forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
33 lines
734 B
PHP
Executable File
33 lines
734 B
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Property list iterator. Do not instantiate this class directly.
|
|
*/
|
|
class HTMLPurifier_PropertyListIterator extends FilterIterator
|
|
{
|
|
|
|
protected $l;
|
|
protected $filter;
|
|
|
|
/**
|
|
* @param $data Array of data to iterate over
|
|
* @param $filter Optional prefix to only allow values of
|
|
*/
|
|
public function __construct(Iterator $iterator, $filter = null) {
|
|
parent::__construct($iterator);
|
|
$this->l = strlen($filter);
|
|
$this->filter = $filter;
|
|
}
|
|
|
|
public function accept() {
|
|
$key = $this->getInnerIterator()->key();
|
|
if( strncmp($key, $this->filter, $this->l) !== 0 ) {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|