I have two applications where users can submit HTML pages. I would like to make sure that no scripts are included in the HTML.
Normally you would escape content to get rid of scripts, but as this is HTML I can’t do that. Anyone with good suggestions on how to do that? The applications are written in both C# and Java
I have two applications where users can submit HTML pages. I would like to
Share
OWASP has a project to scrub html and css