Blame view

vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/Pixels.php 1.68 KB
70f4f18b   Administrator   first_commit
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
  <?php
  
  /**
   * Validates an integer representation of pixels according to the HTML spec.
   */
  class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef
  {
  
      /**
       * @type int
       */
      protected $max;
  
      /**
       * @param int $max
       */
      public function __construct($max = null)
      {
          $this->max = $max;
      }
  
      /**
       * @param string $string
       * @param HTMLPurifier_Config $config
       * @param HTMLPurifier_Context $context
       * @return bool|string
       */
      public function validate($string, $config, $context)
      {
          $string = trim($string);
          if ($string === '0') {
              return $string;
          }
          if ($string === '') {
              return false;
          }
          $length = strlen($string);
          if (substr($string, $length - 2) == 'px') {
              $string = substr($string, 0, $length - 2);
          }
          if (!is_numeric($string)) {
              return false;
          }
          $int = (int)$string;
  
          if ($int < 0) {
              return '0';
          }
  
          // upper-bound value, extremely high values can
          // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
          // WARNING, above link WILL crash you if you're using Windows
  
          if ($this->max !== null && $int > $this->max) {
              return (string)$this->max;
          }
          return (string)$int;
      }
  
      /**
       * @param string $string
       * @return HTMLPurifier_AttrDef
       */
      public function make($string)
      {
          if ($string === '') {
              $max = null;
          } else {
              $max = (int)$string;
          }
          $class = get_class($this);
          return new $class($max);
      }
  }
  
  // vim: et sw=4 sts=4