mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-23 00:41:52 +00:00
aea7d02dfe
YouTube slideshows contain a /cp/, not a /v/, in their URL; relax the YouTube filter to allow them. Signed-off-by: Nigel McNie <nigel@catalyst.net.nz> Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
50 lines
1.6 KiB
PHP
50 lines
1.6 KiB
PHP
<?php
|
|
|
|
require_once 'common.php';
|
|
|
|
echo '<?xml version="1.0" encoding="UTF-8" ?>';
|
|
?><!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>HTML Purifier Preserve YouTube Smoketest</title>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
|
|
</head>
|
|
<body>
|
|
<h1>HTML Purifier Preserve YouTube Smoketest</h1>
|
|
<?php
|
|
|
|
$string = '<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/BdU--T8rLns"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/BdU--T8rLns" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
|
|
|
|
<object width="416" height="337"><param name="movie" value="http://www.youtube.com/cp/vjVQa1PpcFNbP_fag8PvopkXZyiXyT0J8U47lw7x5Fc="></param><embed src="http://www.youtube.com/cp/vjVQa1PpcFNbP_fag8PvopkXZyiXyT0J8U47lw7x5Fc=" type="application/x-shockwave-flash" width="416" height="337"></embed></object>';
|
|
|
|
$regular_purifier = new HTMLPurifier();
|
|
|
|
$youtube_purifier = new HTMLPurifier(array(
|
|
'Filter.YouTube' => true,
|
|
));
|
|
|
|
?>
|
|
<h2>Unpurified</h2>
|
|
<p><a href="?break">Click here to see the unpurified version (breaks validation).</a></p>
|
|
<div><?php
|
|
if (isset($_GET['break'])) echo $string;
|
|
?></div>
|
|
|
|
<h2>Without YouTube exception</h2>
|
|
<div><?php
|
|
echo $regular_purifier->purify($string);
|
|
?></div>
|
|
|
|
<h2>With YouTube exception</h2>
|
|
<div><?php
|
|
echo $youtube_purifier->purify($string);
|
|
?></div>
|
|
|
|
</body>
|
|
</html>
|
|
<?php
|
|
|
|
// vim: et sw=4 sts=4
|