htmlpurifier/library/HTMLPurifier/AttrDef/Multiple.php

<?php

require_once 'HTMLPurifier/AttrDef.php';

class HTMLPurifier_AttrDef_Multiple extends HTMLPurifier_AttrDef
{
    
    var $single;
    var $max;
    
    function HTMLPurifier_AttrDef_Multiple($single, $max = 4) {
        $this->single = $single;
        $this->max = $max;
    }
    
    function validate($string, $config, &$context) {
        $string = $this->parseCDATA($string);
        if ($string === '') return false;
        $parts = explode(' ', $string); // parseCDATA replaced \r, \t and \n
        $length = count($parts);
        $final = '';
        for ($i = 0, $num = 0; $i < $length && $num < $this->max; $i++) {
            if (ctype_space($parts[$i])) continue;
            $result = $this->single->validate($parts[$i], $config, $context);
            if ($result !== false) {
                $final .= $result . ' ';
                $num++;
            }
        }
        if ($final === '') return false;
        return rtrim($final);
    }
    
}

?>