Options
All
  • Public
  • Public/Protected
  • All
Menu

Utilities for parsing and assessing data URIs.

Index

Variables

Let dataUriMediaTypeWhitelist

dataUriMediaTypeWhitelist: string[]

Whitelist for media types (MIME types without parameters like charset) which are allowed in safe data URI's.

Functions

isDataUriSafe

  • isDataUriSafe(uri: string): boolean
  • Check if a data URI is safe, in that it cannot be used as an XSS attack vector. The data URI is considered safe when its detected media type (MIME type) is present in the data URI media type whitelist.

    Parameters

    • uri: string

      Data URI to scrutinize for XSS safety.

    Returns boolean

    True when the data URI is safe, false when the data URI is unsafe or invalid.

parseDataUri

  • Break a data URI string down into its sub-components.

    Parameters

    • uri: string

      Data URI to parse.

    Returns DataUriComponents

    as seen in the URI (no defaults are provided, omitted optionals will be undefined).