JFilterInput/checkAttribute: Difference between revisions
From Joomla! Documentation
New page: ===Description===
Function to determine if contents of an attribute is safe
<span class="editsection" style="font-size:76%;">
<nowiki>[</nowiki>[[Description:JFilterInput/checkAttribu... |
m removing red link to edit, no existant pages |
||
| Line 3: | Line 3: | ||
<span class="editsection" style="font-size:76%;"> | <span class="editsection" style="font-size:76%;"> | ||
<nowiki>[< | <nowiki>[<! removed edit link to red link >]</nowiki> | ||
</span> | </span> | ||
<! removed transcluded page call, red link never existed > | |||
===Syntax=== | ===Syntax=== | ||
| Line 41: | Line 41: | ||
<span class="editsection" style="font-size:76%;"> | <span class="editsection" style="font-size:76%;"> | ||
<nowiki>[< | <nowiki>[<! removed edit link to red link >]</nowiki> | ||
</span> | </span> | ||
<! removed transcluded page call, red link never existed > | |||
===Examples=== | ===Examples=== | ||
| Line 56: | Line 56: | ||
format= ,,, | format= ,,, | ||
</dpl> | </dpl> | ||
[[Category:Archived pages API15]] | |||
Revision as of 16:52, 12 May 2013
Description
Function to determine if contents of an attribute is safe
[<! removed edit link to red link >]
<! removed transcluded page call, red link never existed >
Syntax
checkAttribute($attrSubSet)
| Parameter Name | Default Value | Description |
|---|---|---|
| $attrSubSet | $attrSubSet A 2 element array for attributes name,value |
Returns
boolean True if bad code is detected
Defined in
libraries/joomla/filter/filterinput.php
Importing
jimport( 'joomla.filter.filterinput' );
Source Body
function checkAttribute($attrSubSet)
{
$attrSubSet[0] = strtolower($attrSubSet[0]);
$attrSubSet[1] = strtolower($attrSubSet[1]);
return (((strpos($attrSubSet[1], 'expression') !== false) && ($attrSubSet[0]) == 'style') || (strpos($attrSubSet[1], 'javascript:') !== false) || (strpos($attrSubSet[1], 'behaviour:') !== false) || (strpos($attrSubSet[1], 'vbscript:') !== false) || (strpos($attrSubSet[1], 'mocha:') !== false) || (strpos($attrSubSet[1], 'livescript:') !== false));
}
[<! removed edit link to red link >] <! removed transcluded page call, red link never existed >
Examples
<CodeExamplesForm />