org.apache.shindig.gadgets.parse.caja

Class CajaCssSanitizer

java.lang.Object

org.apache.shindig.gadgets.parse.caja.CajaCssSanitizer

public class CajaCssSanitizer
extends Object

Sanitize a CSS tree using Caja. Strip properties and functions that represent ways to execute script. Specifically - Use Caja's CSS property whitelist - Use Caja's CSS function whitelist - Force @import through the proxy and require sanitization. If they cant be parsed, remove them - Force @url references to have the HTTP/HTTPS protocol

Constructor Summary

Constructors

Constructor and Description
CajaCssSanitizer(CajaCssParser parser)

Method Summary

Methods

Modifier and Type	Method and Description
void	sanitize(com.google.caja.parser.css.CssTree css, Uri linkContext, GadgetContext gadgetContext, ProxyUriManager importRewriter, ProxyUriManager imageRewriter) Sanitize the given CSS tree in-place by removing all non-whitelisted function calls
void	sanitize(Element styleElem, Uri linkContext, GadgetContext gadgetContext, ProxyUriManager importRewriter, ProxyUriManager imageRewriter) Sanitize the CSS content of a style tag.
String	sanitize(String content, Uri linkContext, GadgetContext gadgetContext, ProxyUriManager importRewriter, ProxyUriManager imageRewriter) Sanitize the CSS content of a style tag.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CajaCssSanitizer

@Inject
public CajaCssSanitizer(CajaCssParser parser)

Method Detail

sanitize

public String sanitize(String content,
              Uri linkContext,
              GadgetContext gadgetContext,
              ProxyUriManager importRewriter,
              ProxyUriManager imageRewriter)

Sanitize the CSS content of a style tag.

Parameters:

content - to sanitize

linkContext - url of containing content

gadgetContext - The gadget context.

importRewriter - to rewrite @imports to sanitizing proxy

imageRewriter - to rewrite images to sanitizing proxy

Returns:

Sanitized css.

sanitize

public void sanitize(Element styleElem,
            Uri linkContext,
            GadgetContext gadgetContext,
            ProxyUriManager importRewriter,
            ProxyUriManager imageRewriter)

Sanitize the CSS content of a style tag.

Parameters:

styleElem - to sanitize

linkContext - url of containing content

gadgetContext - The gadget context.

importRewriter - to rewrite @imports to sanitizing proxy

imageRewriter - to rewrite images to sanitizing proxy

sanitize

public void sanitize(com.google.caja.parser.css.CssTree css,
            Uri linkContext,
            GadgetContext gadgetContext,
            ProxyUriManager importRewriter,
            ProxyUriManager imageRewriter)

Sanitize the given CSS tree in-place by removing all non-whitelisted function calls

Parameters:

css - DOM root

linkContext - url of containing content

gadgetContext - The gadget context.

importRewriter - to rewrite links to sanitizing proxy

imageRewriter - to rewrite links to the sanitizing proxy