Check Content for Dangerous Substrings landing.repo.checkContent
We are still updating this page
Some data may be missing — we will complete it shortly.
Scope:
landingWho can execute the method: any user
The method landing.repo.checkContent checks the content for dangerous substrings. These include onclick="", <iframe>, and several others. In typical use cases, the chances of triggering are minimal. The method is used solely for content control during block registration.
Parameters
|
Parameter |
Description |
Available since |
|
content |
Content to be tested. |
|
|
splitter |
Optional parameter for separating dangerous substrings. Defaults to |
Examples
try
{
const response = await $b24.callMethod(
'landing.repo.checkContent',
{
content: '<div style="color: red" onclick="alert(123)"><iframe src="//evil.com"></iframe></div>',
splitter: '#AAA#'
}
);
const result = response.getData().result;
if(result.error())
console.error(result.error());
else
console.info(result);
}
catch(error)
{
console.error('Error:', error);
}
try {
$response = $b24Service
->core
->call(
'landing.repo.checkContent',
[
'content' => '<div style="color: red" onclick="alert(123)"><iframe src="//evil.com"></iframe></div>',
'splitter' => '#AAA#',
]
);
$result = $response
->getResponseData()
->getResult();
if ($result->error()) {
error_log($result->error());
} else {
echo 'Info: ' . print_r($result->data(), true);
}
} catch (Throwable $e) {
error_log($e->getMessage());
echo 'Error checking content: ' . $e->getMessage();
}
BX24.callMethod(
'landing.repo.checkContent',
{
content: '<div style="color: red" onclick="alert(123)"><iframe src="//evil.com"></iframe></div>',
splitter: '#AAA#'
},
function(result)
{
if(result.error())
console.error(result.error());
else
console.info(result.data());
}
);
How to Use Examples in Documentation
Response in case of success
200 OK
content:"<div style="color: red" oncl#AAA#ick="alert(123)"><ifr#AAA#ame src="//evil.com"></iframe></div>"
is_bad:true
Essentially, the label is_bad = true indicates that there are dangerous areas in the content, along with the text marked by the separators in those dangerous areas. The developer should modify such areas before registration.