struct Components::SafeSrcSet

• Components::SafeSrcSet
• Struct
• Value
• Object

Overview

srcset is a comma-separated list of "<url> <descriptor>?" candidates — a URL list with descriptors, not a single URL — so SafeURL alone cannot validate it (proposal §3.3 external-examiner caveat: "srcset ... needs its own parser, not plain SafeURL").

This parses each candidate, validates its URL component through SafeURL, and validates its descriptor against the width (NNNw) or pixel-density (N.Nx) grammar. The whole value is rejected if ANY candidate is unsafe or malformed — fail closed, not "escape what we can."

Defined in:

components/safe/safe_srcset.cr

Constant Summary

DESCRIPTOR_PATTERN = /\A\d+(\.\d+)?[wx]\z/

Constructors

• .parse!(srcset : String) : SafeSrcSet

Class Method Summary

• .parse(srcset : String) : SafeSrcSet | Nil

Instance Method Summary

• #to_s(io : IO) : Nil

  Same as #inspect(io).

• #to_s : String

  Returns a nicely readable and concise string representation of this object, typically intended for users.

Constructor Detail

Class Method Detail

Instance Method Detail