Joomla! Documentation™

Description

Function to determine if contents of an attribute is safe

Syntax

static checkAttribute($attrSubSet)

Parameter Name	Default Value	Description
$attrSubSet		A 2 element array for attributes name,value

Returns

boolean True if bad code is detected

Defined in

libraries/joomla/filter/filterinput.php

Importing

jimport( 'joomla.filter.filterinput' );

Source Body

public static function checkAttribute($attrSubSet)
{
        $attrSubSet[0] = strtolower($attrSubSet[0]);
        $attrSubSet[1] = strtolower($attrSubSet[1]);
        return (((strpos($attrSubSet[1], 'expression') !== false) && ($attrSubSet[0]) == 'style') || (strpos($attrSubSet[1], 'javascript:') !== false) || (strpos($attrSubSet[1], 'behaviour:') !== false) || (strpos($attrSubSet[1], 'vbscript:') !== false) || (strpos($attrSubSet[1], 'mocha:') !== false) || (strpos($attrSubSet[1], 'livescript:') !== false));
}

Examples

<CodeExamplesForm />