another small fix
authorjohn <john>
Tue, 4 Oct 2005 03:13:42 +0000 (03:13 +0000)
committerjohn <john>
Tue, 4 Oct 2005 03:13:42 +0000 (03:13 +0000)
source/mircoders/localizer/basic/MirBasicProducerAssistantLocalizer.java

index 29054aa..faa8467 100755 (executable)
@@ -252,6 +252,15 @@ public class MirBasicProducerAssistantLocalizer implements MirProducerAssistantL
 
   }
 
+  private boolean checkAttrValue(String attrValue) {
+    if (attrValue.toLowerCase().startsWith("javascript:")){
+       return false;
+    }
+    return true;
+
+  }
+
+
   private boolean checkNode(String nodeName) {
     List languages =  StringRoutines.splitString(MirGlobal.config().getString("Localizer.HTML.Whitelist"), ";");
     
@@ -287,11 +296,12 @@ public class MirBasicProducerAssistantLocalizer implements MirProducerAssistantL
 
           for (int i = 0; i < attrs.getLength(); i++) {
             String attrName = attrs.item(i).getNodeName();
-            if (checkAttr(attrName)) {
+            String attrValue = attrs.item(i).getNodeValue();
+            if (checkAttr(attrName) && checkAttrValue(attrValue)) {
               out.write(' ');
               out.write(attrs.item(i).getNodeName());
               out.write("=\"");
-
+             
               out.write(attrs.item(i).getNodeValue());
               out.write('"');
             }