Ghost/ghost/admin/app/utils/caja-sanitizers.js
2015-03-11 12:37:41 -06:00

30 lines
510 B
JavaScript

/**
* google-caja uses url() and id() to verify if the values are allowed.
*/
var url,
id;
/**
* Check if URL is allowed
* URLs are allowed if they start with http://, https://, or /.
*/
url = function (url) {
url = url.toString().replace(/['"]+/g, '');
if (/^https?:\/\//.test(url) || /^\//.test(url)) {
return url;
}
};
/**
* Check if ID is allowed
* All ids are allowed at the moment.
*/
id = function (id) {
return id;
};
export default {
url: url,
id: id
};