Utility functions to prevent possible XSS attack on django/mako templates
Project description
Utilities to prevent possible Cross Site Scripting (XSS) attacks on Django/Mako templates.
Overview
This repo houses utility functions to protect edx codebase (Python, Javascript and other templating engine eg django/mako) against possible XSS attacks. Helper code include html & js escaping filters for django and mako templates. For more information, please read the Best Practices Preventing XSS. https://openedx.atlassian.net/wiki/spaces/SEC/pages/99090697/Best+Practices+for+Preventing+XSS
Documentation
The full documentation is in the docs directory TODO: Publish to https://xss-utils.readthedocs.org.
License
The code in this repository is licensed under the AGPL 3.0 unless otherwise noted.
Please see LICENSE.txt for details.
How To Contribute
Contributions are very welcome.
Please read How To Contribute for details.
Even though they were written with edx-platform in mind, the guidelines should be followed for Open edX code in general.
PR description template should be automatically applied if you are sending PR from github interface; otherwise you can find it it at PULL_REQUEST_TEMPLATE.md
Issue report template should be automatically applied if you are sending it from github UI as well; otherwise you can find it at ISSUE_TEMPLATE.md
Reporting Security Issues
Please do not report security issues in public. Please email security@edx.org.
Getting Help
Have a question about this repository, or about Open edX in general? Please refer to this list of resources if you need any assistance.
Change Log
Unreleased
[0.1.0] - 2018-08-17
Added
Utilities to enable html escaping, preventing Cross Site Scripting (XSS) attacks in Django templates.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for xss_utils-0.1.2-py2.py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 8910dceb8c19e9285885e4d41658e5e592143f47a1105ef33a485f7b4c9f058a |
|
MD5 | 7c3e88999c026aee11651f8d52a30ee2 |
|
BLAKE2b-256 | db98208c56e2c7c5dd0c503120e5b092d52498d3da1a2eebbe489fa52b1f708e |