Allow import of OWASP AntiSamy XML policy files

[buckett]

To ease migration it would be useful if java-html-sanitizer could import AntiSamy XML policy files.

[jpetren]

I agree. I'm looking for a way to preserve extra whitespaces and it looks like the only way to do that is to import a policy.

[jmanico]

Perhaps not "import" AntiSamy, but what about a standalone "convert" AntiSamy tool? That might be easier to support and would not require any enhancements in the current engine. Sound reasonable?

[efge]

@mikesamuel I plan on adding some code to do this. I would:

• take the AntiSamy policy model parsing from AntiSamy itself (in org.owasp.validator.html.model.* and org.owasp.validator.html.Policy) to avoid reinventing the parsing code,
• try to evaluate what we can from this policy and map it to the HtmlPolicyBuilder model, using a new loadAntiSamyPolicy method.

Does that plan work with you?

[jmanico]

This plan works for me. I’ve gotten this request from the field often. Thank you for taking this on Mr. Samuel. Aloha, -- Jim Manico @manicode Secure Coding Education +1 (808) 652-3805

…

On Dec 18, 2018, at 7:19 AM, Florent Guillaume ***@***.***> wrote: @mikesamuel I plan on adding some code to do this. I would: take the AntiSamy policy model parsing from AntiSamy itself (in org.owasp.validator.html.model.* and org.owasp.validator.html.Policy) to avoid reinventing the parsing code, try to evaluate what we can from this policy and map it to the HtmlPolicyBuilder model, using a new loadAntiSamyPolicy method. Does that plan work with you? — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[efge]

Please review the PR in #161