xerofun/owaspantisamy

rgbCode regex doesn't allow percents or spaces (antisamy.xml)

Opened this issue · 1 comments

Looking at antisamy.xml, SVN revision 137:

<regexp name="rgbCode"
value="rgb\(([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[
0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])\)"/>

This allows values like rgb(40,100,200).
It does not allow rgb(40, 100, 200) or rgb(10%,20%,30%). As far as I can
tell, both of these are valid color specifications.
See http://www.w3.org/TR/CSS21/syndata.html#value-def-color

Original issue reported on code.google.com by danr...@gmail.com on 23 Dec 2009 at 8:19

Original comment by arshan.d...@gmail.com on 8 Mar 2010 at 5:55

  • Changed state: Accepted
  • Added labels: Priority-Low
  • Removed labels: Priority-Medium