mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-24 08:53:37 +01:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
95 lines
2.6 KiB
PHP
Executable File
95 lines
2.6 KiB
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Factory for token generation.
|
|
*
|
|
* @note Doing some benchmarking indicates that the new operator is much
|
|
* slower than the clone operator (even discounting the cost of the
|
|
* constructor). This class is for that optimization.
|
|
* Other then that, there's not much point as we don't
|
|
* maintain parallel HTMLPurifier_Token hierarchies (the main reason why
|
|
* you'd want to use an abstract factory).
|
|
* @todo Port DirectLex to use this
|
|
*/
|
|
class HTMLPurifier_TokenFactory
|
|
{
|
|
|
|
/**
|
|
* Prototypes that will be cloned.
|
|
* @private
|
|
*/
|
|
// p stands for prototype
|
|
private $p_start, $p_end, $p_empty, $p_text, $p_comment;
|
|
|
|
/**
|
|
* Generates blank prototypes for cloning.
|
|
*/
|
|
public function __construct() {
|
|
$this->p_start = new HTMLPurifier_Token_Start('', array());
|
|
$this->p_end = new HTMLPurifier_Token_End('');
|
|
$this->p_empty = new HTMLPurifier_Token_Empty('', array());
|
|
$this->p_text = new HTMLPurifier_Token_Text('');
|
|
$this->p_comment= new HTMLPurifier_Token_Comment('');
|
|
}
|
|
|
|
/**
|
|
* Creates a HTMLPurifier_Token_Start.
|
|
* @param $name Tag name
|
|
* @param $attr Associative array of attributes
|
|
* @return Generated HTMLPurifier_Token_Start
|
|
*/
|
|
public function createStart($name, $attr = array()) {
|
|
$p = clone $this->p_start;
|
|
$p->__construct($name, $attr);
|
|
return $p;
|
|
}
|
|
|
|
/**
|
|
* Creates a HTMLPurifier_Token_End.
|
|
* @param $name Tag name
|
|
* @return Generated HTMLPurifier_Token_End
|
|
*/
|
|
public function createEnd($name) {
|
|
$p = clone $this->p_end;
|
|
$p->__construct($name);
|
|
return $p;
|
|
}
|
|
|
|
/**
|
|
* Creates a HTMLPurifier_Token_Empty.
|
|
* @param $name Tag name
|
|
* @param $attr Associative array of attributes
|
|
* @return Generated HTMLPurifier_Token_Empty
|
|
*/
|
|
public function createEmpty($name, $attr = array()) {
|
|
$p = clone $this->p_empty;
|
|
$p->__construct($name, $attr);
|
|
return $p;
|
|
}
|
|
|
|
/**
|
|
* Creates a HTMLPurifier_Token_Text.
|
|
* @param $data Data of text token
|
|
* @return Generated HTMLPurifier_Token_Text
|
|
*/
|
|
public function createText($data) {
|
|
$p = clone $this->p_text;
|
|
$p->__construct($data);
|
|
return $p;
|
|
}
|
|
|
|
/**
|
|
* Creates a HTMLPurifier_Token_Comment.
|
|
* @param $data Data of comment token
|
|
* @return Generated HTMLPurifier_Token_Comment
|
|
*/
|
|
public function createComment($data) {
|
|
$p = clone $this->p_comment;
|
|
$p->__construct($data);
|
|
return $p;
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|