fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-26 22:02:13 +09:00
Code Issues Projects Releases Packages Wiki Activity

issue 1860 add htmlpurifier to core

Browse source 
support for editor component, widget
check safe iframe in htmlpurifier instead of Embed class


git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@11812 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ovclas 2012-10-22 02:45:58 +00:00
parent d9d201889e
commit a6261c58d7
3 changed files with 187 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
classes/security/EmbedFilter.class.php
View file

@ -269,6 +269,16 @@ class EmbedFilter
return $GLOBALS['__EMBEDFILTER_INSTANCE__'];
}
public function getWhiteUrlList()
{
return $this->whiteUrlList;
}
public function getWhiteIframeUrlList()
{
return $this->whiteIframeUrlList;
}
/**
* Check the content.
* @return void
@ -393,6 +403,9 @@ class EmbedFilter
*/
function checkIframeTag(&$content)
{
// check in Purifier class
return;
preg_match_all('/<\s*iframe\s*[^>]+(?:\/?>)/is', $content, $m);
$iframeTagList = $m[0];
if($iframeTagList)