mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-10-08 02:53:13 +02:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
29 lines
711 B
PHP
Executable File
29 lines
711 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Post-transform that copies lang's value to xml:lang (and vice-versa)
|
|
* @note Theoretically speaking, this could be a pre-transform, but putting
|
|
* post is more efficient.
|
|
*/
|
|
class HTMLPurifier_AttrTransform_Lang extends HTMLPurifier_AttrTransform
|
|
{
|
|
|
|
public function transform($attr, $config, $context) {
|
|
|
|
$lang = isset($attr['lang']) ? $attr['lang'] : false;
|
|
$xml_lang = isset($attr['xml:lang']) ? $attr['xml:lang'] : false;
|
|
|
|
if ($lang !== false && $xml_lang === false) {
|
|
$attr['xml:lang'] = $lang;
|
|
} elseif ($xml_lang !== false) {
|
|
$attr['lang'] = $xml_lang;
|
|
}
|
|
|
|
return $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|