Antisamy Java regex url does not accept pound or hash sign

Question

In the antisamy xml config, this is what I have set:

<regexp
    name="offsiteURL"
    value="(\s)*(http(s?)://|mailto:)[\p{L}\p{N}]+[~\p{L}\p{N}\p{Zs}\-_\.@\#\$%&amp;;:,\?=/\+!\(\)]*(\s)*"/>

That seems to work except for links with the pound/hash sign in them.

For example: http://examplewebsite.com/example#section

antisamy using the above regex will reject that input and sanitize it. Can anyone help me modify that regex to allow the pound sign also?

Try to remove the backslash in front of the hash/pound sign already in the regex pattern. — geert3, Nov 25 '14 at 22:53
No, removing the backslash in front of the hash/pound sign does not fix it. — Greg H, Nov 26 '14 at 14:31

score 1 · Accepted Answer · answered Dec 02 '14 at 20:44

After further research, the policy file was causing the problem not the regex listed above. If you are experiencing this same issue, be sure to check that the policy is not too restrictive for each HTML element and that the url is properly encoded & escaped.

Antisamy Java regex url does not accept pound or hash sign

1 Answers1