81ea0f8117
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
17 lines
389 B
PHP
17 lines
389 B
PHP
<?php
|
|
|
|
/**
|
|
* Writes default type for all objects. Currently only supports flash.
|
|
*/
|
|
class HTMLPurifier_AttrTransform_SafeObject extends HTMLPurifier_AttrTransform
|
|
{
|
|
public $name = "SafeObject";
|
|
|
|
function transform($attr, $config, $context) {
|
|
if (!isset($attr['type'])) $attr['type'] = 'application/x-shockwave-flash';
|
|
return $attr;
|
|
}
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|