2007-02-04 00:07:52 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Represents an XHTML 1.1 module, with information on elements, tags
|
|
|
|
* and attributes.
|
|
|
|
* @note Even though this is technically XHTML 1.1, it is also used for
|
|
|
|
* regular HTML parsing. We are using modulization as a convenient
|
|
|
|
* way to represent the internals of HTMLDefinition, and our
|
|
|
|
* implementation is by no means conforming and does not directly
|
|
|
|
* use the normative DTDs or XML schemas.
|
2007-02-04 22:26:56 +00:00
|
|
|
* @note The public variables in a module should almost directly
|
|
|
|
* correspond to the variables in HTMLPurifier_HTMLDefinition.
|
|
|
|
* However, the prefix info carries no special meaning in these
|
|
|
|
* objects (include it anyway if that's the correspondence though).
|
2007-02-04 00:07:52 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
class HTMLPurifier_HTMLModule
|
|
|
|
{
|
2007-05-08 03:28:58 +00:00
|
|
|
|
|
|
|
// -- Overloadable ----------------------------------------------------
|
|
|
|
|
2007-02-14 22:30:17 +00:00
|
|
|
/**
|
|
|
|
* Short unique string identifier of the module
|
|
|
|
*/
|
|
|
|
var $name;
|
|
|
|
|
2007-02-04 20:09:35 +00:00
|
|
|
/**
|
2007-02-18 05:29:19 +00:00
|
|
|
* Informally, a list of elements this module changes. Not used in
|
|
|
|
* any significant way.
|
2007-02-04 20:09:35 +00:00
|
|
|
* @protected
|
|
|
|
*/
|
2007-02-04 00:07:52 +00:00
|
|
|
var $elements = array();
|
2007-02-04 20:09:35 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Associative array of element names to element definitions.
|
|
|
|
* Some definitions may be incomplete, to be merged in later
|
|
|
|
* with the full definition.
|
|
|
|
* @public
|
|
|
|
*/
|
2007-02-04 00:07:52 +00:00
|
|
|
var $info = array();
|
2007-02-04 20:09:35 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Associative array of content set names to content set additions.
|
|
|
|
* This is commonly used to, say, add an A element to the Inline
|
2007-02-04 22:26:56 +00:00
|
|
|
* content set. This corresponds to an internal variable $content_sets
|
|
|
|
* and NOT info_content_sets member variable of HTMLDefinition.
|
2007-02-04 20:09:35 +00:00
|
|
|
* @public
|
|
|
|
*/
|
2007-02-04 00:07:52 +00:00
|
|
|
var $content_sets = array();
|
2007-02-04 20:09:35 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Associative array of attribute collection names to attribute
|
|
|
|
* collection additions. More rarely used for adding attributes to
|
|
|
|
* the global collections. Example is the StyleAttribute module adding
|
2007-02-05 03:05:46 +00:00
|
|
|
* the style attribute to the Core. Corresponds to HTMLDefinition's
|
|
|
|
* attr_collections->info, since the object's data is only info,
|
|
|
|
* with extra behavior associated with it.
|
2007-02-04 20:09:35 +00:00
|
|
|
* @public
|
|
|
|
*/
|
2007-02-05 03:05:46 +00:00
|
|
|
var $attr_collections = array();
|
2007-02-04 20:09:35 +00:00
|
|
|
|
2007-02-10 23:35:21 +00:00
|
|
|
/**
|
|
|
|
* Associative array of deprecated tag name to HTMLPurifier_TagTransform
|
|
|
|
* @public
|
|
|
|
*/
|
|
|
|
var $info_tag_transform = array();
|
|
|
|
|
|
|
|
/**
|
|
|
|
* List of HTMLPurifier_AttrTransform to be performed before validation.
|
|
|
|
* @public
|
|
|
|
*/
|
|
|
|
var $info_attr_transform_pre = array();
|
|
|
|
|
|
|
|
/**
|
|
|
|
* List of HTMLPurifier_AttrTransform to be performed after validation.
|
|
|
|
* @public
|
|
|
|
*/
|
|
|
|
var $info_attr_transform_post = array();
|
|
|
|
|
2007-02-04 20:09:35 +00:00
|
|
|
/**
|
|
|
|
* Boolean flag that indicates whether or not getChildDef is implemented.
|
|
|
|
* For optimization reasons: may save a call to a function. Be sure
|
|
|
|
* to set it if you do implement getChildDef(), otherwise it will have
|
|
|
|
* no effect!
|
|
|
|
* @public
|
|
|
|
*/
|
|
|
|
var $defines_child_def = false;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Retrieves a proper HTMLPurifier_ChildDef subclass based on
|
|
|
|
* content_model and content_model_type member variables of
|
|
|
|
* the HTMLPurifier_ElementDef class. There is a similar function
|
|
|
|
* in HTMLPurifier_HTMLDefinition.
|
|
|
|
* @param $def HTMLPurifier_ElementDef instance
|
|
|
|
* @return HTMLPurifier_ChildDef subclass
|
|
|
|
* @public
|
|
|
|
*/
|
|
|
|
function getChildDef($def) {return false;}
|
2007-02-10 23:35:21 +00:00
|
|
|
|
2007-05-08 03:28:58 +00:00
|
|
|
// -- Convenience -----------------------------------------------------
|
|
|
|
|
2007-05-07 01:51:26 +00:00
|
|
|
/**
|
|
|
|
* Convenience function that sets up a new element
|
|
|
|
* @param $element Name of element to add
|
|
|
|
* @param $safe Is element safe for untrusted users to use?
|
|
|
|
* @param $type What content set should element be registered to?
|
|
|
|
* Set as false to skip this step.
|
2007-05-08 03:28:58 +00:00
|
|
|
* @param $contents Allowed children in form of:
|
2007-05-07 01:51:26 +00:00
|
|
|
* "$content_model_type: $content_model"
|
|
|
|
* @param $attr_includes What attribute collections to register to
|
|
|
|
* element?
|
|
|
|
* @param $attr What unique attributes does the element define?
|
|
|
|
* @note See ElementDef for in-depth descriptions of these parameters.
|
2007-05-12 20:44:47 +00:00
|
|
|
* @return Reference to created element definition object, so you
|
|
|
|
* can set advanced parameters
|
2007-05-07 01:51:26 +00:00
|
|
|
* @protected
|
|
|
|
*/
|
2007-05-15 02:33:19 +00:00
|
|
|
function &addElement($element, $safe, $type, $contents, $attr_includes = array(), $attr = array()) {
|
2007-05-07 01:51:26 +00:00
|
|
|
$this->elements[] = $element;
|
|
|
|
// parse content_model
|
2007-05-08 03:28:58 +00:00
|
|
|
list($content_model_type, $content_model) = $this->parseContents($contents);
|
2007-05-07 01:51:26 +00:00
|
|
|
// merge in attribute inclusions
|
2007-05-08 03:28:58 +00:00
|
|
|
$this->mergeInAttrIncludes($attr, $attr_includes);
|
2007-05-07 01:51:26 +00:00
|
|
|
// add element to content sets
|
|
|
|
if ($type) $this->addElementToContentSet($element, $type);
|
|
|
|
// create element
|
|
|
|
$this->info[$element] = HTMLPurifier_ElementDef::create(
|
|
|
|
$safe, $content_model, $content_model_type, $attr
|
|
|
|
);
|
2007-05-12 20:26:26 +00:00
|
|
|
// literal object $contents means direct child manipulation
|
|
|
|
if (!is_string($contents)) $this->info[$element]->child = $contents;
|
2007-05-12 20:44:47 +00:00
|
|
|
return $this->info[$element];
|
2007-05-07 01:51:26 +00:00
|
|
|
}
|
|
|
|
|
2007-05-12 20:54:55 +00:00
|
|
|
/**
|
|
|
|
* Convenience function that creates a totally blank, non-standalone
|
|
|
|
* element.
|
|
|
|
* @param $element Name of element to create
|
|
|
|
* @return Reference to created element
|
|
|
|
*/
|
|
|
|
function &addBlankElement($element) {
|
2007-05-29 16:51:32 +00:00
|
|
|
if (!isset($this->info[$element])) {
|
|
|
|
$this->elements[] = $element;
|
|
|
|
$this->info[$element] = new HTMLPurifier_ElementDef();
|
|
|
|
$this->info[$element]->standalone = false;
|
|
|
|
} else {
|
|
|
|
trigger_error("Definition for $element already exists in module, cannot redefine");
|
|
|
|
}
|
2007-05-12 20:54:55 +00:00
|
|
|
return $this->info[$element];
|
|
|
|
}
|
|
|
|
|
2007-05-07 01:51:26 +00:00
|
|
|
/**
|
|
|
|
* Convenience function that registers an element to a content set
|
|
|
|
* @param Element to register
|
|
|
|
* @param Name content set (warning: case sensitive, usually upper-case
|
|
|
|
* first letter)
|
|
|
|
* @protected
|
|
|
|
*/
|
|
|
|
function addElementToContentSet($element, $type) {
|
|
|
|
if (!isset($this->content_sets[$type])) $this->content_sets[$type] = '';
|
|
|
|
else $this->content_sets[$type] .= ' | ';
|
|
|
|
$this->content_sets[$type] .= $element;
|
|
|
|
}
|
|
|
|
|
2007-05-08 03:28:58 +00:00
|
|
|
/**
|
|
|
|
* Convenience function that transforms single-string contents
|
|
|
|
* into separate content model and content model type
|
|
|
|
* @param $contents Allowed children in form of:
|
|
|
|
* "$content_model_type: $content_model"
|
2007-05-12 20:26:26 +00:00
|
|
|
* @note If contents is an object, an array of two nulls will be
|
|
|
|
* returned, and the callee needs to take the original $contents
|
|
|
|
* and use it directly.
|
2007-05-08 03:28:58 +00:00
|
|
|
*/
|
|
|
|
function parseContents($contents) {
|
2007-05-12 20:26:26 +00:00
|
|
|
if (!is_string($contents)) return array(null, null); // defer
|
2007-05-08 03:28:58 +00:00
|
|
|
switch ($contents) {
|
|
|
|
// check for shorthand content model forms
|
2007-05-09 22:01:07 +00:00
|
|
|
case 'Empty':
|
|
|
|
return array('empty', '');
|
2007-05-08 03:28:58 +00:00
|
|
|
case 'Inline':
|
2007-05-09 22:01:07 +00:00
|
|
|
return array('optional', 'Inline | #PCDATA');
|
2007-05-08 03:28:58 +00:00
|
|
|
case 'Flow':
|
2007-05-09 22:01:07 +00:00
|
|
|
return array('optional', 'Flow | #PCDATA');
|
2007-05-08 03:28:58 +00:00
|
|
|
}
|
|
|
|
list($content_model_type, $content_model) = explode(':', $contents);
|
|
|
|
$content_model_type = strtolower(trim($content_model_type));
|
|
|
|
$content_model = trim($content_model);
|
|
|
|
return array($content_model_type, $content_model);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Convenience function that merges a list of attribute includes into
|
|
|
|
* an attribute array.
|
|
|
|
* @param $attr Reference to attr array to modify
|
|
|
|
* @param $attr_includes Array of includes / string include to merge in
|
|
|
|
*/
|
|
|
|
function mergeInAttrIncludes(&$attr, $attr_includes) {
|
|
|
|
if (!is_array($attr_includes)) {
|
|
|
|
if (empty($attr_includes)) $attr_includes = array();
|
|
|
|
else $attr_includes = array($attr_includes);
|
|
|
|
}
|
|
|
|
$attr[0] = $attr_includes;
|
|
|
|
}
|
2007-05-13 03:42:09 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Convenience function that generates a lookup table with boolean
|
|
|
|
* true as value.
|
|
|
|
* @param $list List of values to turn into a lookup
|
|
|
|
* @note You can also pass an arbitrary number of arguments in
|
|
|
|
* place of the regular argument
|
|
|
|
* @return Lookup array equivalent of list
|
|
|
|
*/
|
|
|
|
function makeLookup($list) {
|
|
|
|
if (is_string($list)) $list = func_get_args();
|
|
|
|
$ret = array();
|
|
|
|
foreach ($list as $value) {
|
|
|
|
if (is_null($value)) continue;
|
|
|
|
$ret[$value] = true;
|
|
|
|
}
|
|
|
|
return $ret;
|
|
|
|
}
|
2007-02-04 00:07:52 +00:00
|
|
|
}
|
|
|
|
|