HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
17 lines
363 B
PHP
17 lines
363 B
PHP
<?php
|
|
|
|
/**
|
|
* Implements required attribute stipulation for <script>
|
|
*/
|
|
class HTMLPurifier_AttrTransform_ScriptRequired extends HTMLPurifier_AttrTransform
|
|
{
|
|
public function transform($attr, $config, $context) {
|
|
if (!isset($attr['type'])) {
|
|
$attr['type'] = 'text/javascript';
|
|
}
|
|
return $attr;
|
|
}
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|