mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-22 16:31:53 +00:00
ac0ca3f15c
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@993 48356398-32a2-884e-a903-53898d9a118a
195 lines
7.6 KiB
PHP
195 lines
7.6 KiB
PHP
<?php
|
|
|
|
require_once 'common.php'; // load library
|
|
|
|
require_once 'HTMLPurifier/Printer/HTMLDefinition.php';
|
|
require_once 'HTMLPurifier/Printer/CSSDefinition.php';
|
|
|
|
$config = HTMLPurifier_Config::createDefault();
|
|
|
|
// you can do custom configuration!
|
|
if (file_exists('printDefinition.settings.php')) {
|
|
include 'printDefinition.settings.php';
|
|
}
|
|
|
|
$get = $_GET;
|
|
foreach ($_GET as $key => $value) {
|
|
if (!strncmp($key, 'Null_', 5) && !empty($value)) {
|
|
unset($get[substr($key, 5)]);
|
|
unset($get[$key]);
|
|
}
|
|
}
|
|
|
|
@$config->loadArray($get);
|
|
|
|
/* // sample local definition, obviously needs to be less clunky
|
|
$html_definition =& $config->getHTMLDefinition(true);
|
|
$module = new HTMLPurifier_HTMLModule();
|
|
$module->name = 'Marquee';
|
|
$module->info['marquee'] = new HTMLPurifier_ElementDef();
|
|
$module->info['marquee']->content_model = '#PCDATA | Inline';
|
|
$module->info['marquee']->content_model_type = 'optional';
|
|
$module->content_sets = array('Inline' => 'marquee');
|
|
$html_definition->manager->addModule($module);
|
|
*/
|
|
|
|
$printer_html_definition = new HTMLPurifier_Printer_HTMLDefinition();
|
|
$printer_css_definition = new HTMLPurifier_Printer_CSSDefinition();
|
|
|
|
echo '<?xml version="1.0" encoding="UTF-8" ?>';
|
|
?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
|
<head>
|
|
<title>HTML Purifier Printer Smoketest</title>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
|
|
<style type="text/css">
|
|
form table {margin:1em auto;}
|
|
form th {text-align:right;padding-right:1em;}
|
|
form .c {display:none;}
|
|
.HTMLPurifier_Printer table {border-collapse:collapse;
|
|
border:1px solid #000; width:600px;
|
|
margin:1em auto;font-family:sans-serif;font-size:75%;}
|
|
.HTMLPurifier_Printer td, .HTMLPurifier_Printer th {padding:3px;
|
|
border:1px solid #000;background:#CCC; vertical-align: baseline;}
|
|
.HTMLPurifier_Printer th {text-align:left;background:#CCF;width:20%;}
|
|
.HTMLPurifier_Printer caption {font-size:1.5em; font-weight:bold;
|
|
width:100%;}
|
|
.HTMLPurifier_Printer .heavy {background:#99C;text-align:center;}
|
|
dt {font-weight:bold;}
|
|
</style>
|
|
<script type="text/javascript">
|
|
function toggleWriteability(id_of_patient, checked) {
|
|
document.getElementById(id_of_patient).disabled = checked;
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
|
|
<h1>HTML Purifier Printer Smoketest</h1>
|
|
|
|
<p>HTML Purifier claims to have a robust yet permissive whitelist: this
|
|
page will allow you to see precisely what HTML Purifier's internal
|
|
whitelist is. You can
|
|
also twiddle with the configuration settings to see how a directive
|
|
influences the internal workings of the definition objects.</p>
|
|
|
|
<h2>Modify configuration</h2>
|
|
|
|
<p>You can specify an array by typing in a comma-separated
|
|
list of items, HTML Purifier will take care of the rest (including
|
|
transformation into a real array list or a lookup table).</p>
|
|
|
|
<form id="edit-config" name="edit-config" method="get" action="printDefinition.php">
|
|
<table>
|
|
<?php
|
|
$directives = $config->getBatch('HTML');
|
|
// can't handle hashes
|
|
foreach ($directives as $key => $value) {
|
|
$directive = "HTML.$key";
|
|
if (is_array($value)) {
|
|
$keys = array_keys($value);
|
|
if ($keys === array_keys($keys)) {
|
|
$value = implode(',', $keys);
|
|
} else {
|
|
$new_value = '';
|
|
foreach ($value as $name => $bool) {
|
|
if ($bool !== true) continue;
|
|
$new_value .= "$name,";
|
|
}
|
|
$value = rtrim($new_value, ',');
|
|
}
|
|
}
|
|
$allow_null = $config->def->info['HTML'][$key]->allow_null;
|
|
?>
|
|
<tr>
|
|
<th>
|
|
<a href="http://htmlpurifier.org/live/configdoc/plain.html#<?php echo $directive ?>">
|
|
<label for="<?php echo $directive; ?>">%<?php echo $directive; ?></label>
|
|
</a>
|
|
</th>
|
|
<?php if (is_bool($value)) { ?>
|
|
<td id="<?php echo $directive; ?>">
|
|
<label for="Yes_<?php echo $directive; ?>"><span class="c">%<?php echo $directive; ?>:</span> Yes</label>
|
|
<input type="radio" name="<?php echo $directive; ?>" id="Yes_<?php echo $directive; ?>" value="1"<?php if ($value) { ?> checked="checked"<?php } ?> />
|
|
<label for="No_<?php echo $directive; ?>"><span class="c">%<?php echo $directive; ?>:</span> No</label>
|
|
<input type="radio" name="<?php echo $directive; ?>" id="No_<?php echo $directive; ?>" value="0"<?php if (!$value) { ?> checked="checked"<?php } ?> />
|
|
<?php } else { ?>
|
|
<td>
|
|
<?php if($allow_null) { ?>
|
|
<label for="Null_<?php echo $directive; ?>"><span class="c">%<?php echo $directive; ?>:</span> Null/Disabled*</label>
|
|
<input
|
|
type="checkbox"
|
|
value="1"
|
|
onclick="toggleWriteability('<?php echo $directive ?>',checked)"
|
|
name="Null_<?php echo $directive; ?>"
|
|
id="Null_<?php echo $directive; ?>"
|
|
<?php if ($value === null) { ?> checked="checked"<?php } ?>
|
|
/> or <br />
|
|
<?php } ?>
|
|
<input
|
|
type="text"
|
|
name="<?php echo $directive; ?>"
|
|
id="<?php echo $directive; ?>"
|
|
value="<?php echo escapeHTML($value); ?>"
|
|
<?php if($value === null) {echo 'disabled="disabled"';} ?>
|
|
/>
|
|
<?php } ?>
|
|
</td>
|
|
</tr>
|
|
<?php
|
|
}
|
|
?>
|
|
<tr>
|
|
<td colspan="2" style="text-align:right;">
|
|
[<a href="printDefinition.php">Reset</a>]
|
|
<input type="submit" value="Submit" />
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<p>* Some configuration directives make a distinction between an empty
|
|
variable and a null variable. A whitelist, for example, will take an
|
|
empty array as meaning <em>no</em> allowed elements, while checking
|
|
Null/Disabled will mean that user whitelisting functionality is disabled.</p>
|
|
</form>
|
|
|
|
<h2>Definitions</h2>
|
|
|
|
<dl>
|
|
<dt>Parent of Fragment</dt>
|
|
<dd>HTML that HTML Purifier does not live in a void: when it's
|
|
output, it has to be placed in another element by means of
|
|
something like <code><element> <?php echo $html
|
|
?> </element></code>. The parent in this example
|
|
is <code>element</code>.</dd>
|
|
<dt>Strict mode</dt>
|
|
<dd>Whether or not HTML Purifier's output is Transitional or
|
|
Strict compliant. Non-strict mode still actually a little strict
|
|
and converts many deprecated elements.</dd>
|
|
<dt>#PCDATA</dt>
|
|
<dd>Literally <strong>Parsed Character Data</strong>, it is regular
|
|
text. Tags like <code>ul</code> don't allow text in them, so
|
|
#PCDATA is missing.</dd>
|
|
<dt>Tag transform</dt>
|
|
<dd>A tag transform will change one tag to another. Example: <code>font</code>
|
|
turns into a <code>span</code> tag with appropriate CSS.</dd>
|
|
<dt>Attr Transform</dt>
|
|
<dd>An attribute transform changes a group of attributes based on one
|
|
another. Currently, only <code>lang</code> and <code>xml:lang</code>
|
|
use this hook, to synchronize each other's values. Pre/Post indicates
|
|
whether or not the transform is done before/after validation.</dd>
|
|
<dt>Excludes</dt>
|
|
<dd>Tags that an element excludes are excluded for all descendants of
|
|
that element, and not just the children of them.</dd>
|
|
<dt>Name(Param1, Param2)</dt>
|
|
<dd>Represents an internal data-structure. You'll have to check out
|
|
the corresponding classes in HTML Purifier to find out more.</dd>
|
|
</dl>
|
|
|
|
<h2>HTMLDefinition</h2>
|
|
<?php echo $printer_html_definition->render($config) ?>
|
|
<h2>CSSDefinition</h2>
|
|
<?php echo $printer_css_definition->render($config) ?>
|
|
</body>
|
|
</html>
|