Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document exact changes from upstream Caja #7

Open
strugee opened this issue Aug 11, 2016 · 2 comments
Open

Document exact changes from upstream Caja #7

strugee opened this issue Aug 11, 2016 · 2 comments

Comments

@strugee
Copy link

strugee commented Aug 11, 2016

The README mentions that this is a "slightly loosened" version of Caja. There should be somewhere where I can read about exactly what this means - in particular, I need to know if this strips <style> tags/style= attributes or not.

@overint
Copy link

overint commented Oct 12, 2017

I agree, this would be very helpful.

@overint
Copy link

overint commented Oct 12, 2017

Found the changes.

html4.ATTRIBS['*::style'] = 0;
html4.ELEMENTS['style'] = 0;
html4.ATTRIBS['a::target'] = 0;
html4.ELEMENTS['video'] = 0;
html4.ATTRIBS['video::src'] = 0;
html4.ATTRIBS['video::poster'] = 0;
html4.ATTRIBS['video::controls'] = 0;
html4.ELEMENTS['audio'] = 0;
html4.ATTRIBS['audio::src'] = 0;
html4.ATTRIBS['video::autoplay'] = 0;
html4.ATTRIBS['video::controls'] = 0;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants