'String', 'istring' => 'Case-insensitive string', 'int' => 'Integer', 'float' => 'Float', 'bool' => 'Boolean', 'lookup' => 'Lookup array', 'list' => 'Array list', 'hash' => 'Associative array', 'mixed' => 'Mixed' ); /** * Initializes the default namespaces. */ function initialize() { $this->defineNamespace('Core', 'Core features that are always available.'); $this->defineNamespace('Attr', 'Features regarding attribute validation.'); $this->defineNamespace('URI', 'Features regarding Uniform Resource Identifiers.'); $this->defineNamespace('HTML', 'Configuration regarding allowed HTML.'); $this->defineNamespace('CSS', 'Configuration regarding allowed CSS.'); $this->defineNamespace('Output', 'Configuration relating to the generation of (X)HTML.'); $this->defineNamespace('Cache', 'Configuration for DefinitionCache and related subclasses.'); $this->defineNamespace('Test', 'Developer testing configuration for our unit tests.'); } /** * Retrieves an instance of the application-wide configuration definition. * @static */ function &instance($prototype = null) { static $instance; if ($prototype !== null) { $instance = $prototype; } elseif ($instance === null || $prototype === true) { $instance = new HTMLPurifier_ConfigSchema(); $instance->initialize(); } return $instance; } /** * Defines a directive for configuration * @static * @warning Will fail of directive's namespace is defined * @param $namespace Namespace the directive is in * @param $name Key of directive * @param $default Default value of directive * @param $type Allowed type of the directive. See * HTMLPurifier_DirectiveDef::$type for allowed values * @param $description Description of directive for documentation */ function define( $namespace, $name, $default, $type, $description ) { $def =& HTMLPurifier_ConfigSchema::instance(); if (!isset($def->info[$namespace])) { trigger_error('Cannot define directive for undefined namespace', E_USER_ERROR); return; } if (!ctype_alnum($name)) { trigger_error('Directive name must be alphanumeric', E_USER_ERROR); return; } if (empty($description)) { trigger_error('Description must be non-empty', E_USER_ERROR); return; } if (isset($def->info[$namespace][$name])) { if ( $def->info[$namespace][$name]->type !== $type || $def->defaults[$namespace][$name] !== $default ) { trigger_error('Inconsistent default or type, cannot redefine'); return; } } else { // process modifiers $type_values = explode('/', $type, 2); $type = $type_values[0]; $modifier = isset($type_values[1]) ? $type_values[1] : false; $allow_null = ($modifier === 'null'); if (!isset($def->types[$type])) { trigger_error('Invalid type for configuration directive', E_USER_ERROR); return; } $default = $def->validate($default, $type, $allow_null); if ($def->isError($default)) { trigger_error('Default value does not match directive type', E_USER_ERROR); return; } $def->info[$namespace][$name] = new HTMLPurifier_ConfigDef_Directive(); $def->info[$namespace][$name]->type = $type; $def->info[$namespace][$name]->allow_null = $allow_null; $def->defaults[$namespace][$name] = $default; } $backtrace = debug_backtrace(); $file = $def->mungeFilename($backtrace[0]['file']); $line = $backtrace[0]['line']; $def->info[$namespace][$name]->addDescription($file,$line,$description); } /** * Defines a namespace for directives to be put into. * @static * @param $namespace Namespace's name * @param $description Description of the namespace */ function defineNamespace($namespace, $description) { $def =& HTMLPurifier_ConfigSchema::instance(); if (isset($def->info[$namespace])) { trigger_error('Cannot redefine namespace', E_USER_ERROR); return; } if (!ctype_alnum($namespace)) { trigger_error('Namespace name must be alphanumeric', E_USER_ERROR); return; } if (empty($description)) { trigger_error('Description must be non-empty', E_USER_ERROR); return; } $def->info[$namespace] = array(); $def->info_namespace[$namespace] = new HTMLPurifier_ConfigDef_Namespace(); $def->info_namespace[$namespace]->description = $description; $def->defaults[$namespace] = array(); } /** * Defines a directive value alias. * * Directive value aliases are convenient for developers because it lets * them set a directive to several values and get the same result. * @static * @param $namespace Directive's namespace * @param $name Name of Directive * @param $alias Name of aliased value * @param $real Value aliased value will be converted into */ function defineValueAliases($namespace, $name, $aliases) { $def =& HTMLPurifier_ConfigSchema::instance(); if (!isset($def->info[$namespace][$name])) { trigger_error('Cannot set value alias for non-existant directive', E_USER_ERROR); return; } foreach ($aliases as $alias => $real) { if (!$def->info[$namespace][$name] !== true && !isset($def->info[$namespace][$name]->allowed[$real]) ) { trigger_error('Cannot define alias to value that is not allowed', E_USER_ERROR); return; } if (isset($def->info[$namespace][$name]->allowed[$alias])) { trigger_error('Cannot define alias over allowed value', E_USER_ERROR); return; } $def->info[$namespace][$name]->aliases[$alias] = $real; } } /** * Defines a set of allowed values for a directive. * @static * @param $namespace Namespace of directive * @param $name Name of directive * @param $allowed_values Arraylist of allowed values */ function defineAllowedValues($namespace, $name, $allowed_values) { $def =& HTMLPurifier_ConfigSchema::instance(); if (!isset($def->info[$namespace][$name])) { trigger_error('Cannot define allowed values for undefined directive', E_USER_ERROR); return; } $directive =& $def->info[$namespace][$name]; $type = $directive->type; if ($type != 'string' && $type != 'istring') { trigger_error('Cannot define allowed values for directive whose type is not string', E_USER_ERROR); return; } if ($directive->allowed === true) { $directive->allowed = array(); } foreach ($allowed_values as $value) { $directive->allowed[$value] = true; } if ($def->defaults[$namespace][$name] !== null && !isset($directive->allowed[$def->defaults[$namespace][$name]])) { trigger_error('Default value must be in allowed range of variables', E_USER_ERROR); $directive->allowed = true; // undo undo! return; } } /** * Defines a directive alias for backwards compatibility * @static * @param $namespace * @param $name Directive that will be aliased * @param $new_namespace * @param $new_name Directive that the alias will be to */ function defineAlias($namespace, $name, $new_namespace, $new_name) { $def =& HTMLPurifier_ConfigSchema::instance(); if (!isset($def->info[$namespace])) { trigger_error('Cannot define directive alias in undefined namespace', E_USER_ERROR); return; } if (!ctype_alnum($name)) { trigger_error('Directive name must be alphanumeric', E_USER_ERROR); return; } if (isset($def->info[$namespace][$name])) { trigger_error('Cannot define alias over directive', E_USER_ERROR); return; } if (!isset($def->info[$new_namespace][$new_name])) { trigger_error('Cannot define alias to undefined directive', E_USER_ERROR); return; } if ($def->info[$new_namespace][$new_name]->class == 'alias') { trigger_error('Cannot define alias to alias', E_USER_ERROR); return; } $def->info[$namespace][$name] = new HTMLPurifier_ConfigDef_DirectiveAlias( $new_namespace, $new_name); } /** * Validate a variable according to type. Return null if invalid. */ function validate($var, $type, $allow_null = false) { if (!isset($this->types[$type])) { trigger_error('Invalid type', E_USER_ERROR); return; } if ($allow_null && $var === null) return null; switch ($type) { case 'mixed': //if (is_string($var)) $var = unserialize($var); return $var; case 'istring': case 'string': if (!is_string($var)) break; if ($type === 'istring') $var = strtolower($var); return $var; case 'int': if (is_string($var) && ctype_digit($var)) $var = (int) $var; elseif (!is_int($var)) break; return $var; case 'float': if (is_string($var) && is_numeric($var)) $var = (float) $var; elseif (!is_float($var)) break; return $var; case 'bool': if (is_int($var) && ($var === 0 || $var === 1)) { $var = (bool) $var; } elseif (is_string($var)) { if ($var == 'on' || $var == 'true' || $var == '1') { $var = true; } elseif ($var == 'off' || $var == 'false' || $var == '0') { $var = false; } else { break; } } elseif (!is_bool($var)) break; return $var; case 'list': case 'hash': case 'lookup': if (is_string($var)) { // special case: technically, this is an array with // a single empty string item, but having an empty // array is more intuitive if ($var == '') return array(); // simplistic string to array method that only works // for simple lists of tag names or alphanumeric characters $var = explode(',',$var); // remove spaces foreach ($var as $i => $j) $var[$i] = trim($j); if ($type === 'hash') { // key:value,key2:value2 $nvar = array(); foreach ($var as $keypair) { $c = explode(':', $keypair, 2); if (!isset($c[1])) continue; $nvar[$c[0]] = $c[1]; } $var = $nvar; } } if (!is_array($var)) break; $keys = array_keys($var); if ($keys === array_keys($keys)) { if ($type == 'list') return $var; elseif ($type == 'lookup') { $new = array(); foreach ($var as $key) { $new[$key] = true; } return $new; } else break; } if ($type === 'lookup') { foreach ($var as $key => $value) { $var[$key] = true; } } return $var; } $error = new HTMLPurifier_Error(); return $error; } /** * Takes an absolute path and munges it into a more manageable relative path */ function mungeFilename($filename) { $offset = strrpos($filename, 'HTMLPurifier'); $filename = substr($filename, $offset); $filename = str_replace('\\', '/', $filename); return $filename; } /** * Checks if var is an HTMLPurifier_Error object */ function isError($var) { if (!is_object($var)) return false; if (!is_a($var, 'HTMLPurifier_Error')) return false; return true; } } ?>