Topic
  • 1 reply
  • Latest Post - ‏2011-12-06T22:14:42Z by SystemAdmin
Wangxxi
Wangxxi
3 Posts

Pinned topic what is the different between ACF html and json process

‏2011-12-06T07:56:10Z |
What I noticed is the Json Process can also filter out malicious characters like <script></script>

XSSHTMLProcessor = ACFFactory.getActiveContentProcessor("text/html");
XSSJSONProcessor = ACFFactory.getActiveContentProcessor("application/json");
so what is the key different between these two processors ?

Thx
Updated on 2011-12-06T22:14:42Z at 2011-12-06T22:14:42Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    9224 Posts

    Re: what is the different between ACF html and json process

    ‏2011-12-06T22:14:42Z  
    The difference is the content type you are asking ACF to process. The docs suggest the examples of http query parameters for the "text/html" variation (such as handling submitted form data on a web page), and inbound JSON objects for "application/json" (such as handling in a RESTful resource in app/resources).

    See http://www.projectzero.org/sMash/1.1.x/docs/zero.devguide.doc/zero.acf/ActiveContentFiltering.html for (a few) more details.