forked from GNUsocial/gnu-social
81ea0f8117
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the OStatus plugin, but it may be valuable for other parts of the codebase (I think OEmbed might benefit, for example).
45 lines
1.1 KiB
PHP
45 lines
1.1 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Pre-transform that changes deprecated hspace and vspace attributes to CSS
|
|
*/
|
|
class HTMLPurifier_AttrTransform_ImgSpace extends HTMLPurifier_AttrTransform {
|
|
|
|
protected $attr;
|
|
protected $css = array(
|
|
'hspace' => array('left', 'right'),
|
|
'vspace' => array('top', 'bottom')
|
|
);
|
|
|
|
public function __construct($attr) {
|
|
$this->attr = $attr;
|
|
if (!isset($this->css[$attr])) {
|
|
trigger_error(htmlspecialchars($attr) . ' is not valid space attribute');
|
|
}
|
|
}
|
|
|
|
public function transform($attr, $config, $context) {
|
|
|
|
if (!isset($attr[$this->attr])) return $attr;
|
|
|
|
$width = $this->confiscateAttr($attr, $this->attr);
|
|
// some validation could happen here
|
|
|
|
if (!isset($this->css[$this->attr])) return $attr;
|
|
|
|
$style = '';
|
|
foreach ($this->css[$this->attr] as $suffix) {
|
|
$property = "margin-$suffix";
|
|
$style .= "$property:{$width}px;";
|
|
}
|
|
|
|
$this->prependCSS($attr, $style);
|
|
|
|
return $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|