mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-07 15:16:30 +02:00
Code Issues Releases Wiki Activity

New methods added to parser: addAllowedTag() and addAllowedAttribute() to use with the cleanHtml() method.

Browse Source
This commit is contained in:
Cameron
2015-04-16 15:23:21 -07:00
parent 7bdb2ef48f
commit 0e41e6e7a3
1 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
e107_handlers/e_parse_class.php
View File

@@ -2675,8 +2675,28 @@ class e_parser
{ {
$this->domObj = new DOMDocument(); $this->domObj = new DOMDocument();
} }
/** /**
* Add Allowed Tags.
* @param string
*/
public function addAllowedTag($tag)
{
$this->allowedTags[] = $tag;
}
/**
* @param $tag - html tag.
* @param $attArray - array of attributes. eg. array('style', 'id', 'class') etc.
*/
public function addAllowedAttribute($tag, $attArray)
{
$this->allowedAttributes[$tag] = (array) $attArray;
}
/**
* Set Allowed Tags. * Set Allowed Tags.
* @param $array * @param $array
*/ */
@@ -3428,7 +3448,7 @@ return;
// print_a($p); // print_a($p);
} }
/** /**
* Process and clean HTML from user input. * Process and clean HTML from user input.
@@ -3442,8 +3462,9 @@ return;
if(empty($html)){ return ''; } if(empty($html)){ return ''; }
$html = str_replace(' ', '@nbsp;', $html); // prevent replacement of   with spaces. $html = str_replace(' ', '@nbsp;', $html); // prevent replacement of   with spaces.
if(preg_match("/<body/i",$html)!==true) // HTML Fragment
if(strpos($html, "<body")===false) // HTML Fragment
{ {
$html = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE html><html><head><meta charset="utf-8"></head><body>'.$html.'</body></html>'; $html = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE html><html><head><meta charset="utf-8"></head><body>'.$html.'</body></html>';
} }
@@ -3470,7 +3491,8 @@ return;
} }
// Set it up for processing. // Set it up for processing.
// libxml_use_internal_errors(true); // hides errors.
$doc = $this->domObj; $doc = $this->domObj;
@$doc->loadHTML($html); @$doc->loadHTML($html);