video audio source section nav article aside hgroup
header footer figure figcaption time mark canvas
+ datalist
}],
default => [undef, { (
map { $_ => 1 } qw{
autofocus autoplay preload loopstart
loopend end playcount controls pubdate
placeholder min max step form required
+ autocomplete novalidate pattern list
+ formenctype formmethod formnovalidate
+ formtarget reversed
} ),
"/" => 1, # emit proper <hr /> XHTML
href => $safe_url_regexp,
src => $safe_url_regexp,
action => $safe_url_regexp,
+ formaction => $safe_url_regexp,
cite => $safe_url_regexp,
longdesc => $safe_url_regexp,
poster => $safe_url_regexp,
attribute and the source tag.
* htmlscrubber: Allow the html5 form attributes: placeholder autofocus,
min, max, step, required, autocomplete, novalidate, pattern, and form.
+ (Also the form* override attributes for input and buttons.)
+ * htmlscrubber: Allow the html5 datalist element, and the form list
+ attribute.
+ * htmlscrubber: Allow the html5 reversed and spellcheck attributes.
-- Joey Hess <joeyh@debian.org> Tue, 27 Apr 2010 12:10:51 -0400
> I have not added the new `ping` attribute, because parsing a
> space-separeated list of urls to avoid javascript injection is annoying,
-> and the attribute seems generally dubious. --[[Joey]]
+> and the attribute seems generally dubious.
+>
+> Need to understand better the attributes contenteditabl, contextmenu,
+> data-*, draggable, hidden, role, aria-*. Have not added those. --[[Joey]]
# HTML5 Validation and t/html.t