77 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
		
		
			
		
	
	
			77 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
|   | <?php | ||
|  | 
 | ||
|  | /** | ||
|  |  * Validates an integer representation of pixels according to the HTML spec. | ||
|  |  */ | ||
|  | class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef | ||
|  | { | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @type int | ||
|  |      */ | ||
|  |     protected $max; | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @param int $max | ||
|  |      */ | ||
|  |     public function __construct($max = null) | ||
|  |     { | ||
|  |         $this->max = $max; | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @param string $string | ||
|  |      * @param HTMLPurifier_Config $config | ||
|  |      * @param HTMLPurifier_Context $context | ||
|  |      * @return bool|string | ||
|  |      */ | ||
|  |     public function validate($string, $config, $context) | ||
|  |     { | ||
|  |         $string = trim($string); | ||
|  |         if ($string === '0') { | ||
|  |             return $string; | ||
|  |         } | ||
|  |         if ($string === '') { | ||
|  |             return false; | ||
|  |         } | ||
|  |         $length = strlen($string); | ||
|  |         if (substr($string, $length - 2) == 'px') { | ||
|  |             $string = substr($string, 0, $length - 2); | ||
|  |         } | ||
|  |         if (!is_numeric($string)) { | ||
|  |             return false; | ||
|  |         } | ||
|  |         $int = (int)$string; | ||
|  | 
 | ||
|  |         if ($int < 0) { | ||
|  |             return '0'; | ||
|  |         } | ||
|  | 
 | ||
|  |         // upper-bound value, extremely high values can
 | ||
|  |         // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
 | ||
|  |         // WARNING, above link WILL crash you if you're using Windows
 | ||
|  | 
 | ||
|  |         if ($this->max !== null && $int > $this->max) { | ||
|  |             return (string)$this->max; | ||
|  |         } | ||
|  |         return (string)$int; | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @param string $string | ||
|  |      * @return HTMLPurifier_AttrDef | ||
|  |      */ | ||
|  |     public function make($string) | ||
|  |     { | ||
|  |         if ($string === '') { | ||
|  |             $max = null; | ||
|  |         } else { | ||
|  |             $max = (int)$string; | ||
|  |         } | ||
|  |         $class = get_class($this); | ||
|  |         return new $class($max); | ||
|  |     } | ||
|  | } | ||
|  | 
 | ||
|  | // vim: et sw=4 sts=4
 |