Search Options

Display Count
Sort
Preferred Language
Advanced Search

Results 1 - 4 of 4 for xss (0.01 seconds)

The search processing time has exceeded the limit. The displayed results may be partial.

  1. src/main/java/org/codelibs/fess/helper/MarkdownRenderer.java

    import org.owasp.html.HtmlPolicyBuilder;
    import org.owasp.html.PolicyFactory;
    
    /**
     * Renders markdown to sanitized HTML for safe display in the chat interface.
     * Uses commonmark for markdown parsing and OWASP HTML Sanitizer for XSS prevention.
     */
    public class MarkdownRenderer {
    
        private static final Logger logger = LogManager.getLogger(MarkdownRenderer.class);
    
        private Parser markdownParser;
        private HtmlRenderer htmlRenderer;
    Created: Tue Mar 31 13:07:34 GMT 2026
    - Last Modified: Mon Jan 12 10:32:40 GMT 2026
    - 5.3K bytes
    - Click Count (0)
  2. src/main/webapp/js/suggestor.js

                }
                $item.css("background-color", bgColor);
              }
            }
          },
    
          /**
           * Helper function to safely escape HTML to prevent XSS
           */
          escapeHtml = function (text) {
            return $("<div>").text(text).html();
          },
    
          suggestor = {
            /**
             * Initialize the suggestor plugin
             */
    Created: Tue Mar 31 13:07:34 GMT 2026
    - Last Modified: Thu Nov 20 11:04:08 GMT 2025
    - 13.3K bytes
    - Click Count (0)
  3. src/test/java/org/codelibs/fess/chat/ChatClientTest.java

        }
    
        @Test
        public void test_escapeHtml_scriptTag() {
            assertEquals("&lt;script&gt;alert(&#39;xss&#39;)&lt;/script&gt;", chatClient.testEscapeHtml("<script>alert('xss')</script>"));
        }
    
        // ========== buildGoUrl tests ==========
    
        @Test
        public void test_buildGoUrl_basic() {
    Created: Tue Mar 31 13:07:34 GMT 2026
    - Last Modified: Sat Mar 21 06:04:58 GMT 2026
    - 40.6K bytes
    - Click Count (0)
  4. src/main/resources/fess_config.properties

    # Inline MIME types for the response.
    response.inline.mimetypes=application/pdf,text/plain
    # HTTP headers for the response.
    response.headers=\
    text/html=X-XSS-Protection: 1; mode=block\n\
    text/html=Content-Security-Policy: reflected-xss block\n\
    text/html=X-Frame-Options: SAMEORIGIN\n\
    
    
    # document index
    
    # Index name for search documents.
    index.document.search.index=fess.search
    Created: Tue Mar 31 13:07:34 GMT 2026
    - Last Modified: Sat Mar 28 06:59:19 GMT 2026
    - 59.3K bytes
    - Click Count (0)
Back to Top