forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
59 lines
1.4 KiB
PHP
Executable File
59 lines
1.4 KiB
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Generic pre-transform that converts an attribute with a fixed number of
|
|
* values (enumerated) to CSS.
|
|
*/
|
|
class HTMLPurifier_AttrTransform_EnumToCSS extends HTMLPurifier_AttrTransform {
|
|
|
|
/**
|
|
* Name of attribute to transform from
|
|
*/
|
|
protected $attr;
|
|
|
|
/**
|
|
* Lookup array of attribute values to CSS
|
|
*/
|
|
protected $enumToCSS = array();
|
|
|
|
/**
|
|
* Case sensitivity of the matching
|
|
* @warning Currently can only be guaranteed to work with ASCII
|
|
* values.
|
|
*/
|
|
protected $caseSensitive = false;
|
|
|
|
/**
|
|
* @param $attr String attribute name to transform from
|
|
* @param $enumToCSS Lookup array of attribute values to CSS
|
|
* @param $case_sensitive Boolean case sensitivity indicator, default false
|
|
*/
|
|
public function __construct($attr, $enum_to_css, $case_sensitive = false) {
|
|
$this->attr = $attr;
|
|
$this->enumToCSS = $enum_to_css;
|
|
$this->caseSensitive = (bool) $case_sensitive;
|
|
}
|
|
|
|
public function transform($attr, $config, $context) {
|
|
|
|
if (!isset($attr[$this->attr])) return $attr;
|
|
|
|
$value = trim($attr[$this->attr]);
|
|
unset($attr[$this->attr]);
|
|
|
|
if (!$this->caseSensitive) $value = strtolower($value);
|
|
|
|
if (!isset($this->enumToCSS[$value])) {
|
|
return $attr;
|
|
}
|
|
|
|
$this->prependCSS($attr, $this->enumToCSS[$value]);
|
|
|
|
return $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|