Comments (6)
Hi, I added an small example into the README file. (Example 5.2)
from anti-xss.
thank you very much, I will test it today
from anti-xss.
I see it , I think it solve our problem, just other question , on tests I setup AntiXSS.php
and Unicode plugin and didn't use sanfony files and other class , can we just use AntiXSS
and Unicode
?
from anti-xss.
No, the Symfony Polyfills (https://github.com/symfony/polyfill) are needed on some servers, because of maybe missing php-libraries. So we need the polyfill for e.g. "mb_*" so that we can convert all HTML-Entities on all servers (security by default).
from anti-xss.
Thank for reply , we use zend fremwork , can I use zend intend of Symfony ?
than we need copy all of this class :
- ircmaxell
- paragonie
- symfony
- voku
and can you please tell me method for test all of class install true on no?
thanks
from anti-xss.
With version 4.0.0 of AntiXSS (PHP >= 7.0 support) we got rid of many dependencies and fallbacks.
And if your servers don't need the polyfills you can use it without any extra libs. You can add something like that in you composer.json
-file.
...
"replace": {
"symfony/polyfill-php72": "*",
"symfony/polyfill-iconv": "*",
"symfony/polyfill-intl-grapheme": "*",
"symfony/polyfill-intl-normalizer": "*",
"symfony/polyfill-mbstring": "*"
},
...
from anti-xss.
Related Issues (20)
- JavaScript keywords will be removed in pre/code tag HOT 1
- Valid hex characters invalidates urls and remove them from the output
- False positive on closed sorce tag. HOT 2
- FP: text like " system (e.g. Windows 10, Mac OS X etc.) "
- false positive on name HOT 1
- false positive in url geolocation.com HOT 2
- xss_clean bypass (false negative) on javascript context HOT 1
- style=foo:expres\sion(1058+{valueOf:alert})} and style=color:expres\sion(1834+{toString:alert} XSS Issue HOT 1
- Just question about htmlspecialchars and this HOT 1
- False postive "Behavior:"
- False positive 'abc < abcd' HOT 3
- Why is my output different from your example
- Example 6 returns unexpected false in isXssFound()
- JSON Encoded HTML attribute issues
- Fix failing test "testSvgXssFileV1"
- Please add big warning that this package should not be included in any non-UTF-8 application or package dependency
- All Post and GET Celan HOT 1
- XSS in Angular and AngularJS HOT 1
- False positive for Document.aspx in link HOT 5
- False positive for "wordContainingFile(" in `_sanitize_naughty_javascript` HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from anti-xss.