| 1 |
efrain |
1 |
HTML.ForbiddenAttributes
|
|
|
2 |
TYPE: lookup
|
|
|
3 |
VERSION: 3.1.0
|
|
|
4 |
DEFAULT: array()
|
|
|
5 |
--DESCRIPTION--
|
|
|
6 |
<p>
|
|
|
7 |
While this directive is similar to %HTML.AllowedAttributes, for
|
|
|
8 |
forwards-compatibility with XML, this attribute has a different syntax. Instead of
|
|
|
9 |
<code>tag.attr</code>, use <code>tag@attr</code>. To disallow <code>href</code>
|
|
|
10 |
attributes in <code>a</code> tags, set this directive to
|
|
|
11 |
<code>a@href</code>. You can also disallow an attribute globally with
|
|
|
12 |
<code>attr</code> or <code>*@attr</code> (either syntax is fine; the latter
|
|
|
13 |
is provided for consistency with %HTML.AllowedAttributes).
|
|
|
14 |
</p>
|
|
|
15 |
<p>
|
|
|
16 |
<strong>Warning:</strong> This directive complements %HTML.ForbiddenElements,
|
|
|
17 |
accordingly, check
|
|
|
18 |
out that directive for a discussion of why you
|
|
|
19 |
should think twice before using this directive.
|
|
|
20 |
</p>
|
|
|
21 |
--# vim: et sw=4 sts=4
|