diff

//This module is adapted from the CodeIgniter framework
//The license is available at http://codeigniter.com/

var html_entity_decode = require('./entities').decode;

var never_allowed_str = {
    'document.cookie':              '[removed]',
    'document.write':               '[removed]',
    '.parentNode':                  '[removed]',
    '.innerHTML':                   '[removed]',
    'window.location':              '[removed]',
    '-moz-binding':                 '[removed]',
    '<!--':                         '&lt;!--',
    '-->':                          '--&gt;',
    '(<!\\[CDATA\\[)':              '&lt;![CDATA[',
    '<comment>':                    '&lt;comment&gt;'
};

var never_allowed_regex = {
//    'javascript\\s*:':                                       '[removed]',
    'expression\\s*(\\(|&#40;)':                             '[removed]',