File: safe-iframe.htmlt

package info (click to toggle)

php-htmlpurifier 4.4.0%2Bdfsg1-1

links: PTS, VCS
area: main
in suites: wheezy
size: 4,888 kB
sloc: php: 27,456; xml: 1,767; makefile: 68; sh: 14

file content (14 lines) | stat: -rw-r--r-- 538 bytes

--INI--
HTML.SafeIframe = true
URI.SafeIframeRegexp = "%(^http://www.example.com/|^https?://dev.example.com/)%"
--HTML--
<iframe src="http://www.example.com/"></iframe>
<iframe src="http://malicious.host.com/?http://www.example.com/"></iframe>
<iframe src="http://dev.example.com/"></iframe>
<iframe src="https://dev.example.com/"></iframe>
--EXPECT--
<iframe src="http://www.example.com/"></iframe>
<iframe></iframe>
<iframe src="http://dev.example.com/"></iframe>
<iframe src="https://dev.example.com/"></iframe>
--# vim: et sw=4 sts=4