Implementierung von HtmlSanitizer und UrlEncoder zur Absicherung von Benutzereingaben gegen XSS und URL-Manipulationsanfälligkeiten.
This commit is contained in:
12
EnvelopeGenerator.Web/XSSExtensions.cs
Normal file
12
EnvelopeGenerator.Web/XSSExtensions.cs
Normal file
@@ -0,0 +1,12 @@
|
||||
using Ganss.Xss;
|
||||
using System.Text.Encodings.Web;
|
||||
|
||||
namespace EnvelopeGenerator.Web
|
||||
{
|
||||
public static class XSSExtensions
|
||||
{
|
||||
public static string? TryEncode(this string? value, UrlEncoder encoder) => value is null ? value : encoder.Encode(value);
|
||||
|
||||
public static string? TrySanitize(this string? html, HtmlSanitizer sanitizer) => html is null ? html : sanitizer.Sanitize(html);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user