8 Commits (d7b1e8b45bd21cdcf37d2be475461399efbf0124)

Author	SHA1	Message	Date
MinRK	c49f04545a	don't use `result.safe` to communicate incomplete information	12 years ago
MinRK	028ce17c62	fix tagName comparison	12 years ago
MinRK	3897b1c39f	don't populate sanitized.safe by default ... since it's potentially expensive. walk nodes in is_safe	12 years ago
MinRK	367b4f85c2	wrap caja.sanitizeAttribs to trust data-* attributes	12 years ago
MinRK	eec5d427a4	add cmp_tree, in case caja log can't be trusted ... (spoiler: it can't)	12 years ago
MinRK	2a0451fdde	use google-caja for sanitization	12 years ago
Brian E. Granger	07cdb1e195	Adding first round of security tests of is_safe.	12 years ago
Brian E. Granger	fa3f998295	Adding security.js with 1st attempt at is_safe.	12 years ago