mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-23 08:51:53 +00:00
2605257723
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@306 48356398-32a2-884e-a903-53898d9a118a
100 lines
3.1 KiB
PHP
100 lines
3.1 KiB
PHP
<?php
|
|
|
|
// pretty-printing with indentation would be pretty cool
|
|
|
|
require_once 'HTMLPurifier/Lexer.php';
|
|
|
|
HTMLPurifier_ConfigDef::define(
|
|
'Core', 'CleanUTF8DuringGeneration', false,
|
|
'When true, HTMLPurifier_Generator will also check all strings it '.
|
|
'escapes for UTF-8 well-formedness as a defense in depth measure. '.
|
|
'This could cause a considerable performance impact, and is not '.
|
|
'strictly necessary due to the fact that the Lexers should have '.
|
|
'ensured that all the UTF-8 strings were well-formed. Note that '.
|
|
'the configuration value is only read at the beginning of '.
|
|
'generateFromTokens.'
|
|
);
|
|
|
|
/**
|
|
* Generates HTML from tokens.
|
|
*/
|
|
class HTMLPurifier_Generator
|
|
{
|
|
|
|
/**
|
|
* Bool cache of the CleanUTF8DuringGeneration directive.
|
|
* @private
|
|
*/
|
|
var $_clean_utf8 = false;
|
|
|
|
/**
|
|
* Generates HTML from an array of tokens.
|
|
* @param $tokens Array of HTMLPurifier_Token
|
|
* @param $config HTMLPurifier_Config object
|
|
* @return Generated HTML
|
|
* @note Only unit tests may omit configuration: internals MUST pass config
|
|
*/
|
|
function generateFromTokens($tokens, $config = null) {
|
|
$html = '';
|
|
if (!$config) $config = HTMLPurifier_Config::createDefault();
|
|
$this->_clean_utf8 = $config->get('Core', 'CleanUTF8DuringGeneration');
|
|
if (!$tokens) return '';
|
|
foreach ($tokens as $token) {
|
|
$html .= $this->generateFromToken($token);
|
|
}
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* Generates HTML from a single token.
|
|
* @param $token HTMLPurifier_Token object.
|
|
* @return Generated HTML
|
|
*/
|
|
function generateFromToken($token) {
|
|
if (!isset($token->type)) return '';
|
|
if ($token->type == 'start') {
|
|
$attr = $this->generateAttributes($token->attributes);
|
|
return '<' . $token->name . ($attr ? ' ' : '') . $attr . '>';
|
|
|
|
} elseif ($token->type == 'end') {
|
|
return '</' . $token->name . '>';
|
|
|
|
} elseif ($token->type == 'empty') {
|
|
$attr = $this->generateAttributes($token->attributes);
|
|
return '<' . $token->name . ($attr ? ' ' : '') . $attr . ' />';
|
|
|
|
} elseif ($token->type == 'text') {
|
|
return $this->escape($token->data);
|
|
|
|
} else {
|
|
return '';
|
|
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Generates attribute declarations from attribute array.
|
|
* @param $assoc_array_of_attributes Attribute array
|
|
* @return Generate HTML fragment for insertion.
|
|
*/
|
|
function generateAttributes($assoc_array_of_attributes) {
|
|
$html = '';
|
|
foreach ($assoc_array_of_attributes as $key => $value) {
|
|
$html .= $key.'="'.$this->escape($value).'" ';
|
|
}
|
|
return rtrim($html);
|
|
}
|
|
|
|
/**
|
|
* Escapes raw text data.
|
|
* @param $string String data to escape for HTML.
|
|
* @return String escaped data.
|
|
*/
|
|
function escape($string) {
|
|
if ($this->_clean_utf8) $string = HTMLPurifier_Lexer::cleanUTF8($string);
|
|
return htmlspecialchars($string, ENT_COMPAT, 'UTF-8');
|
|
}
|
|
|
|
}
|
|
|
|
?>
|