mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-23 17:01:51 +00:00
58 lines
1.3 KiB
PHP
58 lines
1.3 KiB
PHP
<?php
|
|
|
|
/**
|
|
* XHTML 1.1 Iframe Module provides inline frames.
|
|
*
|
|
* @note This module is not considered safe unless an Iframe
|
|
* whitelisting mechanism is specified. Currently, the only
|
|
* such mechanism is %URL.SafeIframeRegexp
|
|
*/
|
|
class HTMLPurifier_HTMLModule_Iframe extends HTMLPurifier_HTMLModule
|
|
{
|
|
|
|
/**
|
|
* @type string
|
|
*/
|
|
public $name = 'Iframe';
|
|
|
|
/**
|
|
* @type bool
|
|
*/
|
|
public $safe = false;
|
|
|
|
/**
|
|
* @param HTMLPurifier_Config $config
|
|
*/
|
|
public function setup($config)
|
|
{
|
|
if ($config->get('HTML.SafeIframe')) {
|
|
$this->safe = true;
|
|
}
|
|
$attrs = array(
|
|
'src' => 'URI#embedded',
|
|
'width' => 'Length',
|
|
'height' => 'Length',
|
|
'name' => 'ID',
|
|
'scrolling' => 'Enum#yes,no,auto',
|
|
'frameborder' => 'Enum#0,1',
|
|
'longdesc' => 'URI',
|
|
'marginheight' => 'Pixels',
|
|
'marginwidth' => 'Pixels',
|
|
);
|
|
|
|
if ($config->get('HTML.Trusted')) {
|
|
$attrs['allowfullscreen'] = 'Bool#allowfullscreen';
|
|
}
|
|
|
|
$this->addElement(
|
|
'iframe',
|
|
'Inline',
|
|
'Flow',
|
|
'Common',
|
|
$attrs
|
|
);
|
|
}
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|