| Interface | Description |
|---|---|
| SoyFunction |
Superinterface for a Soy function.
|
| SoyJavaFunction |
Interface for a Soy function implemented for Java runtime rendering.
|
| SoyJavaPrintDirective |
Interface for a Soy print directive implemented for Java runtime rendering.
|
| SoyPrintDirective |
Superinterface for a Soy print directive.
|
| Class | Description |
|---|---|
| ApiCallScopeBindingAnnotations |
Binding annotations related to the ApiCallScope.
|
| EscapingConventions |
Definitions of escaping functions that behave consistently in JavaScript and Java that implement
the escaping directives as in
{print $x |escapeJsString}. |
| EscapingConventions.CrossLanguageStringXform |
A transformation on strings that preserves some correctness or safety properties.
|
| EscapingConventions.Escape |
A mapping from a plain text character to the escaped text in the target language.
|
| EscapingConventions.EscapeCssString |
Implements the
|escapeCssString directive which allows arbitrary content to be
included in a CSS quoted string or identifier. |
| EscapingConventions.EscapeHtml |
Implements the
|escapeHtml directive. |
| EscapingConventions.EscapeHtmlNospace |
Implements the
|escapeHtmlNoSpace directive which allows arbitrary content
to be included in the value of an unquoted HTML attribute. |
| EscapingConventions.EscapeJsRegex |
Implements the
|escapeJsRegex directive which allows arbitrary content
to be included inside a JavaScript regular expression. |
| EscapingConventions.EscapeJsString |
Implements the
|escapeJsString directive which allows arbitrary content
to be included inside a quoted JavaScript string. |
| EscapingConventions.EscapeUri |
Implements the
|escapeUri directive which allows arbitrary content to be included in a
URI regardless of the string delimiters of the the surrounding language. |
| EscapingConventions.FilterCssValue |
Implements the
|filterCssValue directive which filters out strings that are not valid
CSS property names, keyword values, quantities, hex colors, or ID or class literals. |
| EscapingConventions.FilterHtmlAttributes |
Implements the
|filterHtmlAttributes directive which filters out identifiers that
can't appear as part of an HTML tag or attribute name. |
| EscapingConventions.FilterHtmlElementName |
Implements the
|filterHtmlElementName directive which filters out identifiers that
can't appear as part of an HTML tag or attribute name. |
| EscapingConventions.FilterImageDataUri |
Accepts only data URI's that contain an image.
|
| EscapingConventions.FilterNormalizeMediaUri |
Like
EscapingConventions.FilterNormalizeUri, but also accepts data: and blob: URIs, since
image sources don't execute script in the same origin as the page (although image handling
0-days are available from time to time, but a templating language can't realistically try to
protect against such a thing). |
| EscapingConventions.FilterNormalizeUri |
Like
EscapingConventions.NormalizeUri but filters out dangerous protocols. |
| EscapingConventions.NormalizeHtml |
A directive that encodes any HTML special characters that can appear in RCDATA unescaped but
that can be escaped without changing semantics.
|
| EscapingConventions.NormalizeHtmlNospace |
A directive that encodes any HTML special characters and unquoted attribute terminators that
can appear in RCDATA unescaped but that can be escaped without changing semantics.
|
| EscapingConventions.NormalizeUri |
Implements the
|normalizeUri directive which allows arbitrary content to be included
in a URI regardless of the string delimiters of the the surrounding language. |
| Sanitizers |
Java implementations of functions that escape, normalize, and filter untrusted strings to
allow them to be safely embedded in particular contexts.
|
| SoyJavaRuntimeFunctionUtils | Deprecated
Simply use
*Data.forValue() directly. |
| TagWhitelist |
Contains lower-case names of innocuous HTML elements.
|
| Enum | Description |
|---|---|
| EscapingConventions.EscapingLanguage |
The list of potential languages which are used by the escapers.
|
| TagWhitelist.OptionalSafeTag |
Additional tags which can be white-listed as safe.
|
| Annotation Type | Description |
|---|---|
| ApiCallScopeBindingAnnotations.ApiCall |
Annotation for a GuiceSimpleScope parameter that should receive the ApiCallScope.
|
| ApiCallScopeBindingAnnotations.LocaleString |
Annotation for the localeString parameter in the ApiCallScope.
|
| SoyPureFunction |
Annotation for a Soy function that's pure (e.g.
|
| SoyPurePrintDirective |
Annotation for a Soy print directive that's pure (e.g.
|