2015-02-21 08:16:38 +01:00
|
|
|
--INI--
|
|
|
|
|
HTML.SafeIframe = true
|
|
|
|
|
URI.SafeIframeRegexp = "%(^http://www.example.com/|^https?://dev.example.com/)%"
|
|
|
|
|
--HTML--
|
|
|
|
|
<iframe src="http://www.example.com/"></iframe>
|
|
|
|
|
<iframe src="http://malicious.host.com/?http://www.example.com/"></iframe>
|
|
|
|
|
<iframe src="http://dev.example.com/"></iframe>
|
|
|
|
|
<iframe src="https://dev.example.com/"></iframe>
|
|
|
|
|
--EXPECT--
|
|
|
|
|
<iframe src="http://www.example.com/"></iframe>
|
|
|
|
|
<iframe></iframe>
|
|
|
|
|
<iframe src="http://dev.example.com/"></iframe>
|
|
|
|
|
<iframe src="https://dev.example.com/"></iframe>
|
|
|
|
|
--# vim: et sw=4 sts=4
|
