www/plugins-dist/textwheel/wheels/spip/interdire-scripts.yaml

   1 --- # Syntaxe des raccourcis SPIP, version 0.0.1
   2     #
   3     # Si on nomme une regle, elle devient surchargeable
   4
   5 securite-asp:
   6   type: str
   7   match: "<%"
   8   replace: "&lt;%"
   9
  10 securite-php:
  11   type: str
  12   match: "<?"
  13   replace: "&lt;?"
  14
  15 securite-script-php:
  16   if_str: "<script"
  17   type: preg
  18   match: "/<(script\b[^>]+\blanguage\b[^\w>]+php\b)/UimsS"
  19   replace: "&lt;$1"
  20
  21 securite-js:
  22   if_str: "<"
  23   if_match: "/<(?:script|iframe|embed|object|img|image|body|bgsound|meta)/iS"
  24   type: all
  25   replace: "echappe_js"
  26   is_callback: Y
  27
  28 securite-base:
  29   if_str: "<base"
  30   type: preg
  31   match: "/<base\b/iS"
  32   replace: "&lt;base"