mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-22 18:31:57 +03:00
27 lines
491 B
JavaScript
27 lines
491 B
JavaScript
/**
|
|
* google-caja uses url() and id() to verify if the values are allowed.
|
|
*/
|
|
/**
|
|
* Check if URL is allowed
|
|
* URLs are allowed if they start with http://, https://, or /.
|
|
*/
|
|
let url = function (url) {
|
|
url = url.toString().replace(/['"]+/g, '');
|
|
if (/^https?:\/\//.test(url) || /^\//.test(url)) {
|
|
return url;
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Check if ID is allowed
|
|
* All ids are allowed at the moment.
|
|
*/
|
|
let id = function (id) {
|
|
return id;
|
|
};
|
|
|
|
export default {
|
|
url,
|
|
id
|
|
};
|