2014-02-13 14:58:36 +08:00
|
|
|
|
/**
|
|
|
|
|
|
* 模块入口
|
|
|
|
|
|
*
|
|
|
|
|
|
* @author 老雷<leizongmin@gmail.com>
|
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
|
|
var DEFAULT = require('./default');
|
|
|
|
|
|
var parser = require('./parser');
|
|
|
|
|
|
var FilterXSS = require('./xss');
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
|
* XSS过滤
|
|
|
|
|
|
*
|
|
|
|
|
|
* @param {String} html 要过滤的HTML代码
|
|
|
|
|
|
* @param {Object} options 选项:whiteList, onTag, onTagAttr, onIgnoreTag, onIgnoreTagAttr, safeAttrValue, escapeHtml
|
|
|
|
|
|
* @return {String}
|
|
|
|
|
|
*/
|
|
|
|
|
|
function filterXSS (html, options) {
|
|
|
|
|
|
var xss = new FilterXSS(options);
|
|
|
|
|
|
return xss.process(html);
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// 输出
|
|
|
|
|
|
exports = module.exports = filterXSS;
|
|
|
|
|
|
exports.FilterXSS = FilterXSS;
|
|
|
|
|
|
for (var i in DEFAULT) exports[i] = DEFAULT[i];
|
|
|
|
|
|
for (var i in parser) exports[i] = parser[i];
|
|
|
|
|
|
|
|
|
|
|
|
|
2015-01-16 20:27:23 +08:00
|
|
|
|
|
|
|
|
|
|
// 在AMD下使用
|
|
|
|
|
|
if (typeof define === 'function' && define.amd) {
|
|
|
|
|
|
define(function () {
|
|
|
|
|
|
return module.exports;
|
|
|
|
|
|
});
|
|
|
|
|
|
}
|
|
|
|
|
|
|
2014-02-13 14:58:36 +08:00
|
|
|
|
// 在浏览器端使用
|
|
|
|
|
|
if (typeof window !== 'undefined') {
|
|
|
|
|
|
window.filterXSS = module.exports;
|
|
|
|
|
|
}
|