Home/ Questions/Q 809795
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T00:47:04+00:00

I am using Clojure/Ring/Compojure-0.4/Enlive stack to build a web application. Are there functions in

  • 0

I am using Clojure/Ring/Compojure-0.4/Enlive stack to build a web application.

Are there functions in this stack that would either strip HTML or HTML-encode (i.e. <a> to &lt;a&gt;) user-supplied strings in order to prevent XSS attacks?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It turns out Enlive does escape HTML by default if you use net.cgrand.enlive-html/content to put text into a HTML element.

    (sniptest "<p class=\"c\"></p>" [:.c] (content "<script></script>"))
"<p class=\"c\">&lt;script&gt;&lt;/script&gt;</p>"
    • 0