forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
22 lines
639 B
PHP
Executable File
22 lines
639 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Primitive email validation class based on the regexp found at
|
|
* http://www.regular-expressions.info/email.html
|
|
*/
|
|
class HTMLPurifier_AttrDef_URI_Email_SimpleCheck extends HTMLPurifier_AttrDef_URI_Email
|
|
{
|
|
|
|
public function validate($string, $config, $context) {
|
|
// no support for named mailboxes i.e. "Bob <bob@example.com>"
|
|
// that needs more percent encoding to be done
|
|
if ($string == '') return false;
|
|
$string = trim($string);
|
|
$result = preg_match('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i', $string);
|
|
return $result ? $string : false;
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|