(function () { var checkXdmAclHost = function (host) { var acls = [".ndla.no","ndla.no",".ndlap3.seria.net","ndlap3.seria.net"]; var ok = false; for (i in acls) { if (acls.hasOwnProperty(i)) { var acl = acls[i]; if (acl.substr(0, 1) == '.' && host.length > acl.length && host.substr(host.length - acl.length) == acl) { ok = true; break; } else if (host == acl) { ok = true; break; } } } return ok; } var checkXdmAcl = function () { var url = window.location.href; if (url.indexOf('http://') == 0) { url = url.substr(7); } else if (url.indexOf('https://') == 0) { url = url.substr(8); } else return false; var i = url.indexOf('/'); var host = ''; if (i > 0) host = url.substr(0, i); else if (i == -1) host = url; return checkXdmAclHost(host); } /* * Use with caution (XSS issues) */ getRoamAuthUrl = function() { if (!checkXdmAcl()) return false; return false; } /* * Use with caution (XSS issues). Do not use for authentication! */ getUserIdentity = function() { if (!checkXdmAcl()) return false; return false; } })();