[owasp-antisamy] Help with ignoring invalid attribute name in HTML Tag

Jim Manico jim at manico.net
Mon Feb 28 00:21:47 EST 2011


Have you tried the AntiSamy "clean" function? What output do you get if
you try to "clean" the html (instead of validate?)

- Jim


> Hi All
> 
>  
> 
> One quick question please.
> 
>  
> 
> When AntiSamy encounters invalid HTML as follows (using number as
> attribute name), it will throw exception
> 
>  
> 
> <img src="http://www.xxx.com/xxx.gif" 3="" width="10" height="1"
> border="0">
> 
>  
> 
>  
> 
> How can I update antisamy.xml file to ignore the error or even remove
> it?
> 
>  
> 
> By the way I am using version 1.4.
> 
>  
> 
> Thanks a lot.
> 
>  
> 
> Kind regards
> 
> Chao
> 
>  
> 
> 
> 
> 
> 
> _______________________________________________
> Owasp-antisamy mailing list
> Owasp-antisamy at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-antisamy



More information about the Owasp-antisamy mailing list