hast
utility to check if an attribute name is an event handler.
- What is this?
- When should I use this?
- Install
- Use
- API
- Syntax
- Syntax tree
- Types
- Compatibility
- Security
- Contribute
- License
This package is a utility to check if an attribute name or DOM property is an
event handler.
It does not check whether the supposed event handler is valid or known
(onmadeupevent
will also yield true
).
You can use this package to check whether an attribute value likely contains JavaScript or something else.
This package is ESM only. In Node.js (version 16 ), install with npm:
npm install hast-util-is-event-handler
In Deno with esm.sh
:
import {isEventHandler} from 'https://esm.sh/hast-util-is-event-handler@3'
In browsers with esm.sh
:
<script type="module">
import {isEventHandler} from 'https://esm.sh/hast-util-is-event-handler@3?bundle'
</script>
import {isEventHandler} from 'hast-util-is-event-handler'
isEventHandler('oncut') //=> true
isEventHandler('onpushsubscriptionchange') //=> true
isEventHandler('ones') //=> false
isEventHandler('class') //=> false
This package exports the identifier
isEventHandler
.
There is no default export.
Check if a property is an event handler.
Returns true
when starting with 'on'
and its length
is 5
or more.
name
(string
) — property name to check
Whether prop
is an event handler (boolean
).
HTML is parsed according to WHATWG HTML (the living standard), which is also followed by all browsers.
The syntax tree used is hast.
This package is fully typed with TypeScript.
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release, we drop support for unmaintained versions of
Node.
This means we try to keep the current release line,
hast-util-is-event-handler@^3
,
compatible with Node.js 16.
As rehype works on HTML and improper use of HTML can open you up to a
cross-site scripting (XSS) attack, use of rehype can also be unsafe.
Use rehype-sanitize
to make the tree safe.
See contributing.md
in rehypejs/.github
for ways
to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.