/*
 * Copyright 2014 Space Dynamics Laboratory - Utah State University Research Foundation.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package edu.usu.sdl.openstorefront.validation;

import org.jsoup.Jsoup;
import org.jsoup.safety.Whitelist;

/**
 * Allows html links only
 *
 * @author dshurtleff
 */
public class LinkSanitizer
		extends Sanitizer
{

	@Override
	public Object santize(Object fieldData)
	{
		if (fieldData == null) {
			return fieldData;
		} else {
			String safe = Jsoup.clean(fieldData.toString(), new Whitelist().addTags("a")
					.addAttributes("a", "href")
					.addProtocols("a", "href", "ftp", "http", "https", "mailto")
					.addEnforcedAttribute("a", "rel", "nofollow"));
			return safe;
		}
	}

}

@@ -1211,16 +1211,54 @@
 low%22));%0A
+%09%09%09safe = safe.replace(%22&amp;%22, %22&%22);%0A
 %09%09%09retur

Fix for link santizer