103 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			PHP
		
	
	
		
		
			
		
	
	
			103 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			PHP
		
	
	
|  | <?php | ||
|  | 
 | ||
|  | /** | ||
|  |  * Custom validation class, accepts DTD child definitions | ||
|  |  * | ||
|  |  * @warning Currently this class is an all or nothing proposition, that is, | ||
|  |  *          it will only give a bool return value. | ||
|  |  */ | ||
|  | class HTMLPurifier_ChildDef_Custom extends HTMLPurifier_ChildDef | ||
|  | { | ||
|  |     /** | ||
|  |      * @type string | ||
|  |      */ | ||
|  |     public $type = 'custom'; | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @type bool | ||
|  |      */ | ||
|  |     public $allow_empty = false; | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Allowed child pattern as defined by the DTD. | ||
|  |      * @type string | ||
|  |      */ | ||
|  |     public $dtd_regex; | ||
|  | 
 | ||
|  |     /** | ||
|  |      * PCRE regex derived from $dtd_regex. | ||
|  |      * @type string | ||
|  |      */ | ||
|  |     private $_pcre_regex; | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @param $dtd_regex Allowed child pattern from the DTD | ||
|  |      */ | ||
|  |     public function __construct($dtd_regex) | ||
|  |     { | ||
|  |         $this->dtd_regex = $dtd_regex; | ||
|  |         $this->_compileRegex(); | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Compiles the PCRE regex from a DTD regex ($dtd_regex to $_pcre_regex) | ||
|  |      */ | ||
|  |     protected function _compileRegex() | ||
|  |     { | ||
|  |         $raw = str_replace(' ', '', $this->dtd_regex); | ||
|  |         if ($raw[0] != '(') { | ||
|  |             $raw = "($raw)"; | ||
|  |         } | ||
|  |         $el = '[#a-zA-Z0-9_.-]+'; | ||
|  |         $reg = $raw; | ||
|  | 
 | ||
|  |         // COMPLICATED! AND MIGHT BE BUGGY! I HAVE NO CLUE WHAT I'M
 | ||
|  |         // DOING! Seriously: if there's problems, please report them.
 | ||
|  | 
 | ||
|  |         // collect all elements into the $elements array
 | ||
|  |         preg_match_all("/$el/", $reg, $matches); | ||
|  |         foreach ($matches[0] as $match) { | ||
|  |             $this->elements[$match] = true; | ||
|  |         } | ||
|  | 
 | ||
|  |         // setup all elements as parentheticals with leading commas
 | ||
|  |         $reg = preg_replace("/$el/", '(,\\0)', $reg); | ||
|  | 
 | ||
|  |         // remove commas when they were not solicited
 | ||
|  |         $reg = preg_replace("/([^,(|]\(+),/", '\\1', $reg); | ||
|  | 
 | ||
|  |         // remove all non-paranthetical commas: they are handled by first regex
 | ||
|  |         $reg = preg_replace("/,\(/", '(', $reg); | ||
|  | 
 | ||
|  |         $this->_pcre_regex = $reg; | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * @param HTMLPurifier_Node[] $children | ||
|  |      * @param HTMLPurifier_Config $config | ||
|  |      * @param HTMLPurifier_Context $context | ||
|  |      * @return bool | ||
|  |      */ | ||
|  |     public function validateChildren($children, $config, $context) | ||
|  |     { | ||
|  |         $list_of_children = ''; | ||
|  |         $nesting = 0; // depth into the nest
 | ||
|  |         foreach ($children as $node) { | ||
|  |             if (!empty($node->is_whitespace)) { | ||
|  |                 continue; | ||
|  |             } | ||
|  |             $list_of_children .= $node->name . ','; | ||
|  |         } | ||
|  |         // add leading comma to deal with stray comma declarations
 | ||
|  |         $list_of_children = ',' . rtrim($list_of_children, ','); | ||
|  |         $okay = | ||
|  |             preg_match( | ||
|  |                 '/^,?' . $this->_pcre_regex . '$/', | ||
|  |                 $list_of_children | ||
|  |             ); | ||
|  |         return (bool)$okay; | ||
|  |     } | ||
|  | } | ||
|  | 
 | ||
|  | // vim: et sw=4 sts=4
 |