mirror/php-htmlpurifier
1
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-08-01 11:50:28 +02:00
Code Issues Releases Wiki Activity

[1.0.1] Fixed rejection of inline style declarations that had lots of extra space in them. This manifested in TinyMCE.

Browse Source 
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@382 48356398-32a2-884e-a903-53898d9a118a
This commit is contained in:
Edward Z. Yang
2006-09-04 23:01:47 +00:00
parent d20bbd8db3
commit a5b4ed2126
4 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
NEWS
View File

@@ -9,6 +9,8 @@ NEWS ( CHANGELOG and HISTORY ) HTMLPurifier
- Fixed slight bug in DOMLex attribute parsing - Fixed slight bug in DOMLex attribute parsing
- Fixed rejection of case-insensitive configuration values when there is a - Fixed rejection of case-insensitive configuration values when there is a
set of allowed values. This manifested in %Core.Encoding. set of allowed values. This manifested in %Core.Encoding.
- Fixed rejection of inline style declarations that had lots of extra
space in them. This manifested in TinyMCE.
1.0.0, released 2006-09-01 1.0.0, released 2006-09-01
- Fixed broken numeric entity conversion - Fixed broken numeric entity conversion

2
library/HTMLPurifier/AttrDef/CSS.php
View File

@@ -28,6 +28,8 @@ class HTMLPurifier_AttrDef_CSS extends HTMLPurifier_AttrDef
if (!$declaration) continue; if (!$declaration) continue;
if (!strpos($declaration, ':')) continue; if (!strpos($declaration, ':')) continue;
list($property, $value) = explode(':', $declaration, 2); list($property, $value) = explode(':', $declaration, 2);
$property = trim($property);
$value = trim($value);
if (!isset($definition->info[$property])) continue; if (!isset($definition->info[$property])) continue;
// inefficient call, since the validator will do this again // inefficient call, since the validator will do this again
if (strtolower(trim($value)) !== 'inherit') { if (strtolower(trim($value)) !== 'inherit') {

4
tests/HTMLPurifier/AttrDef/CSSTest.php
View File

@@ -92,6 +92,10 @@ class HTMLPurifier_AttrDef_CSSTest extends HTMLPurifier_AttrDefHarness
$this->assertDef('position:absolute;', false); $this->assertDef('position:absolute;', false);
$this->assertDef('background-image:url(javascript:alert\(\));', false); $this->assertDef('background-image:url(javascript:alert\(\));', false);
// airy input
$this->assertDef(' font-weight : bold; color : #ff0000',
'font-weight:bold;color:#ff0000;');
} }
} }

3
tests/HTMLPurifier/Test.php
View File

@@ -8,7 +8,8 @@ class HTMLPurifier_Test extends UnitTestCase
{ {
var $purifier; var $purifier;
function assertPurification($input, $expect) { function assertPurification($input, $expect = null) {
if ($expect === null) $expect = $input;
$result = $this->purifier->purify($input); $result = $this->purifier->purify($input);
$this->assertIdentical($expect, $result); $this->assertIdentical($expect, $result);
} }