public function SecurityReviewController::unsafeTags in Acquia Connector 3.x

Same name and namespace in other branches

1. 8.2 src/Controller/SecurityReviewController.php \Drupal\acquia_connector\Controller\SecurityReviewController::unsafeTags()
2. 8 src/Controller/SecurityReviewController.php \Drupal\acquia_connector\Controller\SecurityReviewController::unsafeTags()

Helper function defines HTML tags that are considered unsafe.

Based on wysiwyg_filter_get_elements_blacklist().

1 call to SecurityReviewController::unsafeTags()

SecurityReviewController::checkInputFormats in src/Controller/SecurityReviewController.php

Check input formats of unsafe tags.

File

src/Controller/SecurityReviewController.php, line 547

Class

SecurityReviewController

Acquia Security Review page.

Namespace

Drupal\acquia_connector\Controller

Code

public function unsafeTags() {
  return [
    'applet',
    'area',
    'audio',
    'base',
    'basefont',
    'body',
    'button',
    'comment',
    'embed',
    'eval',
    'form',
    'frame',
    'frameset',
    'head',
    'html',
    'iframe',
    'image',
    'img',
    'input',
    'isindex',
    'label',
    'link',
    'map',
    'math',
    'meta',
    'noframes',
    'noscript',
    'object',
    'optgroup',
    'option',
    'param',
    'script',
    'select',
    'style',
    'svg',
    'table',
    'td',
    'textarea',
    'title',
    'video',
    'vmlframe',
  ];
}