Ghost/core/client/utils/caja-sanitizers.js

29 lines
514 B
JavaScript
Raw Normal View History

/**
* google-caja uses url() and id() to verify if the values are allowed.
*/
var url,
id;
/**
* Check if URL is allowed
* URLs are allowed if they start with http://, https://, or /.
*/
var url = function (url) {
url = url.toString().replace(/['"]+/g, '');
if (/^https?:\/\//.test(url) || /^\//.test(url)) {
return url;
}
};
/**
* Check if ID is allowed
* All ids are allowed at the moment.
*/
var id = function (id) {
return id;
};
export default {
url: url,
id: id
};