Adopt chain-loading properties as the default setup

James Moger

2014-10-27 17ae31a20e9ad1294bc8a872644d90d61a9dd890

 src/main/java/com/gitblit/utils/JSoupXssFilter.java

@@ -20,18 +20,23 @@
import org.jsoup.safety.Cleaner;
import org.jsoup.safety.Whitelist;

import com.google.inject.Inject;
import com.google.inject.Singleton;

/**
 * Implementation of an XSS filter based on JSoup.
 *
 * @author James Moger
 *
 */
@Singleton
public class JSoupXssFilter implements XssFilter {

    private final Cleaner none;

    private final Cleaner relaxed;

    @Inject
    public JSoupXssFilter() {
       none = new Cleaner(Whitelist.none());
       relaxed = new Cleaner(getRelaxedWhiteList());