Merge branch 'ticket/170' into develop

James Moger

2014-09-08 671b5a456c48028d21855fe05c1fbc9013a180b7

 src/main/java/com/gitblit/utils/JSoupXssFilter.java

@@ -20,18 +20,23 @@
import org.jsoup.safety.Cleaner;
import org.jsoup.safety.Whitelist;

import com.google.inject.Inject;
import com.google.inject.Singleton;

/**
 * Implementation of an XSS filter based on JSoup.
 *
 * @author James Moger
 *
 */
@Singleton
public class JSoupXssFilter implements XssFilter {

    private final Cleaner none;

    private final Cleaner relaxed;

    @Inject
    public JSoupXssFilter() {
       none = new Cleaner(Whitelist.none());
       relaxed = new Cleaner(getRelaxedWhiteList());