filterHTML (XSPContext - JavaScript)

Removes malicious active content from HTML.

Defined in

XSPContext (JavaScript)

Syntax

filterHTML(html:string) : string

filterHTML(html:string, processor:string) : string

Parameters Description
html The content to be filtered.
processor The filter: acf, empty, identify, or striptags. Defaults to acf.
Return value Description
string The filtered HTML.

Usage

The processors behave as follows:
  • acf filters out unsafe constructs based on the configuration file acf-config.xml.
  • empty returns an empty string.
  • identity returns the text without change.
  • striptags removes all tags using the following regular expression:
    replaceAll("\\<.*?>","")