JFilterInput/checkAttribute: Difference between revisions
From Joomla! Documentation
m removing red link to edit, no existant pages |
m preparing for archive only |
||
| Line 46: | Line 46: | ||
===Examples=== | ===Examples=== | ||
=== Code Examples === | |||
<dpl> | <dpl> | ||
noresultsheader=\n | noresultsheader=\n | ||
category=checkAttribute | category=checkAttribute | ||
category=JFilterInput | category=JFilterInput | ||
namespace=CodeExample | |||
category=MethodExample | category=MethodExample | ||
include=* | include=* | ||
Latest revision as of 00:37, 25 March 2017
Description
Function to determine if contents of an attribute is safe
[<! removed edit link to red link >]
<! removed transcluded page call, red link never existed >
Syntax
checkAttribute($attrSubSet)
| Parameter Name | Default Value | Description |
|---|---|---|
| $attrSubSet | $attrSubSet A 2 element array for attributes name,value |
Returns
boolean True if bad code is detected
Defined in
libraries/joomla/filter/filterinput.php
Importing
jimport( 'joomla.filter.filterinput' );
Source Body
function checkAttribute($attrSubSet)
{
$attrSubSet[0] = strtolower($attrSubSet[0]);
$attrSubSet[1] = strtolower($attrSubSet[1]);
return (((strpos($attrSubSet[1], 'expression') !== false) && ($attrSubSet[0]) == 'style') || (strpos($attrSubSet[1], 'javascript:') !== false) || (strpos($attrSubSet[1], 'behaviour:') !== false) || (strpos($attrSubSet[1], 'vbscript:') !== false) || (strpos($attrSubSet[1], 'mocha:') !== false) || (strpos($attrSubSet[1], 'livescript:') !== false));
}
[<! removed edit link to red link >] <! removed transcluded page call, red link never existed >
Examples
Code Examples