Comments (11)
Comment #1 originally posted by mikesamuel on 2008-01-30T04:20:36.000Z:
I can certainly add one. Can you think of an example that I might add to the spec?
I was thinking of reworking the format to be JSON based instead of XML. Mark pointed
out that JSON is easier to parse, and is better from a security perspective -- an XML
file can cause the parser to open arbitrary network connections unless the parser is
willing to fail to parse valid XML files. Do you guys have any strong opinions on
JSON vs XML?
from caja.
Comment #2 originally posted by mikesamuel on 2008-02-06T22:46:32.000Z:
There don't seem to be any objections to JSON based format, so I'm going to work on
whitelists using the scheme documented at
http://code.google.com/p/google-caja/wiki/CajaWhitelists
from caja.
Comment #3 originally posted by erights on 2008-02-14T02:51:54.000Z:
Based on an over-the-shoulder inspection, LGTM
from caja.
Comment #4 originally posted by erights on 2008-02-14T02:52:56.000Z:
Oops. Ignore my comment. It was actually intended for a different issue.
from caja.
Comment #5 originally posted by justin.kruger on 2008-03-03T19:33:38.000Z:
can we also add allowfullscreen?
from caja.
Comment #6 originally posted by mikesamuel on 2008-03-03T21:45:39.000Z:
You can add whatever you like. See
http://google-caja.googlecode.com/svn/changes/mikesamuel/configurable-html-whitelists-14-Feb-2008/trunk/src/java/com/google/caja/lang/html/html4-attributes-defs.json
for a description of the file format.
from caja.
Comment #7 originally posted by mikesamuel on 2008-03-13T04:05:56.000Z:
<empty>
from caja.
Comment #8 originally posted by Lisaedward.123 on 2013-08-12T04:51:11.000Z:
This is really useful information. Thanks for sharing this article.
Java training in chennai
from caja.
Comment #9 originally posted by Lisaedward.123 on 2013-08-12T04:54:14.000Z:
This is really useful information. Thanks for sharing this article.
Java training in chennai
from caja.
Comment #10 originally posted by Lisaedward.123 on 2013-08-12T04:54:52.000Z:
This is really useful information. Thanks for sharing this article.
http://www.fita.in/java-and-j2ee-training-in-chennai/
from caja.
Comment #11 originally posted by Evergreen10001 on 2013-08-13T06:26:30.000Z:
Thanks for sharing. This is really nice.
http://www.javatraininginchennai.co/
from caja.
Related Issues (20)
- playground: empty "cajoled source" HOT 1
- Allow <video autoplay muted> in sanitizer HOT 1
- HTML comments are removed by sanitize
- API documentation link is dead HOT 10
- "show in folder" in chrome/chomium downloads just opens folder in caja, but does not selects particular file HOT 3
- Content of iframe's not loading HOT 1
- Missing comma in css-whitelist.json HOT 1
- Html.Exploit.CVE_2016_3198-1 HOT 1
- "tel", "sms", and "geo" uri schemes stripped out HOT 1
- Uncaught TypeError: Cannot read property 'get' of undefined HOT 2
- Support Blob URLs and window.URL API HOT 3
- Documentation for hosting caja server HOT 5
- Error while processing the html HOT 2
- Caja does not make use of SMB2 FSCTL_SRV_COPYCHUNK HOT 1
- null pointer error HOT 2
- Compare strings with"==" or "!="
- csslexer lockup the browser HOT 1
- URI.prototype.getQuery may unexpectedly decode "%2B" to SPACE due to order of operations HOT 1
- [debug.js] TODO(erights): "Explore alternatives to using "instanceof Error" HOT 1
- Unreleased Resource: Streams
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from caja.