[Owasp-antisamy] CSS level represented in the default policy files?

Arshan Dabirsiaghi arshan.dabirsiaghi at aspectsecurity.com
Fri Oct 15 10:32:21 EDT 2010

Yes, the CSS is getting a bit dated. I haven't looked at updating them.
Based on your knowledge of CSS, do you think this will be a big effort?


-----Original Message-----
From: owasp-antisamy-bounces at lists.owasp.org
[mailto:owasp-antisamy-bounces at lists.owasp.org] On Behalf Of Paul Curren
Sent: Friday, October 15, 2010 6:58 AM
To: owasp-antisamy at lists.owasp.org
Subject: [Owasp-antisamy] CSS level represented in the default policy

Hi there.

I'm using a policy file based on one of the included demo policy files.
It looks to me that these policy files are based on CSS 1 (16 colour
names instead of 17, etc).

Is that correct? And if so is there any plan to update them to cover CSS
2.1 styles?


Paul C

Owasp-antisamy mailing list
Owasp-antisamy at lists.owasp.org

More information about the Owasp-antisamy mailing list