public interface HtmlChangeListener<T>
Note: If a string sanitizes with no change notifications, it is not the case that the input string is necessarily safe to use. Only use the output of the sanitizer. The sanitizer ensures that the output is in a sub-set of HTML that commonly used HTML parsers will agree on the meaning of, but the absence of notifications does not mean that the input is in such a sub-set, only that it does not contain structural features that were removed.
Modifier and Type | Method | Description |
---|---|---|
void |
discardedAttributes(T context,
java.lang.String tagName,
java.lang.String... attributeNames) |
Called when attributes are discarded
from the input but the containing tag is not.
|
void |
discardedTag(T context,
java.lang.String elementName) |
Called when a tag is discarded from the input.
|
void discardedTag(@Nullable T context, java.lang.String elementName)
void discardedAttributes(@Nullable T context, java.lang.String tagName, java.lang.String... attributeNames)
Copyright © 2019 OWASP. All rights reserved.