SLING-7741 - org.apache.sling.xss.impl.XSSAPIImpl#getValidHref doesn't correctly handle the ":" character in URL fragments

* implemented the URI grammar from RFC3986 as a set of regular expressions to allow colons to be used in the URIs
* modified mangleNamespaces function to only perform namespace mangling for paths
* extended tests
* updated AntiSamy
* updated dependencies and provided more tests
6 files changed
tree: aadb645cec4fd3abed8e4cf56586536cf293c85b
  1. src/
  2. .gitignore
  3. LICENSE
  4. pom.xml
  5. README.md
README.md

Build Status Test Status Maven Central JavaDocs License

Apache Sling XSS Protection

This module is part of the Apache Sling project.

The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content:

  1. org.apache.sling.xss.XSSAPI
  2. org.apache.sling.xss.XSSFilter

Please check the JavaDoc of each service to find out what methods they provide.