[Owasp-antisamy] CSS level represented in the default policy files?
arshan.dabirsiaghi at aspectsecurity.com
Fri Oct 15 10:32:21 EDT 2010
Yes, the CSS is getting a bit dated. I haven't looked at updating them.
Based on your knowledge of CSS, do you think this will be a big effort?
From: owasp-antisamy-bounces at lists.owasp.org
[mailto:owasp-antisamy-bounces at lists.owasp.org] On Behalf Of Paul Curren
Sent: Friday, October 15, 2010 6:58 AM
To: owasp-antisamy at lists.owasp.org
Subject: [Owasp-antisamy] CSS level represented in the default policy
I'm using a policy file based on one of the included demo policy files.
It looks to me that these policy files are based on CSS 1 (16 colour
names instead of 17, etc).
Is that correct? And if so is there any plan to update them to cover CSS
Owasp-antisamy mailing list
Owasp-antisamy at lists.owasp.org
More information about the Owasp-antisamy