Class ConformanceRules.BanCreateDom

  • All Implemented Interfaces:
    CheckConformance.Rule
    Enclosing class:
    ConformanceRules

    public static final class ConformanceRules.BanCreateDom
    extends ConformanceRules.AbstractRule
    Ban goog.dom.createDom and goog.dom.DomHelper#createDom with parameters specified in value in the format tagname.attribute, e.g. value: 'iframe.src'. Tag name might be also * to ban the attribute in any tag. Note that string literal values assigned to banned attributes are allowed as they couldn't be attacker controlled.