a616cb471d
This commit changes markdown sanitization behaviour in following way: class, style and data-* attributes are removed by default. These attributes open possible vulnerability vectors to attackers. The original behavior of sanitizer (before this commit) can be enabled by *useUnsafeMarkdown* configuration option. Use this configuration option with caution and only in cases when you know what you're doing.
114 lines
2.0 KiB
JavaScript
114 lines
2.0 KiB
JavaScript
const standardVariables = {
|
|
CONFIG_URL: {
|
|
type: "string",
|
|
name: "configUrl"
|
|
},
|
|
DOM_ID: {
|
|
type: "string",
|
|
name: "dom_id"
|
|
},
|
|
SPEC: {
|
|
type: "object",
|
|
name: "spec"
|
|
},
|
|
URL: {
|
|
type: "string",
|
|
name: "url"
|
|
},
|
|
URLS: {
|
|
type: "array",
|
|
name: "urls"
|
|
},
|
|
URLS_PRIMARY_NAME: {
|
|
type: "string",
|
|
name: "urls.primaryName"
|
|
},
|
|
LAYOUT: {
|
|
type: "string",
|
|
name: "layout"
|
|
},
|
|
DEEP_LINKING: {
|
|
type: "boolean",
|
|
name: "deepLinking"
|
|
},
|
|
DISPLAY_OPERATION_ID: {
|
|
type: "boolean",
|
|
name: "displayOperationId"
|
|
},
|
|
DEFAULT_MODELS_EXPAND_DEPTH: {
|
|
type: "number",
|
|
name: "defaultModelsExpandDepth"
|
|
},
|
|
DEFAULT_MODEL_EXPAND_DEPTH: {
|
|
type: "number",
|
|
name: "defaultModelExpandDepth"
|
|
},
|
|
DEFAULT_MODEL_RENDERING: {
|
|
type: "string",
|
|
name: "defaultModelRendering"
|
|
},
|
|
DISPLAY_REQUEST_DURATION: {
|
|
type: "boolean",
|
|
name: "displayRequestDuration"
|
|
},
|
|
DOC_EXPANSION: {
|
|
type: "string",
|
|
name: "docExpansion"
|
|
},
|
|
FILTER: {
|
|
type: "string",
|
|
name: "filter"
|
|
},
|
|
MAX_DISPLAYED_TAGS: {
|
|
type: "number",
|
|
name: "maxDisplayedTags"
|
|
},
|
|
SHOW_EXTENSIONS: {
|
|
type: "boolean",
|
|
name: "showExtensions"
|
|
},
|
|
SHOW_COMMON_EXTENSIONS: {
|
|
type: "boolean",
|
|
name: "showCommonExtensions"
|
|
},
|
|
USE_UNSAFE_MARKDOWN: {
|
|
type: "boolean",
|
|
name: "useUnsafeMarkdown"
|
|
},
|
|
OAUTH2_REDIRECT_URL: {
|
|
type: "string",
|
|
name: "oauth2RedirectUrl"
|
|
},
|
|
SHOW_MUTATED_REQUEST: {
|
|
type: "boolean",
|
|
name: "showMutatedRequest"
|
|
},
|
|
SUPPORTED_SUBMIT_METHODS: {
|
|
type: "array",
|
|
name: "supportedSubmitMethods"
|
|
},
|
|
VALIDATOR_URL: {
|
|
type: "string",
|
|
name: "validatorUrl"
|
|
},
|
|
WITH_CREDENTIALS: {
|
|
type: "boolean",
|
|
name: "withCredentials",
|
|
}
|
|
}
|
|
|
|
const legacyVariables = {
|
|
API_URL: {
|
|
type: "string",
|
|
name: "url",
|
|
legacy: true
|
|
},
|
|
API_URLS: {
|
|
type: "array",
|
|
name: "urls",
|
|
legacy: true
|
|
}
|
|
}
|
|
|
|
module.exports = Object.assign({}, standardVariables, legacyVariables)
|