com.google.template.soy.shared.internal

Class EscapingConventions.FilterImageDataUri

java.lang.Object

com.google.common.escape.Escaper

com.google.template.soy.shared.internal.EscapingConventions.CrossLanguageStringXform

com.google.template.soy.shared.internal.EscapingConventions.FilterImageDataUri

Enclosing class:

EscapingConventions

public static final class EscapingConventions.FilterImageDataUri
extends EscapingConventions.CrossLanguageStringXform

Accepts only data URI's that contain an image.

Developers use this simultaneously to allow data URI's, but also to ensure that the image tag won't initiate any HTTP requests.

NOTE: We may consider deprecating this now that img/data URIs are allowed by default, since it's unlikely too many projects need a mechanism to double-check that images are only loaded from data URIs; anyone else that does can simply scan the URL and fail if it detects http/https.

Field Summary

Fields

Modifier and Type	Field and Description
static EscapingConventions.FilterImageDataUri	INSTANCE Implements the |filterImageDataUri directive.

Method Summary

Modifier and Type	Method and Description
protected com.google.common.collect.ImmutableList<EscapingConventions.Escape>	defineEscapes() Returns the escapes used for this escaper.
String	getInnocuousOutput() Returns an innocuous string in this context that can be used when filtering.

Methods inherited from class com.google.template.soy.shared.internal.EscapingConventions.CrossLanguageStringXform

escape, escape, getDirectiveName, getEscapes, getLangFunctionNames, getNonAsciiPrefix, getValueFilter

Methods inherited from class com.google.common.escape.Escaper

asFunction

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

INSTANCE

public static final EscapingConventions.FilterImageDataUri INSTANCE

Implements the |filterImageDataUri directive.

Method Detail

defineEscapes

protected com.google.common.collect.ImmutableList<EscapingConventions.Escape> defineEscapes()

Description copied from class: EscapingConventions.CrossLanguageStringXform

Returns the escapes used for this escaper.

Specified by:

defineEscapes in class EscapingConventions.CrossLanguageStringXform

getInnocuousOutput

public String getInnocuousOutput()

Description copied from class: EscapingConventions.CrossLanguageStringXform

Returns an innocuous string in this context that can be used when filtering.

Overrides:

getInnocuousOutput in class EscapingConventions.CrossLanguageStringXform