method
contains_bad_protocols?
contains_bad_protocols?(attr_name, value)
protected
Hide source
# File actionpack/lib/action_controller/vendor/html-scanner/html/sanitizer.rb, line 172 def contains_bad_protocols?(attr_name, value) uri_attributes.include?(attr_name) && (value =~ /(^[^\/:]*):|(�*58)|(p)|(%|%)3A/ && !allowed_protocols.include?(value.split(protocol_separator).first.downcase)) end