Allowing specific html tags and attributes – Apple Mac OS X Server (Extending Your Wiki Server For Version 10.5 Leopard) User Manual

Page 33

Advertising
background image

Chapter 2

Allowing Specific Protocols, CSS Styles, and HTML Tags and Attributes

33

For example, to allow the use of the font-size style attribute, create the following block:

<key>styles</key>
<array>
<string>font-size</string>
</array>

To allow the HTML “style” attribute, add the “style” attribute to the “_all_” tag, which is
described in the following section.

Allowing Specific HTML Tags and Attributes

YouTube, Flash, and other advanced web formats usually require HTML tags and
attributes that aren’t allowed by default. For example, YouTube requires the following
tags and attributes:

Tag

Attributes

object

width, height

param

name, value

embed

src, type, width, height

Because these HTML tags or attributes aren’t included in the built-in whitelist, you
must add them to the custom whitelist.

To allow specific HTML tags and attributes:

1

Create a tags key and follow it with a dict.

2

In the dict, create keys named after the HTML tags.

To allow a specific attribute for all HTML tags, create a key named “_all_”.

3

After each key, create string arrays listing allowed tag attributes.

For example, to support YouTube, create the following block:

<key>tags</key>
<dict>
<key>object</key>
<array>
<string>width</string>
<string>height</string>
</array>
<key>param</key>
<array>
<string>name</string>
<string>value</string>
</array>
<key>embed</key>

Advertising