[SLING-4584] Performance: XSSAPI.getValidHref should not be based on HTML filtering

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 1.0.2
• Fix Version/s: XSS Protection API 1.0.4
• Component/s: Extensions
• Labels: perfomance xss
• Assignee: Radu Cotescu
• Reporter: Joel Richard
• Created: 07/Apr/15 11:58
• Updated: 03/Aug/15 11:54
• Resolved: 29/Jul/15 14:29

Description

Around 3% of the rendering time is spent in getValidHref because it uses AntiSamy (which is a HTML filter) to do the job. This is obviously a hack and adds a lot of unnecessary overhead.