About the Custom Whitelist’s Structure
The following lines are required in the custom whitelist: <?xml version="1.0"
<!DOCTYPE plist PUBLIC
<plist version="1.0"> <dict>
<key>protocols</key>
<array>
allowed protocols </array> <key>styles</key> <array>
allowed CSS styles </array> <key>tags</key> <dict>
allowed HTML tags and attributes </dict>
</dict>
</plist>
The dict contains several key/value blocks that allow specific protocols, styles, tags, or attributes.
Allowing Specific URL Protocols
To allow specific URL protocols, add strings with the protocols’ names to the protocols block.
For example, to allow entry of URLs that start with “irc://” and “scp://”, create the following block:
<key>protocols</key>
<array>
<string>irc</string>
<string>scp</string>
</array>
Allowing Specific CSS Styles
To allow specific CSS style attributes, add strings with the style attributes’ names to the styles block.
32
Chapter 2 Allowing Specific Protocols, CSS Styles, and HTML Tags and Attributes