mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-12-04 22:01:05 +01:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
22 lines
573 B
PHP
Executable File
22 lines
573 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Special-case enum attribute definition that lazy loads allowed frame targets
|
|
*/
|
|
class HTMLPurifier_AttrDef_HTML_FrameTarget extends HTMLPurifier_AttrDef_Enum
|
|
{
|
|
|
|
public $valid_values = false; // uninitialized value
|
|
protected $case_sensitive = false;
|
|
|
|
public function __construct() {}
|
|
|
|
public function validate($string, $config, $context) {
|
|
if ($this->valid_values === false) $this->valid_values = $config->get('Attr', 'AllowedFrameTargets');
|
|
return parent::validate($string, $config, $context);
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|