Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Support HTML5 data-* attributes

Description

Antisamy drops any of the data-* attributes that some providers insert to store/embed custom data. These tags should be allowed somehow.

http://www.w3schools.com/tags/att_global_data.asp

It doesn't look like it will be straightforward to add them all though.
https://github.com/nhu313/owaspantisamy/issues/159

Somewhat similar to but that only adds one tag.

Environment

None

Test Plan

None

Attachments

1

Activity

Show:

Robert Long January 13, 2017 at 9:56 AM

Sweet! Thanks, man!

Hate to see my amazing work go unnoticed!

Matthew Jones January 13, 2017 at 9:52 AM

I put the PR for this over where antisamy seems to be resurrected from at https://github.com/nahsra/antisamy/pull/5. Maybe it will get into a future release now.

Laura Gekeler April 11, 2016 at 12:58 PM

I would vote for moving this to a "minor" to come in after 11.0 is released.

Matthew Jones April 11, 2016 at 11:51 AM

Nevermind, I found the code. It would still require us maintaining our own fork of antisamy or getting it back in somewhere. With Google Code gone, I don't know where that somewhere is yet. I'm attaching it though.

Matthew Jones April 11, 2016 at 11:38 AM
Edited

No, unfortunately only data-mathml. To add them we'd have to fork antisamy because it doesn't support it

(Unicon) had done this back in 2013 but Google removed all the forks of this branch and he didn't have a local copy of the code anymore last time I asked.

https://code.google.com/archive/p/owaspantisamy/issues/159

So it would have to be rewritten or we'd have to use something other than antisamy.

Fixed

Details

Assignee

Reporter

Labels

Components

Fix versions

Affects versions

Priority

Created February 11, 2016 at 7:22 AM
Updated April 25, 2018 at 3:34 PM
Resolved August 22, 2017 at 4:08 AM