forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
22 lines
562 B
PHP
Executable File
22 lines
562 B
PHP
Executable File
<?php
|
|
|
|
class HTMLPurifier_AttrDef_CSS_AlphaValue extends HTMLPurifier_AttrDef_CSS_Number
|
|
{
|
|
|
|
public function __construct() {
|
|
parent::__construct(false); // opacity is non-negative, but we will clamp it
|
|
}
|
|
|
|
public function validate($number, $config, $context) {
|
|
$result = parent::validate($number, $config, $context);
|
|
if ($result === false) return $result;
|
|
$float = (float) $result;
|
|
if ($float < 0.0) $result = '0';
|
|
if ($float > 1.0) $result = '1';
|
|
return $result;
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|