JFilterInput/checkAttribute: Difference between revisions

Revision as of 14:00, 24 March 2017

Description

Function to determine if contents of an attribute is safe

<! removed transcluded page call, red link never existed >

Syntax

static checkAttribute($attrSubSet)

Parameter Name	Default Value	Description
$attrSubSet		A 2 element array for attributes name,value

Returns

boolean True if bad code is detected

Defined in

libraries/joomla/filter/filterinput.php

Importing

jimport( 'joomla.filter.filterinput' );

Source Body

public static function checkAttribute($attrSubSet)
{
        $attrSubSet[0] = strtolower($attrSubSet[0]);
        $attrSubSet[1] = strtolower($attrSubSet[1]);
        return (((strpos($attrSubSet[1], 'expression') !== false) && ($attrSubSet[0]) == 'style') || (strpos($attrSubSet[1], 'javascript:') !== false) || (strpos($attrSubSet[1], 'behaviour:') !== false) || (strpos($attrSubSet[1], 'vbscript:') !== false) || (strpos($attrSubSet[1], 'mocha:') !== false) || (strpos($attrSubSet[1], 'livescript:') !== false));
}

<! removed transcluded page call, red link never existed >

Examples

@@ Line 2: / Line 2: @@
 Function to determine if contents of an attribute is safe
-<span class="editsection" style="font-size:76%;">
-	<nowiki>[<! removed edit link to red link >]</nowiki>
-</span>
 <! removed transcluded page call, red link never existed >
@@ Line 40: / Line 38: @@
 </source>
-<span class="editsection" style="font-size:76%;">
-	<nowiki>[<! removed edit link to red link >]</nowiki>
-</span>
 <! removed transcluded page call, red link never existed >

API16