mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-07 07:06:30 +02:00
Code Issues Releases Wiki Activity

New methods added to parser: addAllowedTag() and addAllowedAttribute() to use with the cleanHtml() method.

Browse Source
This commit is contained in:
Cameron
2015-04-16 15:23:21 -07:00
parent 7bdb2ef48f
commit 0e41e6e7a3
1 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
e107_handlers/e_parse_class.php
View File

@@ -2675,8 +2675,28 @@ class e_parser
{
$this->domObj = new DOMDocument();
}
/**
/**
* Add Allowed Tags.
* @param string
*/
public function addAllowedTag($tag)
{
$this->allowedTags[] = $tag;
}
/**
* @param $tag - html tag.
* @param $attArray - array of attributes. eg. array('style', 'id', 'class') etc.
*/
public function addAllowedAttribute($tag, $attArray)
{
$this->allowedAttributes[$tag] = (array) $attArray;
}
/**
* Set Allowed Tags.
* @param $array
*/
@@ -3428,7 +3448,7 @@ return;
// print_a($p);
}
/**
* Process and clean HTML from user input.
@@ -3442,8 +3462,9 @@ return;
if(empty($html)){ return ''; }
$html = str_replace(' ', '@nbsp;', $html); // prevent replacement of   with spaces.
if(preg_match("/<body/i",$html)!==true) // HTML Fragment
if(strpos($html, "<body")===false) // HTML Fragment
{
$html = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE html><html><head><meta charset="utf-8"></head><body>'.$html.'</body></html>';
}
@@ -3470,7 +3491,8 @@ return;
}
// Set it up for processing.
// Set it up for processing.
// libxml_use_internal_errors(true); // hides errors.
$doc = $this->domObj;
@$doc->loadHTML($html);