X7ROOT File Manager
Current Path:
/home/cbholdings/pasukulu/lib/htmlpurifier/HTMLPurifier/AttrTransform
home
/
cbholdings
/
pasukulu
/
lib
/
htmlpurifier
/
HTMLPurifier
/
AttrTransform
/
📁
..
📄
Background.php
(696 B)
📄
BdoDir.php
(639 B)
📄
BgColor.php
(672 B)
📄
BoolToCSS.php
(1.06 KB)
📄
Border.php
(676 B)
📄
EnumToCSS.php
(1.68 KB)
📄
ImgRequired.php
(1.3 KB)
📄
ImgSpace.php
(1.37 KB)
📄
Input.php
(1.56 KB)
📄
Lang.php
(856 B)
📄
Length.php
(984 B)
📄
Name.php
(808 B)
📄
NameSync.php
(1.09 KB)
📄
Nofollow.php
(1.28 KB)
📄
SafeEmbed.php
(570 B)
📄
SafeObject.php
(609 B)
📄
SafeParam.php
(2.55 KB)
📄
ScriptRequired.php
(516 B)
📄
TargetBlank.php
(1.07 KB)
📄
TargetNoopener.php
(1022 B)
📄
TargetNoreferrer.php
(1.01 KB)
📄
Textarea.php
(599 B)
Editing: SafeParam.php
<?php /** * Validates name/value pairs in param tags to be used in safe objects. This * will only allow name values it recognizes, and pre-fill certain attributes * with required values. * * @note * This class only supports Flash. In the future, Quicktime support * may be added. * * @warning * This class expects an injector to add the necessary parameters tags. */ class HTMLPurifier_AttrTransform_SafeParam extends HTMLPurifier_AttrTransform { /** * @type string */ public $name = "SafeParam"; /** * @type HTMLPurifier_AttrDef_URI */ private $uri; /** * @type HTMLPurifier_AttrDef_Enum */ public $wmode; public function __construct() { $this->uri = new HTMLPurifier_AttrDef_URI(true); // embedded $this->wmode = new HTMLPurifier_AttrDef_Enum(array('window', 'opaque', 'transparent')); } /** * @param array $attr * @param HTMLPurifier_Config $config * @param HTMLPurifier_Context $context * @return array */ public function transform($attr, $config, $context) { // If we add support for other objects, we'll need to alter the // transforms. switch ($attr['name']) { // application/x-shockwave-flash // Keep this synchronized with Injector/SafeObject.php case 'allowScriptAccess': $attr['value'] = 'never'; break; case 'allowNetworking': $attr['value'] = 'internal'; break; case 'allowFullScreen': if ($config->get('HTML.FlashAllowFullScreen')) { $attr['value'] = ($attr['value'] == 'true') ? 'true' : 'false'; } else { $attr['value'] = 'false'; } break; case 'wmode': $attr['value'] = $this->wmode->validate($attr['value'], $config, $context); break; case 'movie': case 'src': $attr['name'] = "movie"; $attr['value'] = $this->uri->validate($attr['value'], $config, $context); break; case 'flashvars': // we're going to allow arbitrary inputs to the SWF, on // the reasoning that it could only hack the SWF, not us. break; // add other cases to support other param name/value pairs default: $attr['name'] = $attr['value'] = null; } return $attr; } } // vim: et sw=4 sts=4
Upload File
Create Folder