z_sanitize (zotonic_core v1.0.0-rc.17)

Interface to z_html sanitizers, sets options and adds embed sanitization.

Summary

Functions

default_sandbox_attr(Context)

ensure_safe_js_callback(Callback)

Escape a Javascript callback function. Crash if not a safe callback function name.

escape_link(Trans)

escape_link(V, Context)

escape_props(Props)

escape_props(Props, Context)

escape_props_check(Props)

escape_props_check(Props, Context)

html(Html)

html(Html, Context)

uri(Url)

Ensure that some characters are escaped, URLs copied from the browser can contain UTF-8 characters that need to be percent-encoded befor further processing is possible. Does NOT allow data: URLs.

uri(Url, IsAllowData)

Ensure that some characters are escaped, URLs copied from the browser can contain UTF-8 characters that need to be percent-encoded befor further processing is possible. Allows data: URLs.

Functions

default_sandbox_attr(Context)

ensure_safe_js_callback(Callback)

-spec ensure_safe_js_callback(string() | binary()) -> binary().

Escape a Javascript callback function. Crash if not a safe callback function name.

escape_link(Trans)

escape_link(V, Context)

escape_props(Props)

escape_props(Props, Context)

escape_props_check(Props)

escape_props_check(Props, Context)

html(Html)

html(Html, Context)

uri(Url)

-spec uri(Url) -> EncodedUrl when Url :: binary() | string(), EncodedUrl :: binary();
         (undefined) -> undefined.

Ensure that some characters are escaped, URLs copied from the browser can contain UTF-8 characters that need to be percent-encoded befor further processing is possible. Does NOT allow data: URLs.

uri(Url, IsAllowData)

-spec uri(Url, IsAllowData) -> EncodedUrl
             when
                 Url :: binary() | string() | undefined,
                 IsAllowData :: boolean(),
                 EncodedUrl :: binary();
         (undefined, IsAllowData) -> undefined when IsAllowData :: boolean().

Ensure that some characters are escaped, URLs copied from the browser can contain UTF-8 characters that need to be percent-encoded befor further processing is possible. Allows data: URLs.