[Owasp-antisamy] org.w3c.dom problem using antisamy

Arshan Dabirsiaghi arshan.dabirsiaghi at aspectsecurity.com
Thu Apr 17 14:56:25 EDT 2008


Did the 1.1.1 release meet your needs regarding this issue?


From: owasp-antisamy-bounces at lists.owasp.org on behalf of Arnout Engelen
Sent: Tue 4/15/2008 5:00 AM
To: owasp-antisamy at lists.owasp.org
Subject: [Owasp-antisamy] org.w3c.dom problem using antisamy


When using antisamy in a webapp running under resin 2 (don't ask), I ran

Caused by: java.lang.UnsupportedOperationException
        at com.caucho.xml.QAbstractNode.getTextContent(QAbstractNode.java:301)
        at org.owasp.validator.html.Policy.parseTagRules(Unknown Source)
        at org.owasp.validator.html.Policy.<init>(Unknown Source)
        at org.owasp.validator.html.Policy.getInstance(Unknown Source)

Looks like Policy.parseTagRules uses a method of org.w3c.dom that's not always
implemented. (also, it'd be valuable for debugging if releases were built with
line number information)

I worked around it (somewhat hackishly) by setting a system property before
initializing AntiSamy like this:


Perhaps we should make a wikipage to record these kind of gotcha's and
solutions for them?

Kind regards,

Owasp-antisamy mailing list
Owasp-antisamy at lists.owasp.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-antisamy/attachments/20080417/b1da815b/attachment.html 

More information about the Owasp-antisamy mailing list