0
0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2024-12-23 00:41:52 +00:00
htmlpurifier/library/HTMLPurifier/AttrDef
Edward Z. Yang d3abcb90e3 Rewrite CSS url() and font-family output logic.
The new logic is as follows:

* Given a URL to insert into url(), check that it is properly URL
  encoded (in particular, a doublequote and backslash never occurs
  within it) and then place it as url("http://example.com").

* Given a font name, if it is strictly alphanumeric, it is safe to omit
  quotes. Otherwise, wrap in double quotes and replace '"' with '\22 '
  (note trailing space) and '\' with '\5C ' (ditto).

We introduce expandCSSEscape() which is a hack for common parsing
idioms in CSS; this means that CSS escapes are now recognized inside
URLs as well as unquoted font names.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
2010-05-31 18:45:21 -07:00
..
CSS Rewrite CSS url() and font-family output logic. 2010-05-31 18:45:21 -07:00
HTML Fix PHP 5.3.0 problem with numeric indices causing -0 problem. 2009-06-07 16:04:07 -04:00
URI Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
CSS.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Enum.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Integer.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Lang.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Switch.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Text.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
URI.php Convert all to new configuration get/set format. 2009-02-21 03:00:34 -05:00