sethtml-unsafety.sub.dat (1191B)
1 #data 2 test 3 #document-fragment 4 script 5 #document 6 | "test" 7 8 #data 9 <p>Hello</p> 10 #document-fragment 11 script 12 #document 13 | "<p>Hello</p>" 14 15 #data 16 <div>Hello<script>World</script>xxx 17 #document 18 | <div> 19 | "Hello" 20 | <script> 21 | "World" 22 | "xxx" 23 24 #data 25 <div>Hello<script>World</script>xxx 26 #config 27 { "elements": ["div", "script"] } 28 #document 29 | <div> 30 | "Hello" 31 | <script> 32 | "World" 33 | "xxx" 34 35 #data 36 <svg>Hello<script>World</script>xxx 37 #document 38 | <svg svg> 39 | "Hello" 40 | <svg script> 41 | "World" 42 | "xxx" 43 44 #data 45 <a href="https://{{host}}/" onclick="2+2" one="two"> 46 #document 47 | <a> 48 | href="https://{{host}}/" 49 | one="two" 50 | onclick="2+2" 51 52 #data 53 <a href="https://{{host}}/" onclick="2+2" one="two"> 54 #config 55 { "elements": ["a"], "attributes": ["href", "onclick", "one"]} 56 #document 57 | <a> 58 | href="https://{{host}}/" 59 | onclick="2+2" 60 | one="two" 61 62 #data 63 <img src="https://{{host}}/test-image" onclick="2+2" one="two"> 64 #config 65 { "elements": ["img"], "attributes": ["src", "onclick", "one"]} 66 #document 67 | <img> 68 | onclick="2+2" 69 | one="two" 70 | src="https://{{host}}/test-image" 71 72 #data 73 <p data-x="1" data-y="2" data-z="3"> 74 #document 75 | <p> 76 | data-x="1" 77 | data-y="2" 78 | data-z="3" 79