About the Custom Whitelist’s Structure

The following lines are required in the custom whitelist: <?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple. com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0"> <dict>

<key>protocols</key>

<array>

allowed protocols </array> <key>styles</key> <array>

allowed CSS styles </array> <key>tags</key> <dict>

allowed HTML tags and attributes </dict>

</dict>

</plist>

The dict contains several key/value blocks that allow specific protocols, styles, tags, or attributes.

Allowing Specific URL Protocols

To allow specific URL protocols, add strings with the protocols’ names to the protocols block.

For example, to allow entry of URLs that start with “irc://” and “scp://”, create the following block:

<key>protocols</key>

<array>

<string>irc</string>

<string>scp</string>

</array>

Allowing Specific CSS Styles

To allow specific CSS style attributes, add strings with the style attributes’ names to the styles block.

32

Chapter 2    Allowing Specific Protocols, CSS Styles, and HTML Tags and Attributes

Page 32
Image 32
Apple Computer Hardware manual About the Custom Whitelist’s Structure, Allowing Specific URL Protocols