Blame view

vendor/ezyang/htmlpurifier/library/HTMLPurifier/URIScheme/file.php 1.25 KB
abf1649b   andryeyev   Чистая установка ...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
  <?php
  
  /**
   * Validates file as defined by RFC 1630 and RFC 1738.
   */
  class HTMLPurifier_URIScheme_file extends HTMLPurifier_URIScheme
  {
      /**
       * Generally file:// URLs are not accessible from most
       * machines, so placing them as an img src is incorrect.
       * @type bool
       */
      public $browsable = false;
  
      /**
       * Basically the *only* URI scheme for which this is true, since
       * accessing files on the local machine is very common.  In fact,
       * browsers on some operating systems don't understand the
       * authority, though I hear it is used on Windows to refer to
       * network shares.
       * @type bool
       */
      public $may_omit_host = true;
  
      /**
       * @param HTMLPurifier_URI $uri
       * @param HTMLPurifier_Config $config
       * @param HTMLPurifier_Context $context
       * @return bool
       */
      public function doValidate(&$uri, $config, $context)
      {
          // Authentication method is not supported
          $uri->userinfo = null;
          // file:// makes no provisions for accessing the resource
          $uri->port = null;
          // While it seems to work on Firefox, the querystring has
          // no possible effect and is thus stripped.
          $uri->query = null;
          return true;
      }
  }
  
  // vim: et sw=4 sts=4