Blame view

vendor/ezyang/htmlpurifier/library/HTMLPurifier/ChildDef/Custom.php 2.67 KB
abf1649b   andryeyev   Чистая установка ...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
  <?php
  
  /**
   * Custom validation class, accepts DTD child definitions
   *
   * @warning Currently this class is an all or nothing proposition, that is,
   *          it will only give a bool return value.
   */
  class HTMLPurifier_ChildDef_Custom extends HTMLPurifier_ChildDef
  {
      /**
       * @type string
       */
      public $type = 'custom';
  
      /**
       * @type bool
       */
      public $allow_empty = false;
  
      /**
       * Allowed child pattern as defined by the DTD.
       * @type string
       */
      public $dtd_regex;
  
      /**
       * PCRE regex derived from $dtd_regex.
       * @type string
       */
      private $_pcre_regex;
  
      /**
       * @param $dtd_regex Allowed child pattern from the DTD
       */
      public function __construct($dtd_regex)
      {
          $this->dtd_regex = $dtd_regex;
          $this->_compileRegex();
      }
  
      /**
       * Compiles the PCRE regex from a DTD regex ($dtd_regex to $_pcre_regex)
       */
      protected function _compileRegex()
      {
          $raw = str_replace(' ', '', $this->dtd_regex);
          if ($raw{0} != '(') {
              $raw = "($raw)";
          }
          $el = '[#a-zA-Z0-9_.-]+';
          $reg = $raw;
  
          // COMPLICATED! AND MIGHT BE BUGGY! I HAVE NO CLUE WHAT I'M
          // DOING! Seriously: if there's problems, please report them.
  
          // collect all elements into the $elements array
          preg_match_all("/$el/", $reg, $matches);
          foreach ($matches[0] as $match) {
              $this->elements[$match] = true;
          }
  
          // setup all elements as parentheticals with leading commas
          $reg = preg_replace("/$el/", '(,\\0)', $reg);
  
          // remove commas when they were not solicited
          $reg = preg_replace("/([^,(|]\(+),/", '\\1', $reg);
  
          // remove all non-paranthetical commas: they are handled by first regex
          $reg = preg_replace("/,\(/", '(', $reg);
  
          $this->_pcre_regex = $reg;
      }
  
      /**
       * @param HTMLPurifier_Node[] $children
       * @param HTMLPurifier_Config $config
       * @param HTMLPurifier_Context $context
       * @return bool
       */
      public function validateChildren($children, $config, $context)
      {
          $list_of_children = '';
          $nesting = 0; // depth into the nest
          foreach ($children as $node) {
              if (!empty($node->is_whitespace)) {
                  continue;
              }
              $list_of_children .= $node->name . ',';
          }
          // add leading comma to deal with stray comma declarations
          $list_of_children = ',' . rtrim($list_of_children, ',');
          $okay =
              preg_match(
                  '/^,?' . $this->_pcre_regex . '$/',
                  $list_of_children
              );
          return (bool)$okay;
      }
  }
  
  // vim: et sw=4 sts=4