NAME

Articulate::Validation::NoScript

DESCRIPTION

An example validator to do a rudimentary check to see if the content has the text "<script" in it, to prevent users from injecting scripts directly into your application.

It doesn't thoroughly prevent Javascript injection, an onload attribute might do just as well.

METHODS

validate

Returns true if the content contains qr/<script/i; false otherwise.

It does not look at the meta to determine content type so might behave unexpectedly, e.g. if called on plain text.