Oracle Fusion Middleware Tag Reference for Oracle ADF Faces 12c (12.2.1.4.0) E81455-03

# <af:sanitized>

af:sanitized sanitized sanitized

UIComponent class: oracle.adf.view.rich.component.rich.output.RichSanitized
Component type: oracle.adf.RichSanitized

af:sanitized component works like f:verbatim except:

- It supports a valueExpression as well as inline content. If both are provided, then the inline content will obscure the value expression.
- The value of the component will be passed through a sanitization method. The method implementation will come from web.xml parameter - oracle.adf.view.rich.sanitized.SANITIZATION_STRATEGY. The implementing class should extend from oracle.adf.view.rich.sanitized.SanitizationStrategy. The default implementation provided by the framework will allow only safe HTML tags and attributes. The default implementation will be used only if an implementation is not specified via web.xml.

## Code Example(s)

    <af:sanitized>
                  <div style="height: 68px; width: 250px; line-height: 18px;">
                    <div style="padding: 0px; margin: 0px; width: 64px; display: inline-block;">
                      <img src="../../images/people/profilePic" height="56" width="56" />
                    </div>
                  </div>
                </af:sanitized>

## Events

Type | Phases | Description
--- | --- | ---
org.apache.myfaces.trinidad.event.AttributeChangeEvent | Invoke, Application, Apply, Request, Values | Event delivered to describe an attribute change. Attribute change events are not delivered for any programmatic change to a property. They are only delivered when a renderer changes a property without the application's specific request. An example of an attribute change event might include the width of a column that supported client-side resizing.

## Attributes

Name | Type | Supports EL? | Description
attributeChangeListener | javax.el.MethodExpression | Only EL | a method reference to an attribute change listener. Attribute change events are not delivered for any programmatic change to a property. They are only delivered when a renderer changes a property without the application's specific request. An example of an attribute change events might include the width of a column that supported client-side resizing.
binding | oracle.adf.view.rich.component.rich.output.RichSanitized | Only EL | an EL reference that will store the component instance on a bean. This can be used to give programmatic access to a component from a backing bean, or to move creation of the component to a backing bean.
id | String | No | the identifier for the component. Every component may be named by a component identifier that must conform to the following rules: They must start with a letter (as defined by the Character.isLetter() method) or underscore ( _ ). Subsequent characters must be letters (as defined by the Character.isLetter() method), digits as defined by the Character.isDigit() method, dashes ( - ), or underscores ( _ ). To minimize the size of responses generated by JavaServer Faces, it is recommended that component identifiers be as short as possible. If a component has been given an identifier, it must be unique in the namespace of the closest ancestor to that component that is a NamingContainer (if any).
rendered | boolean | Yes | Default Value: true whether the component is rendered. When set to false, no output will be delivered for this component (the component will not in any way be rendered, and cannot be made visible on the client). If you want to change a component's rendered attribute from false to true using PPR, set the partialTrigger attribute of its parent component so the parent refreshes and in turn will render this component.
value | String | Yes | the value of the component.