mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-12-12 09:40:45 +01:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
42 lines
950 B
PHP
Executable File
42 lines
950 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Validates the HTML type length (not to be confused with CSS's length).
|
|
*
|
|
* This accepts integer pixels or percentages as lengths for certain
|
|
* HTML attributes.
|
|
*/
|
|
|
|
class HTMLPurifier_AttrDef_HTML_Length extends HTMLPurifier_AttrDef_HTML_Pixels
|
|
{
|
|
|
|
public function validate($string, $config, $context) {
|
|
|
|
$string = trim($string);
|
|
if ($string === '') return false;
|
|
|
|
$parent_result = parent::validate($string, $config, $context);
|
|
if ($parent_result !== false) return $parent_result;
|
|
|
|
$length = strlen($string);
|
|
$last_char = $string[$length - 1];
|
|
|
|
if ($last_char !== '%') return false;
|
|
|
|
$points = substr($string, 0, $length - 1);
|
|
|
|
if (!is_numeric($points)) return false;
|
|
|
|
$points = (int) $points;
|
|
|
|
if ($points < 0) return '0%';
|
|
if ($points > 100) return '100%';
|
|
|
|
return ((string) $points) . '%';
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|