Joomla! Documentation™

Description

Function to determine if contents of an attribute is safe

<! removed transcluded page call, red link never existed >

Syntax

checkAttribute($attrSubSet)

Parameter Name	Default Value	Description
$attrSubSet		$attrSubSet A 2 element array for attributes name,value

Returns

boolean True if bad code is detected

Defined in

libraries/joomla/filter/filterinput.php

Importing

jimport( 'joomla.filter.filterinput' );

Source Body

function checkAttribute($attrSubSet)
{
        $attrSubSet[0] = strtolower($attrSubSet[0]);
        $attrSubSet[1] = strtolower($attrSubSet[1]);
        return (((strpos($attrSubSet[1], 'expression') !== false) && ($attrSubSet[0]) == 'style') || (strpos($attrSubSet[1], 'javascript:') !== false) || (strpos($attrSubSet[1], 'behaviour:') !== false) || (strpos($attrSubSet[1], 'vbscript:') !== false) || (strpos($attrSubSet[1], 'mocha:') !== false) || (strpos($attrSubSet[1], 'livescript:') !== false));
}

<! removed transcluded page call, red link never existed >