/** * google-caja uses url() and id() to verify if the values are allowed. */ var url, id; /** * Check if URL is allowed * URLs are allowed if they start with http://, https://, or /. */ var url = function (url) { url = url.toString().replace(/['"]+/g, ''); if (/^https?:\/\//.test(url) || /^\//.test(url)) { return url; } }; /** * Check if ID is allowed * All ids are allowed at the moment. */ var id = function (id) { return id; }; export default { url: url, id: id };