81ea0f8117
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
79 lines
2.2 KiB
PHP
79 lines
2.2 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Validates shorthand CSS property list-style.
|
|
* @warning Does not support url tokens that have internal spaces.
|
|
*/
|
|
class HTMLPurifier_AttrDef_CSS_ListStyle extends HTMLPurifier_AttrDef
|
|
{
|
|
|
|
/**
|
|
* Local copy of component validators.
|
|
* @note See HTMLPurifier_AttrDef_CSS_Font::$info for a similar impl.
|
|
*/
|
|
protected $info;
|
|
|
|
public function __construct($config) {
|
|
$def = $config->getCSSDefinition();
|
|
$this->info['list-style-type'] = $def->info['list-style-type'];
|
|
$this->info['list-style-position'] = $def->info['list-style-position'];
|
|
$this->info['list-style-image'] = $def->info['list-style-image'];
|
|
}
|
|
|
|
public function validate($string, $config, $context) {
|
|
|
|
// regular pre-processing
|
|
$string = $this->parseCDATA($string);
|
|
if ($string === '') return false;
|
|
|
|
// assumes URI doesn't have spaces in it
|
|
$bits = explode(' ', strtolower($string)); // bits to process
|
|
|
|
$caught = array();
|
|
$caught['type'] = false;
|
|
$caught['position'] = false;
|
|
$caught['image'] = false;
|
|
|
|
$i = 0; // number of catches
|
|
$none = false;
|
|
|
|
foreach ($bits as $bit) {
|
|
if ($i >= 3) return; // optimization bit
|
|
if ($bit === '') continue;
|
|
foreach ($caught as $key => $status) {
|
|
if ($status !== false) continue;
|
|
$r = $this->info['list-style-' . $key]->validate($bit, $config, $context);
|
|
if ($r === false) continue;
|
|
if ($r === 'none') {
|
|
if ($none) continue;
|
|
else $none = true;
|
|
if ($key == 'image') continue;
|
|
}
|
|
$caught[$key] = $r;
|
|
$i++;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!$i) return false;
|
|
|
|
$ret = array();
|
|
|
|
// construct type
|
|
if ($caught['type']) $ret[] = $caught['type'];
|
|
|
|
// construct image
|
|
if ($caught['image']) $ret[] = $caught['image'];
|
|
|
|
// construct position
|
|
if ($caught['position']) $ret[] = $caught['position'];
|
|
|
|
if (empty($ret)) return false;
|
|
return implode(' ', $ret);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|