Re: Sanitising HTML content through sandboxing

On Thu, Nov 10, 2011 at 3:05 PM, Ryan Seddon <seddon.ryan@gmail.com> wrote:
>> DOMParser.parseFromString already takes a content type as the second
>>
>> argument. The plan is to support HTML parsing when the second argument
>> is text/html.
>
> I quite like this as it keeps it agnostic towards what it is parsing so
> other formats like MathML and SVG won't look out of place with HTMLParser
> object.
>
> How would this handle sanitising?

The web page could walk the parsed DOM and sanitize it however it
liked before adopting the nodes from the detached document into its
own document.

Adam

Received on Thursday, 10 November 2011 23:23:32 UTC