gg.jte.html.policy.PreventInlineEventHandlers Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of jte-runtime Show documentation

There is a newer version: 3.1.12

package gg.jte.html.policy;

import gg.jte.html.HtmlAttribute;
import gg.jte.html.HtmlPolicy;
import gg.jte.html.HtmlPolicyException;
import gg.jte.html.HtmlTag;

public class PreventInlineEventHandlers implements HtmlPolicy {
    @Override
    public void validateHtmlTag(HtmlTag htmlTag) throws HtmlPolicyException {
        // Unused
    }

    @Override
    public void validateHtmlAttribute(HtmlTag htmlTag, HtmlAttribute htmlAttribute) throws HtmlPolicyException {
        if (htmlAttribute.getName().startsWith("on")) {
            throw new HtmlPolicyException("Inline event handlers are not allowed: " + htmlAttribute.getName());
        }
    }
}