamental problem somewhere?
Andrew.
More information about the Owasp-antisamy
mailing list