About Me

I'm just someone struggling against my own inertia to be creative. My current favorite book is "Oh the places you'll go" by Dr. Seuss

Monday, November 21, 2011

Securing the Web, appendix

ManifestML
*(requires id attribute)
<!-- -->
<!DOCTYPE>
<a>*
<applet>*
<audio>*
<base>
<body>*
<canvas>*
<embed>*
<form>*
<head>
<html>
<iframe>*
<img>*
<link>*
<meta>
<noembed>
<noframes>
<noscript>
<object>*
<param>
<script>* (only src attribute, no inline script)
<style>* (but only css @ directives allowed inside)
<title>
<video>*
<source>

SemanticML
(no html comments, id attributes or inline event handlers)
<a>
<abbr>
<acronym>
<address>
<area >
<b>
<bdo>
<blockquote>
<br>
<button>
<caption>
<cite>
<code>
<col>
<colgroup>
<command>
<datagrid>
<dd>
<del>
<dfn>
<dialog>
<dir>
<dl>
<dt>
<em>
<figure>
<h1>
<h2>
<h3>
<h4>
<h5>
<h6>
<hgroup>
<hr>
<i>
<img> (restricted to #fragment refs)
<ins>
<kbd>
<li>
<map>
<mark>
<meter>
<ol>
<output>
<p>
<pre>
<progress>
<q>
<rp>
<rt>
<ruby>
<s>
<samp>
<small>
<span>
<strike>
<strong>
<sub>
<summary>
<sup>
<table>
<tbody>
<td>
<tfoot>
<th>
<thead>
<tr>
<tt>
<u>
<ul>
<var>

LayoutML

(with src= attributes that can point to #fragments of ManifestML)
*(requires id attribute)
<article>*
<aside>*
<details>*
<div>*
<footer>*
<form>* (restricted to #fragment refs)
<header>*
<menu>*
<nav>*
<section>*
<sidebar>*


FormML
<a>
<br>
<button>
<caption>
<col>
<colgroup>
<datalist>
<em>
<fieldset>
<form>
<input type="button">
<input type="checkbox">
<input type="color">
<input type="date">
<input type="datetime">
<input type="datetime-local">
<input type="email">
<input type="file">
<input type="hidden">
<input type="image">
<input type="month">
<input type="number">
<input type="password">
<input type="radio">
<input type="range">
<input type="reset">
<input type="search">
<input type="submit">
<input type="tel">
<input type="text">
<input type="time">
<input type="url">
<input type="week">
<input>
<keygen>
<label>
<legend>
<optgroup>
<option>
<p>
<select>
<strong>
<table>
<tbody>
<td>
<textarea>
<tfoot>
<th>
<thead>
<tr>

No comments: