Ghost/ghost/admin/utils/caja-sanitizers.js
Jason Williams 0e9d4e6792 Enable JSCS checking on client.
Refs #4001
- grunt-jscs@0.8.1 which provides ES6 support.
2014-10-25 16:13:04 +00:00

32 lines
549 B
JavaScript

/**
* google-caja uses url() and id() to verify if the values are allowed.
*/
var url,
id;
/**
* Check if URL is allowed
* URLs are allowed if they start with http://, https://, or /.
*/
url = function (url) {
// jscs:disable
url = url.toString().replace(/['"]+/g, '');
if (/^https?:\/\//.test(url) || /^\//.test(url)) {
return url;
}
// jscs:enable
};
/**
* Check if ID is allowed
* All ids are allowed at the moment.
*/
id = function (id) {
return id;
};
export default {
url: url,
id: id
};