forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
44 lines
1.3 KiB
PHP
Executable File
44 lines
1.3 KiB
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* Validates the border property as defined by CSS.
|
|
*/
|
|
class HTMLPurifier_AttrDef_CSS_Border extends HTMLPurifier_AttrDef
|
|
{
|
|
|
|
/**
|
|
* Local copy of properties this property is shorthand for.
|
|
*/
|
|
protected $info = array();
|
|
|
|
public function __construct($config) {
|
|
$def = $config->getCSSDefinition();
|
|
$this->info['border-width'] = $def->info['border-width'];
|
|
$this->info['border-style'] = $def->info['border-style'];
|
|
$this->info['border-top-color'] = $def->info['border-top-color'];
|
|
}
|
|
|
|
public function validate($string, $config, $context) {
|
|
$string = $this->parseCDATA($string);
|
|
$string = $this->mungeRgb($string);
|
|
$bits = explode(' ', $string);
|
|
$done = array(); // segments we've finished
|
|
$ret = ''; // return value
|
|
foreach ($bits as $bit) {
|
|
foreach ($this->info as $propname => $validator) {
|
|
if (isset($done[$propname])) continue;
|
|
$r = $validator->validate($bit, $config, $context);
|
|
if ($r !== false) {
|
|
$ret .= $r . ' ';
|
|
$done[$propname] = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
return rtrim($ret);
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|