mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-02-03 10:30:01 +00:00
Code Releases Activity

add check for subdomains

Browse Source
This commit is contained in:
Alex Lobtsov 2014-04-16 16:45:31 +04:00
parent dd9585f314
commit c831247f00
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
library/HTMLPurifier/URIFilter/Munge.php
View File

@ -75,6 +75,9 @@ class HTMLPurifier_URIFilter_Munge extends HTMLPurifier_URIFilter
if ($uri->isBenign($config, $context)) {
return true;
} // don't redirect if a benign URL
if ($this->isLocalSubdomain($uri, $config)) {
return true;
}
$this->makeReplace($uri, $config, $context);
$this->replace = array_map('rawurlencode', $this->replace);
@ -111,6 +114,23 @@ class HTMLPurifier_URIFilter_Munge extends HTMLPurifier_URIFilter
}
$this->replace['%b'] = base64_encode($string);
}
/**
* Is local subdomain
*
* @param HTMLPurifier_URI $uri
* @param HTMLPurifier_Config $config
* @access protected
* @return void
*/
protected function isLocalSubdomain($uri, $config)
{
return preg_match(
'#^[a-z0-9]+\.' . preg_quote($config->getURIDefinition()->host, '#') . '$#',
$uri->host
);
}
}
// vim: et sw=4 sts=4