forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
22 lines
616 B
PHP
Executable File
22 lines
616 B
PHP
Executable File
<?php
|
|
|
|
class HTMLPurifier_HTMLModule_Tidy_Strict extends HTMLPurifier_HTMLModule_Tidy_XHTMLAndHTML4
|
|
{
|
|
public $name = 'Tidy_Strict';
|
|
public $defaultLevel = 'light';
|
|
|
|
public function makeFixes() {
|
|
$r = parent::makeFixes();
|
|
$r['blockquote#content_model_type'] = 'strictblockquote';
|
|
return $r;
|
|
}
|
|
|
|
public $defines_child_def = true;
|
|
public function getChildDef($def) {
|
|
if ($def->content_model_type != 'strictblockquote') return parent::getChildDef($def);
|
|
return new HTMLPurifier_ChildDef_StrictBlockquote($def->content_model);
|
|
}
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|