private static function containsXss(NHtml $script)
{
if (!NStrings::checkEncoding($script->getHtml())) {
return true;
}
if (!($dom = self::createDomFromHtml($script))) {
return true;
}
$scripts = $dom->getElementsByTagName('script');
if ($scripts->length > 1) {
return true;
}
$filteredContent = $scripts->item(0)->textContent;
if ($script->getHtml() !== $filteredContent) {
return true;
}
return false;
}
