|
In SafeHtmlWhitelistRelexedDto.java, I use WhiteListType.RELAXED annotation like this:
@SafeHtml(whitelistType=WhiteListType.RELAXED) private String stringData1;
And then, I tested "<div>" and "<span>" tags like this:
safeHtmlWhitelistRelexedDto.setStringData1("<div>1234qwer</div>"); constraintViolations = validator.validate(safeHtmlWhitelistRelexedDto); logger.error("violation count: {}", constraintViolations.size()); for (ConstraintViolation<?> violation : constraintViolations) { logger.error("executableParameters: {}", violation.getExecutableParameters()); logger.error("executableReturnValue: {}", violation.getExecutableReturnValue()); logger.error("constraintDescriptor: {}", violation.getConstraintDescriptor()); logger.error("propertyPath: {}", violation.getPropertyPath()); logger.error("invalidValue: {}", violation.getInvalidValue()); logger.error("message: {}", violation.getMessage()); } Assert.assertEquals(1, constraintViolations.size());
safeHtmlWhitelistRelexedDto.setStringData1("<span>1234qwer</span>"); constraintViolations = validator.validate(safeHtmlWhitelistRelexedDto); logger.error("violation count: {}", constraintViolations.size()); for (ConstraintViolation<?> violation : constraintViolations) { logger.error("executableParameters: {}", violation.getExecutableParameters()); logger.error("executableReturnValue: {}", violation.getExecutableReturnValue()); logger.error("constraintDescriptor: {}", violation.getConstraintDescriptor()); logger.error("propertyPath: {}", violation.getPropertyPath()); logger.error("invalidValue: {}", violation.getInvalidValue()); logger.error("message: {}", violation.getMessage()); } Assert.assertEquals(1, constraintViolations.size());
Failure Trace is like this:
java.lang.AssertionError: expected:<1> but was:<0> at org.junit.Assert.fail(Assert.java:88) at org.junit.Assert.failNotEquals(Assert.java:834) at org.junit.Assert.assertEquals(Assert.java:645) at org.junit.Assert.assertEquals(Assert.java:631) at javax.validation.HibernateValidatorTest.testSafehtmlWhitelistRelexed(HibernateValidatorTest.java:218) ...
According to JavaDoc, allowed tags are: a, b, blockquote, br, caption, cite, code, col, colgroup, dd, dl, dt, em, h1, h2, h3, h4, h5, h6, i, img, li, ol, p, pre, q, small, strike, strong, sub, sup, table, tbody, td, tfoot, th, thead, tr, u, ul
How can I validate "<div>", "<span>" tags?
|