mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-12-13 10:11:22 +01:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
42 lines
984 B
PHP
Executable File
42 lines
984 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Validates a MultiLength as defined by the HTML spec.
|
|
*
|
|
* A multilength is either a integer (pixel count), a percentage, or
|
|
* a relative number.
|
|
*/
|
|
class HTMLPurifier_AttrDef_HTML_MultiLength extends HTMLPurifier_AttrDef_HTML_Length
|
|
{
|
|
|
|
public function validate($string, $config, $context) {
|
|
|
|
$string = trim($string);
|
|
if ($string === '') return false;
|
|
|
|
$parent_result = parent::validate($string, $config, $context);
|
|
if ($parent_result !== false) return $parent_result;
|
|
|
|
$length = strlen($string);
|
|
$last_char = $string[$length - 1];
|
|
|
|
if ($last_char !== '*') return false;
|
|
|
|
$int = substr($string, 0, $length - 1);
|
|
|
|
if ($int == '') return '*';
|
|
if (!is_numeric($int)) return false;
|
|
|
|
$int = (int) $int;
|
|
|
|
if ($int < 0) return false;
|
|
if ($int == 0) return '0';
|
|
if ($int == 1) return '*';
|
|
return ((string) $int) . '*';
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|