Home > widget-integration > DOM_EVENTS

DOM_EVENTS variable

Static list of DOM event names used for XSS detection.

Contains 100+ DOM event handler names that could be exploited in XSS attacks. This array is used to build the EVENT_REGEX pattern for comprehensive security scanning.

Signature:

DOM_EVENTS: string[]

Remarks

This constant is shared across the filter module to avoid recreating the array in every validation call. The EVENT_REGEX is compiled from this list once at module initialization for optimal performance.

Technical Support teams typically don't need to modify this list, but can reference it when implementing custom XSS detection in extended classes.