81ea0f8117
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
22 lines
570 B
PHP
22 lines
570 B
PHP
<?php
|
|
|
|
/**
|
|
* Special-case enum attribute definition that lazy loads allowed frame targets
|
|
*/
|
|
class HTMLPurifier_AttrDef_HTML_FrameTarget extends HTMLPurifier_AttrDef_Enum
|
|
{
|
|
|
|
public $valid_values = false; // uninitialized value
|
|
protected $case_sensitive = false;
|
|
|
|
public function __construct() {}
|
|
|
|
public function validate($string, $config, $context) {
|
|
if ($this->valid_values === false) $this->valid_values = $config->get('Attr.AllowedFrameTargets');
|
|
return parent::validate($string, $config, $context);
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|