forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
28 lines
706 B
PHP
Executable File
28 lines
706 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Class for handling width/height length attribute transformations to CSS
|
|
*/
|
|
class HTMLPurifier_AttrTransform_Length extends HTMLPurifier_AttrTransform
|
|
{
|
|
|
|
protected $name;
|
|
protected $cssName;
|
|
|
|
public function __construct($name, $css_name = null) {
|
|
$this->name = $name;
|
|
$this->cssName = $css_name ? $css_name : $name;
|
|
}
|
|
|
|
public function transform($attr, $config, $context) {
|
|
if (!isset($attr[$this->name])) return $attr;
|
|
$length = $this->confiscateAttr($attr, $this->name);
|
|
if(ctype_digit($length)) $length .= 'px';
|
|
$this->prependCSS($attr, $this->cssName . ":$length;");
|
|
return $attr;
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|