hast-util-is-event-handler

hast utility to check if an attribute name is an event handler.

Contents

• What is this?
• When should I use this?
• Install
• Use
• API
  • isEventHandler(name)
• Syntax
• Syntax tree
• Types
• Compatibility
• Security
• Contribute
• License

What is this?

This package is a utility to check if an attribute name or DOM property is an event handler. It does not check whether the supposed event handler is valid or known (onmadeupevent will also yield true).

When should I use this?

You can use this package to check whether an attribute value likely contains JavaScript or something else.

Install

This package is ESM only. In Node.js (version 16+), install with npm:

npm install hast-util-is-event-handler

In Deno with esm.sh:

import {isEventHandler} from 'https://esm.sh/hast-util-is-event-handler@3'

In browsers with esm.sh:

<script type="module">
  import {isEventHandler} from 'https://esm.sh/hast-util-is-event-handler@3?bundle'
</script>

Use

import {isEventHandler} from 'hast-util-is-event-handler'

isEventHandler('oncut') //=> true
isEventHandler('onpushsubscriptionchange') //=> true
isEventHandler('ones') //=> false
isEventHandler('class') //=> false

API

This package exports the identifier isEventHandler. There is no default export.

isEventHandler(name)

Check if a property is an event handler.

Returns true when starting with 'on' and its length is 5 or more.

Parameters

• name (string) — property name to check

Returns

Whether prop is an event handler (boolean).

Syntax

HTML is parsed according to WHATWG HTML (the living standard), which is also followed by all browsers.

Syntax tree

The syntax tree used is hast.

Types

This package is fully typed with TypeScript.

Compatibility

Projects maintained by the unified collective are compatible with maintained versions of Node.js.

When we cut a new major release, we drop support for unmaintained versions of Node. This means we try to keep the current release line, hast-util-is-event-handler@^3, compatible with Node.js 16.

Security

As rehype works on HTML and improper use of HTML can open you up to a cross-site scripting (XSS) attack, use of rehype can also be unsafe. Use rehype-sanitize to make the tree safe.

Contribute

See contributing.md in rehypejs/.github for ways to get started. See support.md for ways to get help.

This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.

License

MIT © Titus Wormer