diff --git a/owasp-java-html-sanitizer/src/main/java/org/owasp/html/CssSchema.java b/owasp-java-html-sanitizer/src/main/java/org/owasp/html/CssSchema.java index edb1c054..6a207e49 100644 --- a/owasp-java-html-sanitizer/src/main/java/org/owasp/html/CssSchema.java +++ b/owasp-java-html-sanitizer/src/main/java/org/owasp/html/CssSchema.java @@ -452,7 +452,7 @@ Property forKey(String propertyName) { Set tableLayoutLiterals0 = j8().setOf( "auto", "fixed", "inherit"); Set textAlignLiterals0 = j8().setOf( - "center", "inherit", "justify"); + "center", "end", "inherit", "justify", "justify-all", "match-parent", "start"); Set textDecorationLiterals0 = j8().setOf( "blink", "line-through", "overline", "underline"); Set textTransformLiterals0 = j8().setOf( diff --git a/owasp-java-html-sanitizer/src/test/java/org/owasp/html/HtmlPolicyBuilderTest.java b/owasp-java-html-sanitizer/src/test/java/org/owasp/html/HtmlPolicyBuilderTest.java index 3ac35180..d9676bca 100644 --- a/owasp-java-html-sanitizer/src/test/java/org/owasp/html/HtmlPolicyBuilderTest.java +++ b/owasp-java-html-sanitizer/src/test/java/org/owasp/html/HtmlPolicyBuilderTest.java @@ -1294,6 +1294,23 @@ public final void testHtmlPolicyBuilderDefinitionWithNoAttributesDefinedGlobally new HtmlPolicyBuilder().allowElements().allowAttributes().globally().toFactory(); } + @Test + public final void testCSSTextAlign() { + HtmlPolicyBuilder builder = new HtmlPolicyBuilder(); + PolicyFactory factory = builder.allowElements("span") + .allowAttributes("style").onElements("span").allowStyling() + .toFactory(); + + String toSanitizeTextAlignStart = "start"; + assertEquals(toSanitizeTextAlignStart, factory.sanitize(toSanitizeTextAlignStart)); + + String toSanitizeTextAlignEnd = "end"; + assertEquals(toSanitizeTextAlignEnd, factory.sanitize(toSanitizeTextAlignEnd)); + + String toSanitizeTextAlignFoo = "foo"; + assertEquals("foo", factory.sanitize(toSanitizeTextAlignFoo)); + } + @Test public final void testCSSFontSize() { HtmlPolicyBuilder builder = new HtmlPolicyBuilder();