samlh / JSanity Public

forked from microsoft/JSanity

Notifications You must be signed in to change notification settings
Fork 0
Star 0

A secure-by-default, performance, cross-browser client-side HTML sanitization library

0 stars 37 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 67 Commits
AUTHORS		AUTHORS
CONTRIBUTORS		CONTRIBUTORS
LICENSE		LICENSE
README.md		README.md
git		git
jsanity-0.3.js		jsanity-0.3.js
jsanity-benchmark-pretty.htm		jsanity-benchmark-pretty.htm
jsanity-demo-pretty.htm		jsanity-demo-pretty.htm

Repository files navigation

jSanity

A secure-by-default, performant, cross-browser client-side HTML sanitization library.

Reference:
OWASP AppSec EU 2013 Talk
Slides

Status

2/18/2016: @kh9n has completed a significant refactoring.

jQuery and setImmediate dependencies were removed!
jSanity now supports both sync and async modes.
Version rev'd to 0.3.

Demo / Benchmark pages

Todo

Support for more elements and attributes
Update / document the demo & benchmark pages
Unit tests
Better solution for STYLE elements
Integration with one or more javascript frameworks
Experimental override for default sanitization in various web platforms
Leverage newer features of the web platform (Shadow DOM, etc.)
Remove jQuery usage from benchmark page
General code clean up / modernization

Special thanks for making jSanity a reality:

Ben Livshits
Gareth Heyes
Loris D'Antoni
Mario Heiderich
Matt Thomlinson
Michael Fanning

About

A secure-by-default, performance, cross-browser client-side HTML sanitization library

Report repository

Releases

No releases published

Packages

No packages published

Languages

JavaScript 82.4%
HTML 17.6%