aboutsummaryrefslogtreecommitdiff
path: root/mod/htmlawed/start.php
diff options
context:
space:
mode:
Diffstat (limited to 'mod/htmlawed/start.php')
-rw-r--r--mod/htmlawed/start.php259
1 files changed, 150 insertions, 109 deletions
diff --git a/mod/htmlawed/start.php b/mod/htmlawed/start.php
index b28390fa4..25a70a4aa 100644
--- a/mod/htmlawed/start.php
+++ b/mod/htmlawed/start.php
@@ -1,122 +1,163 @@
<?php
- /**
- * Elgg htmLawed tag filtering.
- *
- * @package ElgghtmLawed
- * @author Curverider Ltd
- * @author Brett Profitt
- * @link http://elgg.com/
- */
-
- /**
- * Initialise plugin
- *
- */
- function htmlawed_init()
- {
- /** For now declare allowed tags and protocols here, TODO: Make this configurable */
- global $CONFIG;
- $CONFIG->htmlawed_config = array(
- // seems to handle about everything we need.
- 'safe' => true,
- 'deny_attribute' => 'class',
- 'hook_tag' => 'htmlawed_hook',
-
- 'schemes' => '*:http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto;'
- // apparent this doesn't work.
- //. 'style:color,cursor,text-align,font-size,font-weight,font-style,border,margin,padding,float'
- );
-
- register_plugin_hook('validate', 'input', 'htmlawed_filter_tags', 1);
+/**
+ * Elgg htmLawed tag filtering.
+ *
+ * http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/
+ *
+ * @package ElgghtmLawed
+ */
+
+
+elgg_register_event_handler('init', 'system', 'htmlawed_init');
+
+/**
+ * Initialize the htmlawed plugin
+ */
+function htmlawed_init() {
+ elgg_register_plugin_hook_handler('validate', 'input', 'htmlawed_filter_tags', 1);
+
+ $lib = elgg_get_plugins_path() . "htmlawed/vendors/htmLawed/htmLawed.php";
+ elgg_register_library('htmlawed', $lib);
+
+ elgg_register_plugin_hook_handler('unit_test', 'system', 'htmlawed_test');
+}
+
+/**
+ * htmLawed filtering of data
+ *
+ * Called on the 'validate', 'input' plugin hook
+ *
+ * Triggers the 'config', 'htmlawed' plugin hook so that plugins can change
+ * htmlawed's configuration. For information on configuraton options, see
+ * http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s2.2
+ *
+ * @param string $hook Hook name
+ * @param string $type The type of hook
+ * @param mixed $result Data to filter
+ * @param array $params Not used
+ * @return mixed
+ */
+function htmlawed_filter_tags($hook, $type, $result, $params) {
+ $var = $result;
+
+ elgg_load_library('htmlawed');
+
+ $htmlawed_config = array(
+ // seems to handle about everything we need.
+ 'safe' => true,
+ 'deny_attribute' => 'class, on*',
+ 'hook_tag' => 'htmlawed_tag_post_processor',
+
+ 'schemes' => '*:http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto',
+ // apparent this doesn't work.
+ // 'style:color,cursor,text-align,font-size,font-weight,font-style,border,margin,padding,float'
+ );
+
+ // add nofollow to all links on output
+ if (!elgg_in_context('input')) {
+ $htmlawed_config['anti_link_spam'] = array('/./', '');
}
- /**
- * Hooked for all elements in htmlawed.
- * Used to filter out style attributes we don't want.
- *
- * @param $element
- * @param $attribute_array
- * @return unknown_type
- */
- function htmlawed_hook($element, $attribute_array) {
- // these are the default styles used by tinymce.
- $allowed_styles = array(
- 'color', 'cursor', 'text-align', 'vertical-align', 'font-size',
- 'font-weight', 'font-style', 'border', 'border-top',
- 'border-bottom', 'border-left', 'border-right',
- 'margin', 'margin-top', 'margin-bottom', 'margin-left',
- 'margin-right', 'padding', 'float', 'text-decoration'
- );
-
- // must return something.
- //if (array_key_exists('style', $attribute_array)) {
- $string = '';
-
- foreach ($attribute_array as $attr => $value) {
- if ($attr == 'style') {
- $styles = explode(';', $value);
-
- $style_str = '';
- foreach ($styles as $style) {
- if (!trim($style)) {
- continue;
- }
- list($style_attr, $style_value) = explode(':', trim($style));
- $style_attr = trim($style_attr);
- $style_value = trim($style_value);
-
- if (in_array($style_attr, $allowed_styles)) {
- $style_str .= "$style_attr: $style_value; ";
- }
- }
-
- if ($style_str) {
- $string .= " style = \"$style_str\"";
- }
-
- } else {
- $string .= " $attr = \"$value\"";
- }
- }
+ $htmlawed_config = elgg_trigger_plugin_hook('config', 'htmlawed', null, $htmlawed_config);
- $string = trim($string);
- return "<$element $string >";
- //}
+ if (!is_array($var)) {
+ $result = htmLawed($var, $htmlawed_config);
+ } else {
+ array_walk_recursive($var, 'htmLawedArray', $htmlawed_config);
+ $result = $var;
}
- /**
- * htmLawed filtering of tags, called on a plugin hook
- *
- * @param mixed $var Variable to filter
- * @return mixed
- */
- function htmlawed_filter_tags($hook, $entity_type, $returnvalue, $params)
- {
- $return = $returnvalue;
- $var = $returnvalue;
-
- if (@include_once(dirname(__FILE__) . "/vendors/htmLawed/htmLawed.php")) {
-
- global $CONFIG;
-
- $htmlawed_config = $CONFIG->htmlawed_config;
-
- if (!is_array($var)) {
- $return = "";
- $return = htmLawed($var, $htmlawed_config);
- } else {
- $return = array();
+ return $result;
+}
+
+/**
+ * wrapper function for htmlawed for handling arrays
+ */
+function htmLawedArray(&$v, $k, $htmlawed_config) {
+ $v = htmLawed($v, $htmlawed_config);
+}
+
+/**
+ * Post processor for tags in htmlawed
+ *
+ * This runs after htmlawed has filtered. It runs for each tag and filters out
+ * style attributes we don't want.
+ *
+ * This function triggers the 'allowed_styles', 'htmlawed' plugin hook.
+ *
+ * @todo since these styles are created for tinymce, shouldn't they be in the
+ * tinymce plugin?
+ *
+ * @param string $element The tag element name
+ * @param array $attributes An array of attributes
+ * @return string
+ */
+function htmlawed_tag_post_processor($element, $attributes = false) {
+ if ($attributes === false) {
+ // This is a closing tag. Prevent further processing to avoid inserting a duplicate tag
+
+ return "</${element}>";
+ }
+
+ // these are the default styles used by tinymce.
+ $allowed_styles = array(
+ 'color', 'cursor', 'text-align', 'vertical-align', 'font-size',
+ 'font-weight', 'font-style', 'border', 'border-top', 'background-color',
+ 'border-bottom', 'border-left', 'border-right',
+ 'margin', 'margin-top', 'margin-bottom', 'margin-left',
+ 'margin-right', 'padding', 'float', 'text-decoration'
+ );
+
+ $params = array('tag' => $element);
+ $allowed_styles = elgg_trigger_plugin_hook('allowed_styles', 'htmlawed', $params, $allowed_styles);
+
+ // must return something.
+ $string = '';
+
+ foreach ($attributes as $attr => $value) {
+ if ($attr == 'style') {
+ $styles = explode(';', $value);
+
+ $style_str = '';
+ foreach ($styles as $style) {
+ if (!trim($style)) {
+ continue;
+ }
+ list($style_attr, $style_value) = explode(':', trim($style));
+ $style_attr = trim($style_attr);
+ $style_value = trim($style_value);
- foreach($var as $key => $el) {
- $return[$key] = htmLawed($el, $htmlawed_config);
+ if (in_array($style_attr, $allowed_styles)) {
+ $style_str .= "$style_attr: $style_value; ";
}
}
- }
- return $return;
- }
+ if ($style_str) {
+ $style_str = trim($style_str);
+ $string .= " style=\"$style_str\"";
+ }
+ } else {
+ $string .= " $attr=\"$value\"";
+ }
+ }
- register_elgg_event_handler('init','system','htmlawed_init');
+ // some things (tinymce) don't like tags like <p > so make sure
+ // to only add a space if needed.
+ if ($string = trim($string)) {
+ $string = " $string";
+ }
-?>
+ $r = "<$element$string>";
+ return $r;
+}
+
+/**
+ * Runs unit tests for htmlawed
+ *
+ * @return array
+ */
+function htmlawed_test($hook, $type, $value, $params) {
+ $value[] = dirname(__FILE__) . '/tests/tags.php';
+ return $value;
+}
generated by cgit v1.2.3 (git 2.39.1) at 2025-11-13 19:59:18 +0000