Skip to content

Html sanitizer repeatedly adds rel="noopener noreferrer" even if it's pre-exist #306

Closed
@anudhuri23

Description

@anudhuri23

Thanks for reporting an issue.

Please report security vulnerabilities via
OWASP's vulnerability rewards program.

Please report all other feature requests and issues here.

### So we are using OWASP/java-html-sanitizer to sanitize the html. It adds noopener noreferrer everytime we sanitize it. It should not add noopener noreferrer if it's already exists in the HTML.

Also note that we have already upgraded the jar to latest one i.e owasp-java-html-sanitizer-20220608.1.jar

For bugs, please include
Input

```
<p dir="ltr"><a href="http://bbbbb" rel="noopener noreferrer" target="_blank">www.bbbbbbb.com</a></p>
```

Output I am getting right now

```
<p dir="ltr"><a href="http://bbbbb" rel="noopener noreferrer noopener noreferrer" target="_blank">www.bbbbbbb.com</a></p>
```

Expected output

```
<p dir="ltr"><a href="http://bbbbb" rel="noopener noreferrer" target="_blank">www.bbbbbbb.com</a></p>
```

### Note
I found similar issue #145 here which is very old issue but it's not resolved yet. Hence creating new one. Please help me on resolving it. It's urgent

If you're having trouble putting HTML in markdown, try using
an HTML code block:

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions