www/plugins-dist/textwheel/wheels/spip/interdire-scripts.yaml

   1 --- # Syntaxe des raccourcis SPIP, version 0.0.1
   2     #
   3     # Si on nomme une regle, elle devient surchargeable
   4
   5 securite-asp:
   6   type: str
   7   match: "<%"
   8   replace: "&lt;%"
   9
  10 securite-php:
  11   type: str
  12   match: "<?"
  13   replace: "&lt;?"
  14
  15 securite-script-php:
  16   if_str: "<script"
  17   type: preg
  18   match: "/<(script\b[^>]+\blanguage\b[^\w>]+php\b)/UimsS"
  19   replace: "&lt;$1"
  20
  21 securite-js:
  22   if_str: "<script"
  23   type: all
  24   replace: "echappe_js"
  25   is_callback: Y
  26
  27 securite-base:
  28   if_str: "<base"
  29   type: preg
  30   match: "/<base\b/iS"
  31   replace: "&lt;base"