CODEWITHSUNDEEP
xssantisamy
Ankit
Ankit

Reputation: 338

antisamy does not encode @

I am using antisamy 1.5 to prevent XSS.

I saw issue when input was 

firstname,lastname<[email protected]> or firstname,lastname<[email protected] testing>

Result after Antisamy scan is same for both above case

firstname,lastname<name>

I have below directive in policy file

<directive name="onUnknownTag" value="encode"/>

Is there a place in policy file I can update to encode @ ?

Upvotes: 1

Views: 168

Answers (0)

Related Questions