OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2011-4457 · ADVISORY
• OWASP/java-html-sanitizer commit 2027d3d · WEB
• OWASP/java-html-sanitizer · PACKAGE
• OWASP/java-html-sanitizer · WEB
• OWASP/java-html-sanitizer · WEB
• code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457 · WEB
• owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html · WEB

Lỗ hổng khác của com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer

• CVE-2025-66021TRUNG BÌNH 6.1OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web app…
• CVE-2021-42575NGHIÊM TRỌNG 9.8The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.