bluemonday

package module

Go to main page

Versions in this module

v1

v1.0.27

Jul 4, 2024

v1.0.26

Oct 12, 2023

v1.0.25

Jul 18, 2023

retracted

Changes in this version

type Policy

+ func (p *Policy) RewriteSrc(fn urlRewriter) *Policy

v1.0.24

May 18, 2023

retracted

Changes in this version

type Policy

+ func (p *Policy) AllowURLSchemesMatching(r *regexp.Regexp) *Policy

v1.0.23

Mar 7, 2023

retracted

v1.0.22

Jan 28, 2023

retracted

v1.0.21

Oct 3, 2022

retracted

v1.0.20

Sep 4, 2022

retracted

v1.0.19

Jul 1, 2022

retracted

v1.0.18

Feb 7, 2022

retracted

v1.0.17

Dec 31, 2021

retracted

Changes in this version

type Policy

+ func (p *Policy) AllowIFrames(vals ...SandboxValue)

+ func (p *Policy) RequireSandboxOnIFrame(vals ...SandboxValue)

+ type SandboxValue int64

+ const SandboxAllowDownloads

+ const SandboxAllowDownloadsWithoutUserActivation

+ const SandboxAllowForms

+ const SandboxAllowModals

+ const SandboxAllowOrientationLock

+ const SandboxAllowPointerLock

+ const SandboxAllowPopups

+ const SandboxAllowPopupsToEscapeSandbox

+ const SandboxAllowPresentation

+ const SandboxAllowSameOrigin

+ const SandboxAllowScripts

+ const SandboxAllowStorageAccessByUserActivation

+ const SandboxAllowTopNavigation

+ const SandboxAllowTopNavigationByUserActivation

v1.0.16

Oct 18, 2021

retracted

Changes in this version

type Policy

+ func (p *Policy) AllowUnsafe(allowUnsafe bool) *Policy

v1.0.15

Jul 7, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.14

Jun 17, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

Changes in this version

type Policy

+ func (p *Policy) SanitizeReaderToWriter(r io.Reader, w io.Writer) error

v1.0.13

Jun 16, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.12

Jun 16, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.11

Jun 12, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.10

Jun 10, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

Changes in this version

type Policy

+ func (p *Policy) AllowComments()

v1.0.9

Apr 23, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.8

Apr 13, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.7

Apr 9, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

Changes in this version

type Query

+ HasValue bool

v1.0.6

Apr 5, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

Changes in this version

type Policy

+ func (p *Policy) RequireCrossOriginAnonymous(require bool) *Policy

+ type Query struct

+ Key string

+ Value string

v1.0.5

Mar 27, 2021

retracted

GO-2022-0588

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

v1.0.4

Aug 13, 2020

retracted

GO-2022-0588 +1 more

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

GO-2022-0762: Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

v1.0.3

Nov 19, 2019

retracted

GO-2022-0588 +1 more

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

GO-2022-0762: Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

Changes in this version

+ func AlignContentHandler(value string) bool

+ func AlignItemsHandler(value string) bool

+ func AlignSelfHandler(value string) bool

+ func AllHandler(value string) bool

+ func AnimationDelayHandler(value string) bool

+ func AnimationDirectionHandler(value string) bool

+ func AnimationDurationHandler(value string) bool

+ func AnimationFillModeHandler(value string) bool

+ func AnimationHandler(value string) bool

+ func AnimationIterationCountHandler(value string) bool

+ func AnimationNameHandler(value string) bool

+ func AnimationPlayStateHandler(value string) bool

+ func BackfaceVisibilityHandler(value string) bool

+ func BackgroundAttachmentHandler(value string) bool

+ func BackgroundBlendModeHandler(value string) bool

+ func BackgroundClipHandler(value string) bool

+ func BackgroundHandler(value string) bool

+ func BackgroundOriginHandler(value string) bool

+ func BackgroundPositionHandler(value string) bool

+ func BackgroundRepeatHandler(value string) bool

+ func BackgroundSizeHandler(value string) bool

+ func BaseHandler(value string) bool

+ func BorderCollapseHandler(value string) bool

+ func BorderHandler(value string) bool

+ func BorderImageHandler(value string) bool

+ func BorderImageOutsetHandler(value string) bool

+ func BorderImageRepeatHandler(value string) bool

+ func BorderImageSliceHandler(value string) bool

+ func BorderImageWidthHandler(value string) bool

+ func BorderRadiusHandler(value string) bool

+ func BorderSideHandler(value string) bool

+ func BorderSideRadiusHandler(value string) bool

+ func BorderSideStyleHandler(value string) bool

+ func BorderSideWidthHandler(value string) bool

+ func BorderSpacingHandler(value string) bool

+ func BorderStyleHandler(value string) bool

+ func BorderWidthHandler(value string) bool

+ func BoxDecorationBreakHandler(value string) bool

+ func BoxShadowHandler(value string) bool

+ func BoxSizingHandler(value string) bool

+ func BreakBeforeAfterHandler(value string) bool

+ func BreakInsideHandler(value string) bool

+ func CaptionSideHandler(value string) bool

+ func CaretColorHandler(value string) bool

+ func ClearHandler(value string) bool

+ func ClipHandler(value string) bool

+ func ColorHandler(value string) bool

+ func ColumnCountHandler(value string) bool

+ func ColumnFillHandler(value string) bool

+ func ColumnGapHandler(value string) bool

+ func ColumnRuleHandler(value string) bool

+ func ColumnRuleWidthHandler(value string) bool

+ func ColumnSpanHandler(value string) bool

+ func ColumnWidthHandler(value string) bool

+ func ColumnsHandler(value string) bool

+ func CursorHandler(value string) bool

+ func DirectionHandler(value string) bool

+ func DisplayHandler(value string) bool

+ func EmptyCellsHandler(value string) bool

+ func FilterHandler(value string) bool

+ func FlexBasisHandler(value string) bool

+ func FlexDirectionHandler(value string) bool

+ func FlexFlowHandler(value string) bool

+ func FlexGrowHandler(value string) bool

+ func FlexHandler(value string) bool

+ func FlexWrapHandler(value string) bool

+ func FloatHandler(value string) bool

+ func FontFamilyHandler(value string) bool

+ func FontHandler(value string) bool

+ func FontKerningHandler(value string) bool

+ func FontLanguageOverrideHandler(value string) bool

+ func FontSizeAdjustHandler(value string) bool

+ func FontSizeHandler(value string) bool

+ func FontStretchHandler(value string) bool

+ func FontStyleHandler(value string) bool

+ func FontSynthesisHandler(value string) bool

+ func FontVariantCapsHandler(value string) bool

+ func FontVariantHandler(value string) bool

+ func FontVariantPositionHandler(value string) bool

+ func FontWeightHandler(value string) bool

+ func GridAreaHandler(value string) bool

+ func GridAutoColumnsHandler(value string) bool

+ func GridAutoFlowHandler(value string) bool

+ func GridAxisStartEndHandler(value string) bool

+ func GridColumnGapHandler(value string) bool

+ func GridColumnHandler(value string) bool

+ func GridGapHandler(value string) bool

+ func GridHandler(value string) bool

+ func GridRowHandler(value string) bool

+ func GridTemplateAreasHandler(value string) bool

+ func GridTemplateColumnsHandler(value string) bool

+ func GridTemplateHandler(value string) bool

+ func GridTemplateRowsHandler(value string) bool

+ func HangingPunctuationHandler(value string) bool

+ func HeightHandler(value string) bool

+ func HyphensHandler(value string) bool

+ func ImageHandler(value string) bool

+ func ImageRenderingHandler(value string) bool

+ func IsolationHandler(value string) bool

+ func JustifyContentHandler(value string) bool

+ func LengthHandler(value string) bool

+ func LetterSpacingHandler(value string) bool

+ func LineBreakHandler(value string) bool

+ func LineHeightHandler(value string) bool

+ func ListStyleHandler(value string) bool

+ func ListStylePositionHandler(value string) bool

+ func ListStyleTypeHandler(value string) bool

+ func MarginHandler(value string) bool

+ func MarginSideHandler(value string) bool

+ func MaxHeightWidthHandler(value string) bool

+ func MinHeightWidthHandler(value string) bool

+ func MixBlendModeHandler(value string) bool

+ func ObjectFitHandler(value string) bool

+ func ObjectPositionHandler(value string) bool

+ func OpacityHandler(value string) bool

+ func OrderHandler(value string) bool

+ func OrphansHandler(value string) bool

+ func OutlineHandler(value string) bool

+ func OutlineOffsetHandler(value string) bool

+ func OutlineStyleHandler(value string) bool

+ func OutlineWidthHandler(value string) bool

+ func OverflowHandler(value string) bool

+ func OverflowWrapHandler(value string) bool

+ func OverflowXYHandler(value string) bool

+ func PaddingHandler(value string) bool

+ func PaddingSideHandler(value string) bool

+ func PageBreakBeforeAfterHandler(value string) bool

+ func PageBreakInsideHandler(value string) bool

+ func PerspectiveHandler(value string) bool

+ func PerspectiveOriginHandler(value string) bool

+ func PointerEventsHandler(value string) bool

+ func PositionHandler(value string) bool

+ func QuotesHandler(value string) bool

+ func ResizeHandler(value string) bool

+ func ScrollBehaviorHandler(value string) bool

+ func SideHandler(value string) bool

+ func TabSizeHandler(value string) bool

+ func TableLayoutHandler(value string) bool

+ func TextAlignHandler(value string) bool

+ func TextAlignLastHandler(value string) bool

+ func TextCombineUprightHandler(value string) bool

+ func TextDecorationHandler(value string) bool

+ func TextDecorationLineHandler(value string) bool

+ func TextDecorationStyleHandler(value string) bool

+ func TextIndentHandler(value string) bool

+ func TextJustifyHandler(value string) bool

+ func TextOrientationHandler(value string) bool

+ func TextOverflowHandler(value string) bool

+ func TextShadowHandler(value string) bool

+ func TextTransformHandler(value string) bool

+ func TimingFunctionHandler(value string) bool

+ func TransformHandler(value string) bool

+ func TransformOriginHandler(value string) bool

+ func TransformStyleHandler(value string) bool

+ func TransitionDelayHandler(value string) bool

+ func TransitionDurationHandler(value string) bool

+ func TransitionHandler(value string) bool

+ func TransitionPropertyHandler(value string) bool

+ func UnicodeBidiHandler(value string) bool

+ func UserSelectHandler(value string) bool

+ func VerticalAlignHandler(value string) bool

+ func VisiblityHandler(value string) bool

+ func WhiteSpaceHandler(value string) bool

+ func WidthHandler(value string) bool

+ func WordBreakHandler(value string) bool

+ func WordSpacingHandler(value string) bool

+ func WordWrapHandler(value string) bool

+ func WritingModeHandler(value string) bool

+ func ZIndexHandler(value string) bool

type Policy

+ func (p *Policy) AllowElementsMatching(regex *regexp.Regexp) *Policy

+ func (p *Policy) AllowStyles(propertyNames ...string) *stylePolicyBuilder

+ func (p *Policy) RequireNoReferrerOnFullyQualifiedLinks(require bool) *Policy

+ func (p *Policy) RequireNoReferrerOnLinks(require bool) *Policy

v1.0.2

Dec 22, 2018

retracted

GO-2022-0588 +1 more

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

GO-2022-0762: Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

v1.0.1

Aug 19, 2018

retracted

GO-2022-0588 +1 more

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

GO-2022-0762: Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

v1.0.0

Jul 15, 2018

retracted

GO-2022-0588 +1 more

GO-2022-0588: Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

GO-2022-0762: Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

Changes in this version

+ var CellAlign = regexp.MustCompile(`(?i)^(center|justify|left|right|char)$`)

+ var CellVerticalAlign = regexp.MustCompile(`(?i)^(baseline|bottom|middle|top)$`)

+ var Direction = regexp.MustCompile(`(?i)^(rtl|ltr)$`)

+ var ISO8601 = regexp.MustCompile(...)

+ var Integer = regexp.MustCompile(`^[0-9]+$`)

+ var ListType = regexp.MustCompile(`(?i)^(circle|disc|square|a|A|i|I|1)$`)

+ var Number = regexp.MustCompile(`^[-+]?[0-9]*\.?[0-9]+([eE][-+]?[0-9]+)?$`)

+ var NumberOrPercent = regexp.MustCompile(`^[0-9]+[%]?$`)

+ var Paragraph = regexp.MustCompile(`^[\p{L}\p{N}\s\-_',\[\]!\./\\]*$`)

+ var SpaceSeparatedTokens = regexp.MustCompile(`^([\s\p{L}\p{N}_-]+)$`)

+ type Policy struct

+ func NewPolicy() *Policy

+ func StrictPolicy() *Policy

+ func StripTagsPolicy() *Policy

+ func UGCPolicy() *Policy

+ func (p *Policy) AddSpaceWhenStrippingTag(allow bool) *Policy

+ func (p *Policy) AddTargetBlankToFullyQualifiedLinks(require bool) *Policy

+ func (p *Policy) AllowAttrs(attrNames ...string) *attrPolicyBuilder

+ func (p *Policy) AllowDataAttributes()

+ func (p *Policy) AllowDataURIImages()

+ func (p *Policy) AllowElements(names ...string) *Policy

+ func (p *Policy) AllowElementsContent(names ...string) *Policy

+ func (p *Policy) AllowImages()

+ func (p *Policy) AllowLists()

+ func (p *Policy) AllowNoAttrs() *attrPolicyBuilder

+ func (p *Policy) AllowRelativeURLs(require bool) *Policy

+ func (p *Policy) AllowStandardAttributes()

+ func (p *Policy) AllowStandardURLs()

+ func (p *Policy) AllowStyling()

+ func (p *Policy) AllowTables()

+ func (p *Policy) AllowURLSchemeWithCustomPolicy(scheme string, urlPolicy func(url *url.URL) (allowUrl bool)) *Policy

+ func (p *Policy) AllowURLSchemes(schemes ...string) *Policy

+ func (p *Policy) RequireNoFollowOnFullyQualifiedLinks(require bool) *Policy

+ func (p *Policy) RequireNoFollowOnLinks(require bool) *Policy

+ func (p *Policy) RequireParseableURLs(require bool) *Policy

+ func (p *Policy) Sanitize(s string) string

+ func (p *Policy) SanitizeBytes(b []byte) []byte

+ func (p *Policy) SanitizeReader(r io.Reader) *bytes.Buffer

+ func (p *Policy) SkipElementsContent(names ...string) *Policy

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL