composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-02-13 07:24:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

HTMLSanitizer : add wiki ref to white lists and split declarations one per line (to ease SCM annotation) (restore 2018-04-10 revisions : r5642)

Browse Source 
SVN:trunk[5633]
This commit is contained in:
Pierre Goiffon
2018-04-12 08:54:21 +00:00
parent efa7a4ee55
commit 4450d6af2f
1 changed files with 28 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
core/htmlsanitizer.class.inc.php
View File

@@ -151,6 +151,11 @@ class HTMLPurifierSanitizer extends HTMLSanitizer
class HTMLDOMSanitizer extends HTMLSanitizer class HTMLDOMSanitizer extends HTMLSanitizer
{ {
protected $oDoc; protected $oDoc;
/**
* @var array
* @see https://www.itophub.io/wiki/page?id=2_5_0%3Aadmin%3Arich_text_limitations
*/
protected static $aTagsWhiteList = array( protected static $aTagsWhiteList = array(
'html' => array(), 'html' => array(),
'body' => array(), 'body' => array(),
@@ -198,16 +203,34 @@ class HTMLDOMSanitizer extends HTMLSanitizer
'q' => array(), 'q' => array(),
'hr' => array('style'), 'hr' => array('style'),
'pre' => array(), 'pre' => array(),
'center' => array(),
'caption' => array(),
); );
protected static $aAttrsWhiteList = array( protected static $aAttrsWhiteList = array(
'src' => '/^(http:|https:|data:)/i', 'src' => '/^(http:|https:|data:)/i',
); );
/**
* @var array
* @see https://www.itophub.io/wiki/page?id=2_5_0%3Aadmin%3Arich_text_limitations
*/
protected static $aStylesWhiteList = array( protected static $aStylesWhiteList = array(
'background-color', 'color', 'float', 'font', 'font-style', 'font-size', 'font-family', 'padding', 'margin', 'border', 'cellpadding', 'cellspacing', 'bordercolor', 'border-collapse', 'width', 'height', 'text-align', 'background-color',
'border',
'border-collapse',
'bordercolor',
'cellpadding',
'cellspacing',
'color',
'float',
'font',
'font-family',
'font-size',
'font-style',
'height',
'margin',
'padding',
'text-align',
'width',
); );
public function __construct() public function __construct()