From 7e5107ef3e2bb0d7c31d3050fb8ba6cc1601ef1a Mon Sep 17 00:00:00 2001 From: Glenn Matthys <glenn@webmind.be> Date: Sun, 17 Jan 2016 17:15:38 -0500 Subject: [PATCH] Describe how DH key bitlength can be influenced --- src/main/java/com/gitblit/utils/JSoupXssFilter.java | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/src/main/java/com/gitblit/utils/JSoupXssFilter.java b/src/main/java/com/gitblit/utils/JSoupXssFilter.java index 7fa7b2a..aec2241 100644 --- a/src/main/java/com/gitblit/utils/JSoupXssFilter.java +++ b/src/main/java/com/gitblit/utils/JSoupXssFilter.java @@ -20,18 +20,23 @@ import org.jsoup.safety.Cleaner; import org.jsoup.safety.Whitelist; +import com.google.inject.Inject; +import com.google.inject.Singleton; + /** * Implementation of an XSS filter based on JSoup. * * @author James Moger * */ +@Singleton public class JSoupXssFilter implements XssFilter { private final Cleaner none; private final Cleaner relaxed; + @Inject public JSoupXssFilter() { none = new Cleaner(Whitelist.none()); relaxed = new Cleaner(getRelaxedWhiteList()); @@ -68,7 +73,7 @@ "sub", "sup", "table", "tbody", "td", "tfoot", "th", "thead", "tr", "tt", "u", "ul", "var") - .addAttributes("a", "class", "href", "style", "title") + .addAttributes("a", "class", "href", "style", "target", "title") .addAttributes("blockquote", "cite") .addAttributes("col", "span", "width") .addAttributes("colgroup", "span", "width") -- Gitblit v1.9.1