package com.tcm.training.admin.common.xss;

import org.jsoup.Jsoup;
import org.jsoup.safety.Safelist;

public final class XssCleaner {

    private static final Safelist RICH_TEXT_SAFELIST = Safelist.relaxed()
            .addTags("span")
            .addAttributes(":all", "style", "class")
            .addAttributes("img", "width", "height", "alt")
            .addProtocols("img", "src", "http", "https", "data");

    private XssCleaner() {
    }

    public static String cleanPlainText(String value) {
        if (value == null) {
            return null;
        }
        return Jsoup.clean(value, Safelist.none()).trim();
    }

    public static String cleanRichText(String value) {
        if (value == null) {
            return null;
        }
        return Jsoup.clean(value, RICH_TEXT_SAFELIST).trim();
    }

    public static boolean containsRiskyPlainText(String value) {
        if (value == null) {
            return false;
        }
        return !value.equals(cleanPlainText(value));
    }
}