mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-15 03:12:54 +03:00
29 lines
613 B
JavaScript
29 lines
613 B
JavaScript
/**
|
|
* google-caja uses url() and id() to verify if the values are allowed.
|
|
*/
|
|
|
|
/**
|
|
* Check if URL is allowed
|
|
* URLs are allowed if they start with http://, https://, or /.
|
|
* NOTE: # urls are not allowed as clicking them will break the editor when clicked
|
|
*/
|
|
let allowedUrl = function (url) {
|
|
url = url.toString().replace(/['"]+/g, '');
|
|
if (/^https?:\/\//.test(url) || /^\//.test(url)) {
|
|
return url;
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Check if ID is allowed
|
|
* All ids are allowed at the moment.
|
|
*/
|
|
let allowedId = function (id) {
|
|
return id;
|
|
};
|
|
|
|
export default {
|
|
url: allowedUrl,
|
|
id: allowedId
|
|
};
|