forked from GNUsocial/gnu-social
81ea0f8117
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
39 lines
949 B
PHP
39 lines
949 B
PHP
<?php
|
|
|
|
/**
|
|
* Validates the value for the CSS property text-decoration
|
|
* @note This class could be generalized into a version that acts sort of
|
|
* like Enum except you can compound the allowed values.
|
|
*/
|
|
class HTMLPurifier_AttrDef_CSS_TextDecoration extends HTMLPurifier_AttrDef
|
|
{
|
|
|
|
public function validate($string, $config, $context) {
|
|
|
|
static $allowed_values = array(
|
|
'line-through' => true,
|
|
'overline' => true,
|
|
'underline' => true,
|
|
);
|
|
|
|
$string = strtolower($this->parseCDATA($string));
|
|
|
|
if ($string === 'none') return $string;
|
|
|
|
$parts = explode(' ', $string);
|
|
$final = '';
|
|
foreach ($parts as $part) {
|
|
if (isset($allowed_values[$part])) {
|
|
$final .= $part . ' ';
|
|
}
|
|
}
|
|
$final = rtrim($final);
|
|
if ($final === '') return false;
|
|
return $final;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|