[SLING-5050] Disable AntiSamy's default formatOutput policy directive

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 1.0.4
• Fix Version/s: XSS Protection API 1.0.6
• Component/s: Extensions
• Assignee: Radu Cotescu
• Reporter: Radu Cotescu
• Created: 22/Sep/15 12:59
• Updated: 16/Jun/17 10:12
• Resolved: 23/Sep/15 15:11

Description

By default AntiSamy enables the formatOutput policy directive [0], formatting markup sent to it. However this sometimes works against a developer's intention of outputting markup with Sightly.

[0] - https://owaspantisamy.googlecode.com/files/Developer%20Guide.pdf

Issue Links

• is duplicated by: SLING-6959 XssProtection changes html semantic caused by formatting