Move whitelists out of java into configuration files about caja HOT 11 CLOSED

Comment #1 originally posted by mikesamuel on 2008-01-30T04:20:36.000Z:

I can certainly add one. Can you think of an example that I might add to the spec?

I was thinking of reworking the format to be JSON based instead of XML. Mark pointed
out that JSON is easier to parse, and is better from a security perspective -- an XML
file can cause the parser to open arbitrary network connections unless the parser is
willing to fail to parse valid XML files. Do you guys have any strong opinions on
JSON vs XML?

from caja.

Comment #2 originally posted by mikesamuel on 2008-02-06T22:46:32.000Z:

There don't seem to be any objections to JSON based format, so I'm going to work on
whitelists using the scheme documented at
http://code.google.com/p/google-caja/wiki/CajaWhitelists

from caja.

Comment #3 originally posted by erights on 2008-02-14T02:51:54.000Z:

Based on an over-the-shoulder inspection, LGTM

from caja.

Comment #4 originally posted by erights on 2008-02-14T02:52:56.000Z:

Oops. Ignore my comment. It was actually intended for a different issue.

from caja.

Comment #5 originally posted by justin.kruger on 2008-03-03T19:33:38.000Z:

can we also add allowfullscreen?

from caja.

Comment #6 originally posted by mikesamuel on 2008-03-03T21:45:39.000Z:

You can add whatever you like. See
http://google-caja.googlecode.com/svn/changes/mikesamuel/configurable-html-whitelists-14-Feb-2008/trunk/src/java/com/google/caja/lang/html/html4-attributes-defs.json
for a description of the file format.

from caja.

Comment #7 originally posted by mikesamuel on 2008-03-13T04:05:56.000Z:

<empty>

from caja.

Comment #8 originally posted by Lisaedward.123 on 2013-08-12T04:51:11.000Z:

This is really useful information. Thanks for sharing this article.
Java training in chennai

from caja.

Comment #9 originally posted by Lisaedward.123 on 2013-08-12T04:54:14.000Z:

This is really useful information. Thanks for sharing this article.
Java training in chennai

from caja.

Comment #10 originally posted by Lisaedward.123 on 2013-08-12T04:54:52.000Z:

This is really useful information. Thanks for sharing this article.
http://www.fita.in/java-and-j2ee-training-in-chennai/

from caja.

Comment #11 originally posted by Evergreen10001 on 2013-08-13T06:26:30.000Z:

Thanks for sharing. This is really nice.
http://www.javatraininginchennai.co/

from caja.