All geek questions in one place

HTMLPurifier, check the whole HTML document

I am using HTMLPurifier to validate XSS throughout an HTML document. The problem is that it seems to highlight everything that is not inside the tags <body>. But I want to save everything, just looking at serious XSS attacks.

Any ideas on how to resolve the <HTML>, <HEAD>, <META>etc.

+3
source share
3 answers

David, I just searched the HTMLPurifier support forum and saw that you were busy.

But perhaps you missed a message from a few months ago that addresses your exact problem , in particular the answer:

() HTML Purifier 5.x series; HTML-.

DTD .

+4

, XSS, "head".

0

HTML , ( "div" ). "span" . "" "html".

0

Source: https://habr.com/ru/post/1719094/

More articles:


All Articles