sensitive_attributes.mjs 390 B

123456789101112131415161718192021
  1. /**
  2. * @license
  3. * SPDX-License-Identifier: Apache-2.0
  4. */
  5. // AUTOGENERATED. DO NOT EDIT.
  6. /**
  7. * Security sensitive attribute names that should not be set through
  8. * `setAttribute` or similar functions.
  9. */
  10. export const SECURITY_SENSITIVE_ATTRIBUTES = [
  11. 'href',
  12. 'rel',
  13. 'src',
  14. 'srcdoc',
  15. 'action',
  16. 'formaction',
  17. 'sandbox',
  18. 'cite',
  19. 'poster',
  20. 'icon',
  21. ];