mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-23 17:01:51 +00:00
7d2fe4c5d7
- Factor out Config and Context object population through arrays - Bring dependent assertions together in IDTest.php - AttrDefHarness.php now resets context and configuration between tests - Add missing reference operator in AttrDef/ID.php git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@494 48356398-32a2-884e-a903-53898d9a118a
51 lines
1.5 KiB
PHP
51 lines
1.5 KiB
PHP
<?php
|
|
|
|
require_once 'HTMLPurifier/AttrDef.php';
|
|
require_once 'HTMLPurifier/IDAccumulator.php';
|
|
|
|
/**
|
|
* Validates the HTML attribute ID.
|
|
* @warning Even though this is the id processor, it
|
|
* will ignore the directive Attr:IDBlacklist, since it will only
|
|
* go according to the ID accumulator. Since the accumulator is
|
|
* automatically generated, it will have already absorbed the
|
|
* blacklist. If you're hacking around, make sure you use load()!
|
|
*/
|
|
|
|
class HTMLPurifier_AttrDef_ID extends HTMLPurifier_AttrDef
|
|
{
|
|
|
|
function validate($id, $config, &$context) {
|
|
|
|
$id = trim($id); // trim it first
|
|
|
|
if ($id === '') return false;
|
|
|
|
$id_accumulator =& $context->get('IDAccumulator');
|
|
if (isset($id_accumulator->ids[$id])) return false;
|
|
|
|
// we purposely avoid using regex, hopefully this is faster
|
|
|
|
if (ctype_alpha($id)) {
|
|
$result = true;
|
|
} else {
|
|
if (!ctype_alpha(@$id[0])) return false;
|
|
$trim = trim( // primitive style of regexps, I suppose
|
|
$id,
|
|
'A..Za..z0..9:-._'
|
|
);
|
|
$result = ($trim === '');
|
|
}
|
|
|
|
if ($result) $id_accumulator->add($id);
|
|
|
|
// if no change was made to the ID, return the result
|
|
// else, return the new id if stripping whitespace made it
|
|
// valid, or return false.
|
|
return $result ? $id : false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
?>
|