getXssConfiguration
get
/ccadmin/v1/merchant/xssConfiguration
Get the anti-XSS (anti-cross-site-scripting) configuration. Shows whitelisted endpoints (by id or uri prefix) and allowed XML tags.
Request
There are no request parameters for this operation.
Back to TopResponse
Supported Media Types
- application/json
200 Response
Following model is returned when operation succeeds.
Root Schema : getXssConfiguration_response
Type:
Show Source
object
-
endpointIdsToAlwaysValidate(optional):
array endpointIdsToAlwaysValidate
Editable endpoint ids that will be XSS validated even if they fall under the whitelists.
-
endpointIdsWhitelist(optional):
array endpointIdsWhitelist
Editable whitelist of endpoint ids that will not perform XSS validation.
-
illegalAttributeNames(optional):
array illegalAttributeNames
Editable illegal XML attribute name list.
-
tagWhitelist(optional):
array tagWhitelist
The list of XML tags that are allowed via whitelist. This is the built-in list and is read-only
-
tagWhitelistAdditions(optional):
array tagWhitelistAdditions
The list of additional XML tags that are allowed via whitelist. This is the editable list.
-
uriPrefixesWhitelist(optional):
array uriPrefixesWhitelist
Editable whitelist of endpoint URI prefixes that will not perform XSS validation.
Nested Schema : endpointIdsToAlwaysValidate
Type:
array
Editable endpoint ids that will be XSS validated even if they fall under the whitelists.
Show Source
Nested Schema : endpointIdsWhitelist
Type:
array
Editable whitelist of endpoint ids that will not perform XSS validation.
Show Source
Nested Schema : illegalAttributeNames
Type:
array
Editable illegal XML attribute name list.
Show Source
Nested Schema : tagWhitelist
Type:
array
The list of XML tags that are allowed via whitelist. This is the built-in list and is read-only
Show Source
Nested Schema : tagWhitelistAdditions
Type:
array
The list of additional XML tags that are allowed via whitelist. This is the editable list.
Show Source
Nested Schema : uriPrefixesWhitelist
Type:
array
Editable whitelist of endpoint URI prefixes that will not perform XSS validation.
Show Source
Example Response (application/json)
{
"endpointIdsWhitelist":[
"applicationJavaScript"
],
"uriPrefixesWhitelist":[
"/ccadmin/v1"
],
"illegalAttributeNames":[
"onabort",
"onactivate",
"onafterprint",
"onafterupdate",
"onbeforeactivate",
"onbeforecopy",
"onbeforecut",
"onbeforedeactivate",
"onbeforeeditfocus",
"onbeforepaste",
"onbeforeprint",
"onbeforeunload",
"onbeforeupdate",
"onblur",
"onbounce",
"oncellchange",
"onchange",
"onclick",
"oncontextmenu",
"oncontrolselect",
"oncopy",
"oncut",
"ondataavailable",
"ondatasetchanged",
"ondatasetcomplete",
"ondblclick",
"ondeactivate",
"ondrag",
"ondragend",
"ondragenter",
"ondragleave",
"ondragover",
"ondragstart",
"ondrop",
"onerror",
"onerrorupdate",
"onfilterchange",
"onfinish",
"onfocus",
"onfocusin",
"onfocusout",
"onhashchange",
"onhelp",
"oninput",
"onkeydown",
"onkeypress",
"onkeyup",
"onload",
"onlosecapture",
"onmessage",
"onmousedown",
"onmouseenter",
"onmouseleave",
"onmousemove",
"onmouseout",
"onmouseover",
"onmouseup",
"onmousewheel",
"onmove",
"onmoveend",
"onmovestart",
"onoffline",
"ononline",
"onpaste",
"onpropertychange",
"onreadystatechange",
"onreset",
"onresize",
"onresizeend",
"onresizestart",
"onrowenter",
"onrowexit",
"onrowsdelete",
"onrowsinserted",
"onscroll",
"onsearch",
"onselect",
"onselectionchange",
"onselectstart",
"onstart",
"onstop",
"onsubmit",
"onunload",
"src"
],
"tagWhitelistAdditions":[
"bar",
"foo"
],
"tagWhitelist":[
"a",
"abbr",
"acronym",
"address",
"b",
"big",
"blockquote",
"br",
"caption",
"cite",
"code",
"col",
"colgroup",
"dd",
"defn",
"del",
"dir",
"dt",
"em",
"h1",
"h2",
"h3",
"h4",
"h5",
"h6",
"hr",
"i",
"img",
"ins",
"kbd",
"li",
"link",
"menu",
"ol",
"p",
"pre",
"q",
"samp",
"small",
"strong",
"sub",
"sup",
"table",
"tbody",
"td",
"tfoot",
"th",
"thread",
"tr",
"tt",
"ul",
"var"
],
"endpointIdsToAlwaysValidate":[
"createProduct",
"updateProduct"
]
}