Home > widget-integration > CountdownTimerController > sanitizeCssValue
CountdownTimerController.sanitizeCssValue() method
Strip characters that could break out of a CSS value context.
Removes {};<> and backslashes to prevent CSS injection via merchant-configured style settings.
Signature:
protected sanitizeCssValue(value: string): string;
Parameters
|
Parameter |
Type |
Description |
|---|---|---|
|
value |
string |
Raw CSS value string (color, font-family, etc.) |
Returns:
string
Sanitized string safe for CSS value interpolation
Example
Override to also collapse whitespace:
protected sanitizeCssValue(value: string): string {
return super.sanitizeCssValue(value).replace(/\s+/g, ' ').trim();
}