\\n\";\n }\n }\n}\n}\n\n?>\n\n\n
\n
\n Security Alert!!!\n
\n Delete the install.php file from your server.\n
\n
\n Try out your shiny new server. click here\n\n
\n\n\n\n\n"
},
{
"path": "js/fancyalert.js",
"content": "/*\n\njQuery Fancy Alert\nCopyright (c) 2009 Anant Garg (http://anantgarg.com)\n\nVersion: 1.0\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n\n*/\n\n(function($){ \n \n\t$.fancyalert = function(message){\n\t\tif ($(\"#alert\").length > 0)\t{ \n\t\t\t$(\"#alert\").html(message);\n\t\t} else {\n\t\t\tvar html = '\n Security Alert!!!\n
\n Delete the install.php file from your server.\n
\n
\n Try out your shiny new server. click here\n\n
'+message+'
';\n\t\t\t$('body').append(html);\n\t\t} \n\t\t$alert = $('#alert');\n\t\t\tif($alert.length) {\n\t\t\t\tvar alerttimer = window.setTimeout(function () {\n\t\t\t\t\t$alert.trigger('click');\n\t\t\t\t}, 3000);\n\t\t\t\t$alert.css('border-bottom','2px solid #76e3ff');\n\t\t\t\t$alert.animate({height: $alert.css('line-height') || '50px'}, 200)\n\t\t\t\t.click(function () {\n\t\t\t\t\twindow.clearTimeout(alerttimer);\n\t\t\t\t\t$alert.animate({height: '0'}, 200);\n\t\t\t\t\t$alert.css('border-bottom','0px solid #333333');\n\t\t\t\t});\n\t\t\t}\n\t}; \n \n})(jQuery);"
},
{
"path": "js/jquery.js",
"content": "/*\n * jQuery JavaScript Library v1.3.2\n * http://jquery.com/\n *\n * Copyright (c) 2009 John Resig\n * Dual licensed under the MIT and GPL licenses.\n * http://docs.jquery.com/License\n *\n * Date: 2009-02-19 17:34:21 -0500 (Thu, 19 Feb 2009)\n * Revision: 6246\n */\n(function(){var l=this,g,y=l.jQuery,p=l.$,o=l.jQuery=l.$=function(E,F){return new o.fn.init(E,F)},D=/^[^<]*(<(.|\\s)+>)[^>]*$|^#([\\w-]+)$/,f=/^.[^:#\\[\\.,]*$/;o.fn=o.prototype={init:function(E,H){E=E||document;if(E.nodeType){this[0]=E;this.length=1;this.context=E;return this}if(typeof E===\"string\"){var G=D.exec(E);if(G&&(G[1]||!H)){if(G[1]){E=o.clean([G[1]],H)}else{var I=document.getElementById(G[3]);if(I&&I.id!=G[3]){return o().find(E)}var F=o(I||[]);F.context=document;F.selector=E;return F}}else{return o(H).find(E)}}else{if(o.isFunction(E)){return o(document).ready(E)}}if(E.selector&&E.context){this.selector=E.selector;this.context=E.context}return this.setArray(o.isArray(E)?E:o.makeArray(E))},selector:\"\",jquery:\"1.3.2\",size:function(){return this.length},get:function(E){return E===g?Array.prototype.slice.call(this):this[E]},pushStack:function(F,H,E){var G=o(F);G.prevObject=this;G.context=this.context;if(H===\"find\"){G.selector=this.selector+(this.selector?\" \":\"\")+E}else{if(H){G.selector=this.selector+\".\"+H+\"(\"+E+\")\"}}return G},setArray:function(E){this.length=0;Array.prototype.push.apply(this,E);return this},each:function(F,E){return o.each(this,F,E)},index:function(E){return o.inArray(E&&E.jquery?E[0]:E,this)},attr:function(F,H,G){var E=F;if(typeof F===\"string\"){if(H===g){return this[0]&&o[G||\"attr\"](this[0],F)}else{E={};E[F]=H}}return this.each(function(I){for(F in E){o.attr(G?this.style:this,F,o.prop(this,E[F],G,I,F))}})},css:function(E,F){if((E==\"width\"||E==\"height\")&&parseFloat(F)<0){F=g}return this.attr(E,F,\"curCSS\")},text:function(F){if(typeof F!==\"object\"&&F!=null){return this.empty().append((this[0]&&this[0].ownerDocument||document).createTextNode(F))}var E=\"\";o.each(F||this,function(){o.each(this.childNodes,function(){if(this.nodeType!=8){E+=this.nodeType!=1?this.nodeValue:o.fn.text([this])}})});return E},wrapAll:function(E){if(this[0]){var F=o(E,this[0].ownerDocument).clone();if(this[0].parentNode){F.insertBefore(this[0])}F.map(function(){var G=this;while(G.firstChild){G=G.firstChild}return G}).append(this)}return this},wrapInner:function(E){return this.each(function(){o(this).contents().wrapAll(E)})},wrap:function(E){return this.each(function(){o(this).wrapAll(E)})},append:function(){return this.domManip(arguments,true,function(E){if(this.nodeType==1){this.appendChild(E)}})},prepend:function(){return this.domManip(arguments,true,function(E){if(this.nodeType==1){this.insertBefore(E,this.firstChild)}})},before:function(){return this.domManip(arguments,false,function(E){this.parentNode.insertBefore(E,this)})},after:function(){return this.domManip(arguments,false,function(E){this.parentNode.insertBefore(E,this.nextSibling)})},end:function(){return this.prevObject||o([])},push:[].push,sort:[].sort,splice:[].splice,find:function(E){if(this.length===1){var F=this.pushStack([],\"find\",E);F.length=0;o.find(E,this[0],F);return F}else{return this.pushStack(o.unique(o.map(this,function(G){return o.find(E,G)})),\"find\",E)}},clone:function(G){var E=this.map(function(){if(!o.support.noCloneEvent&&!o.isXMLDoc(this)){var I=this.outerHTML;if(!I){var J=this.ownerDocument.createElement(\"div\");J.appendChild(this.cloneNode(true));I=J.innerHTML}return o.clean([I.replace(/ jQuery\\d+=\"(?:\\d+|null)\"/g,\"\").replace(/^\\s*/,\"\")])[0]}else{return this.cloneNode(true)}});if(G===true){var H=this.find(\"*\").andSelf(),F=0;E.find(\"*\").andSelf().each(function(){if(this.nodeName!==H[F].nodeName){return}var I=o.data(H[F],\"events\");for(var K in I){for(var J in I[K]){o.event.add(this,K,I[K][J],I[K][J].data)}}F++})}return E},filter:function(E){return this.pushStack(o.isFunction(E)&&o.grep(this,function(G,F){return E.call(G,F)})||o.multiFilter(E,o.grep(this,function(F){return F.nodeType===1})),\"filter\",E)},closest:function(E){var G=o.expr.match.POS.test(E)?o(E):null,F=0;return this.map(function(){var H=this;while(H&&H.ownerDocument){if(G?G.index(H)>-1:o(H).is(E)){o.data(H,\"closest\",F);return H}H=H.parentNode;F++}})},not:function(E){if(typeof E===\"string\"){if(f.test(E)){return this.pushStack(o.multiFilter(E,this,true),\"not\",E)}else{E=o.multiFilter(E,this)}}var F=E.length&&E[E.length-1]!==g&&!E.nodeType;return this.filter(function(){return F?o.inArray(this,E)<0:this!=E})},add:function(E){return this.pushStack(o.unique(o.merge(this.get(),typeof E===\"string\"?o(E):o.makeArray(E))))},is:function(E){return !!E&&o.multiFilter(E,this).length>0},hasClass:function(E){return !!E&&this.is(\".\"+E)},val:function(K){if(K===g){var E=this[0];if(E){if(o.nodeName(E,\"option\")){return(E.attributes.value||{}).specified?E.value:E.text}if(o.nodeName(E,\"select\")){var I=E.selectedIndex,L=[],M=E.options,H=E.type==\"select-one\";if(I<0){return null}for(var F=H?I:0,J=H?I+1:M.length;F\",\"
\"]||[0,\"\",\"\"];L.innerHTML=Q[1]+S+Q[2];while(Q[0]--){L=L.lastChild}if(!o.support.tbody){var R=/\"&&!R?L.childNodes:[];for(var M=N.length-1;M>=0;--M){if(o.nodeName(N[M],\"tbody\")&&!N[M].childNodes.length){N[M].parentNode.removeChild(N[M])}}}if(!o.support.leadingWhitespace&&/^\\s/.test(S)){L.insertBefore(K.createTextNode(S.match(/^\\s*/)[0]),L.firstChild)}S=o.makeArray(L.childNodes)}if(S.nodeType){G.push(S)}else{G=o.merge(G,S)}});if(I){for(var J=0;G[J];J++){if(o.nodeName(G[J],\"script\")&&(!G[J].type||G[J].type.toLowerCase()===\"text/javascript\")){E.push(G[J].parentNode?G[J].parentNode.removeChild(G[J]):G[J])}else{if(G[J].nodeType===1){G.splice.apply(G,[J+1,0].concat(o.makeArray(G[J].getElementsByTagName(\"script\"))))}I.appendChild(G[J])}}return E}return G},attr:function(J,G,K){if(!J||J.nodeType==3||J.nodeType==8){return g}var H=!o.isXMLDoc(J),L=K!==g;G=H&&o.props[G]||G;if(J.tagName){var F=/href|src|style/.test(G);if(G==\"selected\"&&J.parentNode){J.parentNode.selectedIndex}if(G in J&&H&&!F){if(L){if(G==\"type\"&&o.nodeName(J,\"input\")&&J.parentNode){throw\"type property can't be changed\"}J[G]=K}if(o.nodeName(J,\"form\")&&J.getAttributeNode(G)){return J.getAttributeNode(G).nodeValue}if(G==\"tabIndex\"){var I=J.getAttributeNode(\"tabIndex\");return I&&I.specified?I.value:J.nodeName.match(/(button|input|object|select|textarea)/i)?0:J.nodeName.match(/^(a|area)$/i)&&J.href?0:g}return J[G]}if(!o.support.style&&H&&G==\"style\"){return o.attr(J.style,\"cssText\",K)}if(L){J.setAttribute(G,\"\"+K)}var E=!o.support.hrefNormalized&&H&&F?J.getAttribute(G,2):J.getAttribute(G);return E===null?g:E}if(!o.support.opacity&&G==\"opacity\"){if(L){J.zoom=1;J.filter=(J.filter||\"\").replace(/alpha\\([^)]*\\)/,\"\")+(parseInt(K)+\"\"==\"NaN\"?\"\":\"alpha(opacity=\"+K*100+\")\")}return J.filter&&J.filter.indexOf(\"opacity=\")>=0?(parseFloat(J.filter.match(/opacity=([^)]*)/)[1])/100)+\"\":\"\"}G=G.replace(/-([a-z])/ig,function(M,N){return N.toUpperCase()});if(L){J[G]=K}return J[G]},trim:function(E){return(E||\"\").replace(/^\\s+|\\s+$/g,\"\")},makeArray:function(G){var E=[];if(G!=null){var F=G.length;if(F==null||typeof G===\"string\"||o.isFunction(G)||G.setInterval){E[0]=G}else{while(F){E[--F]=G[F]}}}return E},inArray:function(G,H){for(var E=0,F=H.length;E` blocks.\n\t#\n\t\t$text = preg_replace_callback('{\n\t\t\t\t(?:\\n\\n|\\A\\n?)\n\t\t\t\t(\t # $1 = the code block -- one or more lines, starting with a space/tab\n\t\t\t\t (?>\n\t\t\t\t\t[ ]{'.$this->tab_width.'} # Lines must start with a tab or a tab-width of spaces\n\t\t\t\t\t.*\\n+\n\t\t\t\t )+\n\t\t\t\t)\n\t\t\t\t((?=^[ ]{0,'.$this->tab_width.'}\\S)|\\Z)\t# Lookahead for non-space at line-start, or end of doc\n\t\t\t}xm',\n\t\t\tarray(&$this, '_doCodeBlocks_callback'), $text);\n\n\t\treturn $text;\n\t}\n\tfunction _doCodeBlocks_callback($matches) {\n\t\t$codeblock = $matches[1];\n\n\t\t$codeblock = $this->outdent($codeblock);\n\t\t$codeblock = htmlspecialchars($codeblock, ENT_NOQUOTES);\n\n\t\t# trim leading newlines and trailing newlines\n\t\t$codeblock = preg_replace('/\\A\\n+|\\n+\\z/', '', $codeblock);\n\n\t\t$codeblock = \"$codeblock\\n
\";\n\t\treturn \"\\n\\n\".$this->hashBlock($codeblock).\"\\n\\n\";\n\t}\n\n\n\tfunction makeCodeSpan($code) {\n\t#\n\t# Create a code span markup for $code. Called from handleSpanToken.\n\t#\n\t\t$code = htmlspecialchars(trim($code), ENT_NOQUOTES);\n\t\treturn $this->hashPart(\"$code\");\n\t}\n\n\n\tvar $em_relist = array(\n\t\t'' => '(?:(? '(?<=\\S)(? '(?<=\\S)(? '(?:(? '(?<=\\S)(? '(?<=\\S)(? '(?:(? '(?<=\\S)(? '(?<=\\S)(?em_relist as $em => $em_re) {\n\t\t\tforeach ($this->strong_relist as $strong => $strong_re) {\n\t\t\t\t# Construct list of allowed token expressions.\n\t\t\t\t$token_relist = array();\n\t\t\t\tif (isset($this->em_strong_relist[\"$em$strong\"])) {\n\t\t\t\t\t$token_relist[] = $this->em_strong_relist[\"$em$strong\"];\n\t\t\t\t}\n\t\t\t\t$token_relist[] = $em_re;\n\t\t\t\t$token_relist[] = $strong_re;\n\t\t\t\t\n\t\t\t\t# Construct master expression from list.\n\t\t\t\t$token_re = '{('. implode('|', $token_relist) .')}';\n\t\t\t\t$this->em_strong_prepared_relist[\"$em$strong\"] = $token_re;\n\t\t\t}\n\t\t}\n\t}\n\t\n\tfunction doItalicsAndBold($text) {\n\t\t$token_stack = array('');\n\t\t$text_stack = array('');\n\t\t$em = '';\n\t\t$strong = '';\n\t\t$tree_char_em = false;\n\t\t\n\t\twhile (1) {\n\t\t\t#\n\t\t\t# Get prepared regular expression for seraching emphasis tokens\n\t\t\t# in current context.\n\t\t\t#\n\t\t\t$token_re = $this->em_strong_prepared_relist[\"$em$strong\"];\n\t\t\t\n\t\t\t#\n\t\t\t# Each loop iteration seach for the next emphasis token. \n\t\t\t# Each token is then passed to handleSpanToken.\n\t\t\t#\n\t\t\t$parts = preg_split($token_re, $text, 2, PREG_SPLIT_DELIM_CAPTURE);\n\t\t\t$text_stack[0] .= $parts[0];\n\t\t\t$token =& $parts[1];\n\t\t\t$text =& $parts[2];\n\t\t\t\n\t\t\tif (empty($token)) {\n\t\t\t\t# Reached end of text span: empty stack without emitting.\n\t\t\t\t# any more emphasis.\n\t\t\t\twhile ($token_stack[0]) {\n\t\t\t\t\t$text_stack[1] .= array_shift($token_stack);\n\t\t\t\t\t$text_stack[0] .= array_shift($text_stack);\n\t\t\t\t}\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\t\n\t\t\t$token_len = strlen($token);\n\t\t\tif ($tree_char_em) {\n\t\t\t\t# Reached closing marker while inside a three-char emphasis.\n\t\t\t\tif ($token_len == 3) {\n\t\t\t\t\t# Three-char closing marker, close em and strong.\n\t\t\t\t\tarray_shift($token_stack);\n\t\t\t\t\t$span = array_shift($text_stack);\n\t\t\t\t\t$span = $this->runSpanGamut($span);\n\t\t\t\t\t$span = \"$span\";\n\t\t\t\t\t$text_stack[0] .= $this->hashPart($span);\n\t\t\t\t\t$em = '';\n\t\t\t\t\t$strong = '';\n\t\t\t\t} else {\n\t\t\t\t\t# Other closing marker: close one em or strong and\n\t\t\t\t\t# change current token state to match the other\n\t\t\t\t\t$token_stack[0] = str_repeat($token{0}, 3-$token_len);\n\t\t\t\t\t$tag = $token_len == 2 ? \"strong\" : \"em\";\n\t\t\t\t\t$span = $text_stack[0];\n\t\t\t\t\t$span = $this->runSpanGamut($span);\n\t\t\t\t\t$span = \"<$tag>$span\";\n\t\t\t\t\t$text_stack[0] = $this->hashPart($span);\n\t\t\t\t\t$$tag = ''; # $$tag stands for $em or $strong\n\t\t\t\t}\n\t\t\t\t$tree_char_em = false;\n\t\t\t} else if ($token_len == 3) {\n\t\t\t\tif ($em) {\n\t\t\t\t\t# Reached closing marker for both em and strong.\n\t\t\t\t\t# Closing strong marker:\n\t\t\t\t\tfor ($i = 0; $i < 2; ++$i) {\n\t\t\t\t\t\t$shifted_token = array_shift($token_stack);\n\t\t\t\t\t\t$tag = strlen($shifted_token) == 2 ? \"strong\" : \"em\";\n\t\t\t\t\t\t$span = array_shift($text_stack);\n\t\t\t\t\t\t$span = $this->runSpanGamut($span);\n\t\t\t\t\t\t$span = \"<$tag>$span\";\n\t\t\t\t\t\t$text_stack[0] .= $this->hashPart($span);\n\t\t\t\t\t\t$$tag = ''; # $$tag stands for $em or $strong\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t# Reached opening three-char emphasis marker. Push on token \n\t\t\t\t\t# stack; will be handled by the special condition above.\n\t\t\t\t\t$em = $token{0};\n\t\t\t\t\t$strong = \"$em$em\";\n\t\t\t\t\tarray_unshift($token_stack, $token);\n\t\t\t\t\tarray_unshift($text_stack, '');\n\t\t\t\t\t$tree_char_em = true;\n\t\t\t\t}\n\t\t\t} else if ($token_len == 2) {\n\t\t\t\tif ($strong) {\n\t\t\t\t\t# Unwind any dangling emphasis marker:\n\t\t\t\t\tif (strlen($token_stack[0]) == 1) {\n\t\t\t\t\t\t$text_stack[1] .= array_shift($token_stack);\n\t\t\t\t\t\t$text_stack[0] .= array_shift($text_stack);\n\t\t\t\t\t}\n\t\t\t\t\t# Closing strong marker:\n\t\t\t\t\tarray_shift($token_stack);\n\t\t\t\t\t$span = array_shift($text_stack);\n\t\t\t\t\t$span = $this->runSpanGamut($span);\n\t\t\t\t\t$span = \"$span\";\n\t\t\t\t\t$text_stack[0] .= $this->hashPart($span);\n\t\t\t\t\t$strong = '';\n\t\t\t\t} else {\n\t\t\t\t\tarray_unshift($token_stack, $token);\n\t\t\t\t\tarray_unshift($text_stack, '');\n\t\t\t\t\t$strong = $token;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t# Here $token_len == 1\n\t\t\t\tif ($em) {\n\t\t\t\t\tif (strlen($token_stack[0]) == 1) {\n\t\t\t\t\t\t# Closing emphasis marker:\n\t\t\t\t\t\tarray_shift($token_stack);\n\t\t\t\t\t\t$span = array_shift($text_stack);\n\t\t\t\t\t\t$span = $this->runSpanGamut($span);\n\t\t\t\t\t\t$span = \"$span\";\n\t\t\t\t\t\t$text_stack[0] .= $this->hashPart($span);\n\t\t\t\t\t\t$em = '';\n\t\t\t\t\t} else {\n\t\t\t\t\t\t$text_stack[0] .= $token;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tarray_unshift($token_stack, $token);\n\t\t\t\t\tarray_unshift($text_stack, '');\n\t\t\t\t\t$em = $token;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn $text_stack[0];\n\t}\n\n\n\tfunction doBlockQuotes($text) {\n\t\t$text = preg_replace_callback('/\n\t\t\t (\t\t\t\t\t\t\t\t# Wrap whole match in $1\n\t\t\t\t(?>\n\t\t\t\t ^[ ]*>[ ]?\t\t\t# \">\" at the start of a line\n\t\t\t\t\t.+\\n\t\t\t\t\t# rest of the first line\n\t\t\t\t (.+\\n)*\t\t\t\t\t# subsequent consecutive lines\n\t\t\t\t \\n*\t\t\t\t\t\t# blanks\n\t\t\t\t)+\n\t\t\t )\n\t\t\t/xm',\n\t\t\tarray(&$this, '_doBlockQuotes_callback'), $text);\n\n\t\treturn $text;\n\t}\n\tfunction _doBlockQuotes_callback($matches) {\n\t\t$bq = $matches[1];\n\t\t# trim one level of quoting - trim whitespace-only lines\n\t\t$bq = preg_replace('/^[ ]*>[ ]?|^[ ]+$/m', '', $bq);\n\t\t$bq = $this->runBlockGamut($bq);\t\t# recurse\n\n\t\t$bq = preg_replace('/^/m', \" \", $bq);\n\t\t# These leading spaces cause problem with content, \n\t\t# so we need to fix that:\n\t\t$bq = preg_replace_callback('{(\\s*.+?
)}sx', \n\t\t\tarray(&$this, '_DoBlockQuotes_callback2'), $bq);\n\n\t\treturn \"\\n\". $this->hashBlock(\"\\n$bq\\n
\").\"\\n\\n\";\n\t}\n\tfunction _doBlockQuotes_callback2($matches) {\n\t\t$pre = $matches[1];\n\t\t$pre = preg_replace('/^ /m', '', $pre);\n\t\treturn $pre;\n\t}\n\n\n\tfunction formParagraphs($text) {\n\t#\n\t#\tParams:\n\t#\t\t$text - string to process with html tags\n\t#\n\t\t# Strip leading and trailing lines:\n\t\t$text = preg_replace('/\\A\\n+|\\n+\\z/', '', $text);\n\n\t\t$grafs = preg_split('/\\n{2,}/', $text, -1, PREG_SPLIT_NO_EMPTY);\n\n\t\t#\n\t\t# Wrap
tags and unhashify HTML blocks\n\t\t#\n\t\tforeach ($grafs as $key => $value) {\n\t\t\tif (!preg_match('/^B\\x1A[0-9]+B$/', $value)) {\n\t\t\t\t# Is a paragraph.\n\t\t\t\t$value = $this->runSpanGamut($value);\n\t\t\t\t$value = preg_replace('/^([ ]*)/', \"
\", $value);\n\t\t\t\t$value .= \"
\";\n\t\t\t\t$grafs[$key] = $this->unhash($value);\n\t\t\t}\n\t\t\telse {\n\t\t\t\t# Is a block.\n\t\t\t\t# Modify elements of @grafs in-place...\n\t\t\t\t$graf = $value;\n\t\t\t\t$block = $this->html_hashes[$graf];\n\t\t\t\t$graf = $block;\n//\t\t\t\tif (preg_match('{\n//\t\t\t\t\t\\A\n//\t\t\t\t\t(\t\t\t\t\t\t\t# $1 = tag\n//\t\t\t\t\t ]*\n//\t\t\t\t\t \\b\n//\t\t\t\t\t markdown\\s*=\\s* ([\\'\"])\t#\t$2 = attr quote char\n//\t\t\t\t\t 1\n//\t\t\t\t\t \\2\n//\t\t\t\t\t [^>]*\n//\t\t\t\t\t >\n//\t\t\t\t\t)\n//\t\t\t\t\t(\t\t\t\t\t\t\t# $3 = contents\n//\t\t\t\t\t.*\n//\t\t\t\t\t)\n//\t\t\t\t\t()\t\t\t\t\t# $4 = closing tag\n//\t\t\t\t\t\\z\n//\t\t\t\t\t}xs', $block, $matches))\n//\t\t\t\t{\n//\t\t\t\t\tlist(, $div_open, , $div_content, $div_close) = $matches;\n//\n//\t\t\t\t\t# We can't call Markdown(), because that resets the hash;\n//\t\t\t\t\t# that initialization code should be pulled into its own sub, though.\n//\t\t\t\t\t$div_content = $this->hashHTMLBlocks($div_content);\n//\t\t\t\t\t\n//\t\t\t\t\t# Run document gamut methods on the content.\n//\t\t\t\t\tforeach ($this->document_gamut as $method => $priority) {\n//\t\t\t\t\t\t$div_content = $this->$method($div_content);\n//\t\t\t\t\t}\n//\n//\t\t\t\t\t$div_open = preg_replace(\n//\t\t\t\t\t\t'{\\smarkdown\\s*=\\s*([\\'\"]).+?\\1}', '', $div_open);\n//\n//\t\t\t\t\t$graf = $div_open . \"\\n\" . $div_content . \"\\n\" . $div_close;\n//\t\t\t\t}\n\t\t\t\t$grafs[$key] = $graf;\n\t\t\t}\n\t\t}\n\n\t\treturn implode(\"\\n\\n\", $grafs);\n\t}\n\n\n\tfunction encodeAttribute($text) {\n\t#\n\t# Encode text for a double-quoted HTML attribute. This function\n\t# is *not* suitable for attributes enclosed in single quotes.\n\t#\n\t\t$text = $this->encodeAmpsAndAngles($text);\n\t\t$text = str_replace('\"', '"', $text);\n\t\treturn $text;\n\t}\n\t\n\t\n\tfunction encodeAmpsAndAngles($text) {\n\t#\n\t# Smart processing for ampersands and angle brackets that need to \n\t# be encoded. Valid character entities are left alone unless the\n\t# no-entities mode is set.\n\t#\n\t\tif ($this->no_entities) {\n\t\t\t$text = str_replace('&', '&', $text);\n\t\t} else {\n\t\t\t# Ampersand-encoding based entirely on Nat Irons's Amputator\n\t\t\t# MT plugin: \n\t\t$text = preg_replace_callback('{\n\t\t\t<\n\t\t\t(?:mailto:)?\n\t\t\t(\n\t\t\t\t[-.\\w\\x80-\\xFF]+\n\t\t\t\t\\@\n\t\t\t\t[-a-z0-9\\x80-\\xFF]+(\\.[-a-z0-9\\x80-\\xFF]+)*\\.[a-z]+\n\t\t\t)\n\t\t\t>\n\t\t\t}xi',\n\t\t\tarray(&$this, '_doAutoLinks_email_callback'), $text);\n\n\t\treturn $text;\n\t}\n\tfunction _doAutoLinks_url_callback($matches) {\n\t\t$url = $this->encodeAttribute($matches[1]);\n\t\t$link = \"$url\";\n\t\treturn $this->hashPart($link);\n\t}\n\tfunction _doAutoLinks_email_callback($matches) {\n\t\t$address = $matches[1];\n\t\t$link = $this->encodeEmailAddress($address);\n\t\treturn $this->hashPart($link);\n\t}\n\n\n\tfunction encodeEmailAddress($addr) {\n\t#\n\t#\tInput: an email address, e.g. \"foo@example.com\"\n\t#\n\t#\tOutput: the email address as a mailto link, with each character\n\t#\t\tof the address encoded as either a decimal or hex entity, in\n\t#\t\tthe hopes of foiling most address harvesting spam bots. E.g.:\n\t#\n\t#\t \n\t#\n\t#\tBased by a filter by Matthew Wickline, posted to BBEdit-Talk.\n\t# With some optimizations by Milian Wolff.\n\t#\n\t\t$addr = \"mailto:\" . $addr;\n\t\t$chars = preg_split('/(? $char) {\n\t\t\t$ord = ord($char);\n\t\t\t# Ignore non-ascii chars.\n\t\t\tif ($ord < 128) {\n\t\t\t\t$r = ($seed * (1 + $key)) % 100; # Pseudo-random function.\n\t\t\t\t# roughly 10% raw, 45% hex, 45% dec\n\t\t\t\t# '@' *must* be encoded. I insist.\n\t\t\t\tif ($r > 90 && $char != '@') /* do nothing */;\n\t\t\t\telse if ($r < 45) $chars[$key] = '&#x'.dechex($ord).';';\n\t\t\t\telse $chars[$key] = '&#'.$ord.';';\n\t\t\t}\n\t\t}\n\t\t\n\t\t$addr = implode('', $chars);\n\t\t$text = implode('', array_slice($chars, 7)); # text without `mailto:`\n\t\t$addr = \"$text\";\n\n\t\treturn $addr;\n\t}\n\n\n\tfunction parseSpan($str) {\n\t#\n\t# Take the string $str and parse it into tokens, hashing embeded HTML,\n\t# escaped characters and handling code spans.\n\t#\n\t\t$output = '';\n\t\t\n\t\t$span_re = '{\n\t\t\t\t(\n\t\t\t\t\t\\\\\\\\'.$this->escape_chars_re.'\n\t\t\t\t|\n\t\t\t\t\t(?no_markup ? '' : '\n\t\t\t\t|\n\t\t\t\t\t\t\t# comment\n\t\t\t\t|\n\t\t\t\t\t<\\?.*?\\?> | <%.*?%>\t\t# processing instruction\n\t\t\t\t|\n\t\t\t\t\t<[/!$]?[-a-zA-Z0-9:]+\t# regular tags\n\t\t\t\t\t(?>\n\t\t\t\t\t\t\\s\n\t\t\t\t\t\t(?>[^\"\\'>]+|\"[^\"]*\"|\\'[^\\']*\\')*\n\t\t\t\t\t)?\n\t\t\t\t\t>\n\t\t\t').'\n\t\t\t\t)\n\t\t\t\t}xs';\n\n\t\twhile (1) {\n\t\t\t#\n\t\t\t# Each loop iteration seach for either the next tag, the next \n\t\t\t# openning code span marker, or the next escaped character. \n\t\t\t# Each token is then passed to handleSpanToken.\n\t\t\t#\n\t\t\t$parts = preg_split($span_re, $str, 2, PREG_SPLIT_DELIM_CAPTURE);\n\t\t\t\n\t\t\t# Create token from text preceding tag.\n\t\t\tif ($parts[0] != \"\") {\n\t\t\t\t$output .= $parts[0];\n\t\t\t}\n\t\t\t\n\t\t\t# Check if we reach the end.\n\t\t\tif (isset($parts[1])) {\n\t\t\t\t$output .= $this->handleSpanToken($parts[1], $parts[2]);\n\t\t\t\t$str = $parts[2];\n\t\t\t}\n\t\t\telse {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t\t\n\t\treturn $output;\n\t}\n\t\n\t\n\tfunction handleSpanToken($token, &$str) {\n\t#\n\t# Handle $token provided by parseSpan by determining its nature and \n\t# returning the corresponding value that should replace it.\n\t#\n\t\tswitch ($token{0}) {\n\t\t\tcase \"\\\\\":\n\t\t\t\treturn $this->hashPart(\"&#\". ord($token{1}). \";\");\n\t\t\tcase \"`\":\n\t\t\t\t# Search for end marker in remaining text.\n\t\t\t\tif (preg_match('/^(.*?[^`])'.preg_quote($token).'(?!`)(.*)$/sm', \n\t\t\t\t\t$str, $matches))\n\t\t\t\t{\n\t\t\t\t\t$str = $matches[2];\n\t\t\t\t\t$codespan = $this->makeCodeSpan($matches[1]);\n\t\t\t\t\treturn $this->hashPart($codespan);\n\t\t\t\t}\n\t\t\t\treturn $token; // return as text since no ending marker found.\n\t\t\tdefault:\n\t\t\t\treturn $this->hashPart($token);\n\t\t}\n\t}\n\n\n\tfunction outdent($text) {\n\t#\n\t# Remove one level of line-leading tabs or spaces\n\t#\n\t\treturn preg_replace('/^(\\t|[ ]{1,'.$this->tab_width.'})/m', '', $text);\n\t}\n\n\n\t# String length function for detab. `_initDetab` will create a function to \n\t# hanlde UTF-8 if the default function does not exist.\n\tvar $utf8_strlen = 'mb_strlen';\n\t\n\tfunction detab($text) {\n\t#\n\t# Replace tabs with the appropriate amount of space.\n\t#\n\t\t# For each line we separate the line in blocks delemited by\n\t\t# tab characters. Then we reconstruct every line by adding the \n\t\t# appropriate number of space between each blocks.\n\t\t\n\t\t$text = preg_replace_callback('/^.*\\t.*$/m',\n\t\t\tarray(&$this, '_detab_callback'), $text);\n\n\t\treturn $text;\n\t}\n\tfunction _detab_callback($matches) {\n\t\t$line = $matches[0];\n\t\t$strlen = $this->utf8_strlen; # strlen function for UTF-8.\n\t\t\n\t\t# Split in blocks.\n\t\t$blocks = explode(\"\\t\", $line);\n\t\t# Add each blocks to the line.\n\t\t$line = $blocks[0];\n\t\tunset($blocks[0]); # Do not add first block twice.\n\t\tforeach ($blocks as $block) {\n\t\t\t# Calculate amount of space, insert spaces, insert block.\n\t\t\t$amount = $this->tab_width - \n\t\t\t\t$strlen($line, 'UTF-8') % $this->tab_width;\n\t\t\t$line .= str_repeat(\" \", $amount) . $block;\n\t\t}\n\t\treturn $line;\n\t}\n\tfunction _initDetab() {\n\t#\n\t# Check for the availability of the function in the `utf8_strlen` property\n\t# (initially `mb_strlen`). If the function is not available, create a \n\t# function that will loosely count the number of UTF-8 characters with a\n\t# regular expression.\n\t#\n\t\tif (function_exists($this->utf8_strlen)) return;\n\t\t$this->utf8_strlen = create_function('$text', 'return preg_match_all(\n\t\t\t\"/[\\\\\\\\x00-\\\\\\\\xBF]|[\\\\\\\\xC0-\\\\\\\\xFF][\\\\\\\\x80-\\\\\\\\xBF]*/\", \n\t\t\t$text, $m);');\n\t}\n\n\n\tfunction unhash($text) {\n\t#\n\t# Swap back in all the tags hashed by _HashHTMLBlocks.\n\t#\n\t\treturn preg_replace_callback('/(.)\\x1A[0-9]+\\1/', \n\t\t\tarray(&$this, '_unhash_callback'), $text);\n\t}\n\tfunction _unhash_callback($matches) {\n\t\treturn $this->html_hashes[$matches[0]];\n\t}\n\n}\n\n/*\n\nPHP Markdown\n============\n\nDescription\n-----------\n\nThis is a PHP translation of the original Markdown formatter written in\nPerl by John Gruber.\n\nMarkdown is a text-to-HTML filter; it translates an easy-to-read /\neasy-to-write structured text format into HTML. Markdown's text format\nis most similar to that of plain text email, and supports features such\nas headers, *emphasis*, code blocks, blockquotes, and links.\n\nMarkdown's syntax is designed not as a generic markup language, but\nspecifically to serve as a front-end to (X)HTML. You can use span-level\nHTML tags anywhere in a Markdown document, and you can use block level\nHTML tags (like and as well).\n\nFor more information about Markdown's syntax, see:\n\n\n\nPlease include with your report: (1) the example input; (2) the output you\nexpected; (3) the output Markdown actually produced.\n\n\nVersion History\n--------------- \n\nSee the readme file for detailed release notes for this version.\n\n\nCopyright and License\n---------------------\n\nPHP Markdown\nCopyright (c) 2004-2008 Michel Fortin \n | left | center | right\n ]\n [\n | | top | center | bottom\n ]?\n ] |\n [ // this signifies that the vertical and horizontal adjectives\n // can be arbitrarily ordered, however, there can only be two,\n // one of each, or none at all\n [\n left | center | right\n ] ||\n [\n top | center | bottom\n ]\n ]\n top, left = 0%\n center, (none) = 50%\n bottom, right = 100%\n*/\n\n/* QuirksMode says:\n keyword + length/percentage must be ordered correctly, as per W3C\n\n Internet Explorer and Opera, however, support arbitrary ordering. We\n should fix it up.\n\n Minor issue though, not strictly necessary.\n*/\n\n// control freaks may appreciate the ability to convert these to\n// percentages or something, but it's not necessary\n\n/**\n * Validates the value of background-position.\n */\nclass HTMLPurifier_AttrDef_CSS_BackgroundPosition extends HTMLPurifier_AttrDef\n{\n\n protected $length;\n protected $percentage;\n\n public function __construct() {\n $this->length = new HTMLPurifier_AttrDef_CSS_Length();\n $this->percentage = new HTMLPurifier_AttrDef_CSS_Percentage();\n }\n\n public function validate($string, $config, $context) {\n $string = $this->parseCDATA($string);\n $bits = explode(' ', $string);\n\n $keywords = array();\n $keywords['h'] = false; // left, right\n $keywords['v'] = false; // top, bottom\n $keywords['c'] = false; // center\n $measures = array();\n\n $i = 0;\n\n $lookup = array(\n 'top' => 'v',\n 'bottom' => 'v',\n 'left' => 'h',\n 'right' => 'h',\n 'center' => 'c'\n );\n\n foreach ($bits as $bit) {\n if ($bit === '') continue;\n\n // test for keyword\n $lbit = ctype_lower($bit) ? $bit : strtolower($bit);\n if (isset($lookup[$lbit])) {\n $status = $lookup[$lbit];\n $keywords[$status] = $lbit;\n $i++;\n }\n\n // test for length\n $r = $this->length->validate($bit, $config, $context);\n if ($r !== false) {\n $measures[] = $r;\n $i++;\n }\n\n // test for percentage\n $r = $this->percentage->validate($bit, $config, $context);\n if ($r !== false) {\n $measures[] = $r;\n $i++;\n }\n\n }\n\n if (!$i) return false; // no valid values were caught\n\n\n $ret = array();\n\n // first keyword\n if ($keywords['h']) $ret[] = $keywords['h'];\n elseif (count($measures)) $ret[] = array_shift($measures);\n elseif ($keywords['c']) {\n $ret[] = $keywords['c'];\n $keywords['c'] = false; // prevent re-use: center = center center\n }\n\n if ($keywords['v']) $ret[] = $keywords['v'];\n elseif (count($measures)) $ret[] = array_shift($measures);\n elseif ($keywords['c']) $ret[] = $keywords['c'];\n\n if (empty($ret)) return false;\n return implode(' ', $ret);\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Border.php",
"content": "getCSSDefinition();\n $this->info['border-width'] = $def->info['border-width'];\n $this->info['border-style'] = $def->info['border-style'];\n $this->info['border-top-color'] = $def->info['border-top-color'];\n }\n\n public function validate($string, $config, $context) {\n $string = $this->parseCDATA($string);\n $string = $this->mungeRgb($string);\n $bits = explode(' ', $string);\n $done = array(); // segments we've finished\n $ret = ''; // return value\n foreach ($bits as $bit) {\n foreach ($this->info as $propname => $validator) {\n if (isset($done[$propname])) continue;\n $r = $validator->validate($bit, $config, $context);\n if ($r !== false) {\n $ret .= $r . ' ';\n $done[$propname] = true;\n break;\n }\n }\n }\n return rtrim($ret);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Color.php",
"content": "get('Core.ColorKeywords');\n\n $color = trim($color);\n if ($color === '') return false;\n\n $lower = strtolower($color);\n if (isset($colors[$lower])) return $colors[$lower];\n\n if (strpos($color, 'rgb(') !== false) {\n // rgb literal handling\n $length = strlen($color);\n if (strpos($color, ')') !== $length - 1) return false;\n $triad = substr($color, 4, $length - 4 - 1);\n $parts = explode(',', $triad);\n if (count($parts) !== 3) return false;\n $type = false; // to ensure that they're all the same type\n $new_parts = array();\n foreach ($parts as $part) {\n $part = trim($part);\n if ($part === '') return false;\n $length = strlen($part);\n if ($part[$length - 1] === '%') {\n // handle percents\n if (!$type) {\n $type = 'percentage';\n } elseif ($type !== 'percentage') {\n return false;\n }\n $num = (float) substr($part, 0, $length - 1);\n if ($num < 0) $num = 0;\n if ($num > 100) $num = 100;\n $new_parts[] = \"$num%\";\n } else {\n // handle integers\n if (!$type) {\n $type = 'integer';\n } elseif ($type !== 'integer') {\n return false;\n }\n $num = (int) $part;\n if ($num < 0) $num = 0;\n if ($num > 255) $num = 255;\n $new_parts[] = (string) $num;\n }\n }\n $new_triad = implode(',', $new_parts);\n $color = \"rgb($new_triad)\";\n } else {\n // hexadecimal handling\n if ($color[0] === '#') {\n $hex = substr($color, 1);\n } else {\n $hex = $color;\n $color = '#' . $color;\n }\n $length = strlen($hex);\n if ($length !== 3 && $length !== 6) return false;\n if (!ctype_xdigit($hex)) return false;\n }\n\n return $color;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Composite.php",
"content": "defs = $defs;\n }\n\n public function validate($string, $config, $context) {\n foreach ($this->defs as $i => $def) {\n $result = $this->defs[$i]->validate($string, $config, $context);\n if ($result !== false) return $result;\n }\n return false;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/DenyElementDecorator.php",
"content": "def = $def;\n $this->element = $element;\n }\n /**\n * Checks if CurrentToken is set and equal to $this->element\n */\n public function validate($string, $config, $context) {\n $token = $context->get('CurrentToken', true);\n if ($token && $token->name == $this->element) return false;\n return $this->def->validate($string, $config, $context);\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Filter.php",
"content": "intValidator = new HTMLPurifier_AttrDef_Integer();\n }\n\n public function validate($value, $config, $context) {\n $value = $this->parseCDATA($value);\n if ($value === 'none') return $value;\n // if we looped this we could support multiple filters\n $function_length = strcspn($value, '(');\n $function = trim(substr($value, 0, $function_length));\n if ($function !== 'alpha' &&\n $function !== 'Alpha' &&\n $function !== 'progid:DXImageTransform.Microsoft.Alpha'\n ) return false;\n $cursor = $function_length + 1;\n $parameters_length = strcspn($value, ')', $cursor);\n $parameters = substr($value, $cursor, $parameters_length);\n $params = explode(',', $parameters);\n $ret_params = array();\n $lookup = array();\n foreach ($params as $param) {\n list($key, $value) = explode('=', $param);\n $key = trim($key);\n $value = trim($value);\n if (isset($lookup[$key])) continue;\n if ($key !== 'opacity') continue;\n $value = $this->intValidator->validate($value, $config, $context);\n if ($value === false) continue;\n $int = (int) $value;\n if ($int > 100) $value = '100';\n if ($int < 0) $value = '0';\n $ret_params[] = \"$key=$value\";\n $lookup[$key] = true;\n }\n $ret_parameters = implode(',', $ret_params);\n $ret_function = \"$function($ret_parameters)\";\n return $ret_function;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Font.php",
"content": "getCSSDefinition();\n $this->info['font-style'] = $def->info['font-style'];\n $this->info['font-variant'] = $def->info['font-variant'];\n $this->info['font-weight'] = $def->info['font-weight'];\n $this->info['font-size'] = $def->info['font-size'];\n $this->info['line-height'] = $def->info['line-height'];\n $this->info['font-family'] = $def->info['font-family'];\n }\n\n public function validate($string, $config, $context) {\n\n static $system_fonts = array(\n 'caption' => true,\n 'icon' => true,\n 'menu' => true,\n 'message-box' => true,\n 'small-caption' => true,\n 'status-bar' => true\n );\n\n // regular pre-processing\n $string = $this->parseCDATA($string);\n if ($string === '') return false;\n\n // check if it's one of the keywords\n $lowercase_string = strtolower($string);\n if (isset($system_fonts[$lowercase_string])) {\n return $lowercase_string;\n }\n\n $bits = explode(' ', $string); // bits to process\n $stage = 0; // this indicates what we're looking for\n $caught = array(); // which stage 0 properties have we caught?\n $stage_1 = array('font-style', 'font-variant', 'font-weight');\n $final = ''; // output\n\n for ($i = 0, $size = count($bits); $i < $size; $i++) {\n if ($bits[$i] === '') continue;\n switch ($stage) {\n\n // attempting to catch font-style, font-variant or font-weight\n case 0:\n foreach ($stage_1 as $validator_name) {\n if (isset($caught[$validator_name])) continue;\n $r = $this->info[$validator_name]->validate(\n $bits[$i], $config, $context);\n if ($r !== false) {\n $final .= $r . ' ';\n $caught[$validator_name] = true;\n break;\n }\n }\n // all three caught, continue on\n if (count($caught) >= 3) $stage = 1;\n if ($r !== false) break;\n\n // attempting to catch font-size and perhaps line-height\n case 1:\n $found_slash = false;\n if (strpos($bits[$i], '/') !== false) {\n list($font_size, $line_height) =\n explode('/', $bits[$i]);\n if ($line_height === '') {\n // ooh, there's a space after the slash!\n $line_height = false;\n $found_slash = true;\n }\n } else {\n $font_size = $bits[$i];\n $line_height = false;\n }\n $r = $this->info['font-size']->validate(\n $font_size, $config, $context);\n if ($r !== false) {\n $final .= $r;\n // attempt to catch line-height\n if ($line_height === false) {\n // we need to scroll forward\n for ($j = $i + 1; $j < $size; $j++) {\n if ($bits[$j] === '') continue;\n if ($bits[$j] === '/') {\n if ($found_slash) {\n return false;\n } else {\n $found_slash = true;\n continue;\n }\n }\n $line_height = $bits[$j];\n break;\n }\n } else {\n // slash already found\n $found_slash = true;\n $j = $i;\n }\n if ($found_slash) {\n $i = $j;\n $r = $this->info['line-height']->validate(\n $line_height, $config, $context);\n if ($r !== false) {\n $final .= '/' . $r;\n }\n }\n $final .= ' ';\n $stage = 2;\n break;\n }\n return false;\n\n // attempting to catch font-family\n case 2:\n $font_family =\n implode(' ', array_slice($bits, $i, $size - $i));\n $r = $this->info['font-family']->validate(\n $font_family, $config, $context);\n if ($r !== false) {\n $final .= $r . ' ';\n // processing completed successfully\n return rtrim($final);\n }\n return false;\n }\n }\n return false;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/FontFamily.php",
"content": " true,\n 'sans-serif' => true,\n 'monospace' => true,\n 'fantasy' => true,\n 'cursive' => true\n );\n\n // assume that no font names contain commas in them\n $fonts = explode(',', $string);\n $final = '';\n foreach($fonts as $font) {\n $font = trim($font);\n if ($font === '') continue;\n // match a generic name\n if (isset($generic_names[$font])) {\n $final .= $font . ', ';\n continue;\n }\n // match a quoted name\n if ($font[0] === '\"' || $font[0] === \"'\") {\n $length = strlen($font);\n if ($length <= 2) continue;\n $quote = $font[0];\n if ($font[$length - 1] !== $quote) continue;\n $font = substr($font, 1, $length - 2);\n\n $new_font = '';\n for ($i = 0, $c = strlen($font); $i < $c; $i++) {\n if ($font[$i] === '\\\\') {\n $i++;\n if ($i >= $c) {\n $new_font .= '\\\\';\n break;\n }\n if (ctype_xdigit($font[$i])) {\n $code = $font[$i];\n for ($a = 1, $i++; $i < $c && $a < 6; $i++, $a++) {\n if (!ctype_xdigit($font[$i])) break;\n $code .= $font[$i];\n }\n // We have to be extremely careful when adding\n // new characters, to make sure we're not breaking\n // the encoding.\n $char = HTMLPurifier_Encoder::unichr(hexdec($code));\n if (HTMLPurifier_Encoder::cleanUTF8($char) === '') continue;\n $new_font .= $char;\n if ($i < $c && trim($font[$i]) !== '') $i--;\n continue;\n }\n if ($font[$i] === \"\\n\") continue;\n }\n $new_font .= $font[$i];\n }\n\n $font = $new_font;\n }\n // $font is a pure representation of the font name\n\n if (ctype_alnum($font) && $font !== '') {\n // very simple font, allow it in unharmed\n $final .= $font . ', ';\n continue;\n }\n\n // complicated font, requires quoting\n\n // armor single quotes and new lines\n $font = str_replace(\"\\\\\", \"\\\\\\\\\", $font);\n $font = str_replace(\"'\", \"\\\\'\", $font);\n $final .= \"'$font', \";\n }\n $final = rtrim($final, ', ');\n if ($final === '') return false;\n return $final;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/ImportantDecorator.php",
"content": "def = $def;\n $this->allow = $allow;\n }\n /**\n * Intercepts and removes !important if necessary\n */\n public function validate($string, $config, $context) {\n // test for ! and important tokens\n $string = trim($string);\n $is_important = false;\n // :TODO: optimization: test directly for !important and ! important\n if (strlen($string) >= 9 && substr($string, -9) === 'important') {\n $temp = rtrim(substr($string, 0, -9));\n // use a temp, because we might want to restore important\n if (strlen($temp) >= 1 && substr($temp, -1) === '!') {\n $string = rtrim(substr($temp, 0, -1));\n $is_important = true;\n }\n }\n $string = $this->def->validate($string, $config, $context);\n if ($this->allow && $is_important) $string .= ' !important';\n return $string;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Length.php",
"content": "min = $min !== null ? HTMLPurifier_Length::make($min) : null;\n $this->max = $max !== null ? HTMLPurifier_Length::make($max) : null;\n }\n\n public function validate($string, $config, $context) {\n $string = $this->parseCDATA($string);\n\n // Optimizations\n if ($string === '') return false;\n if ($string === '0') return '0';\n if (strlen($string) === 1) return false;\n\n $length = HTMLPurifier_Length::make($string);\n if (!$length->isValid()) return false;\n\n if ($this->min) {\n $c = $length->compareTo($this->min);\n if ($c === false) return false;\n if ($c < 0) return false;\n }\n if ($this->max) {\n $c = $length->compareTo($this->max);\n if ($c === false) return false;\n if ($c > 0) return false;\n }\n\n return $length->toString();\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/ListStyle.php",
"content": "getCSSDefinition();\n $this->info['list-style-type'] = $def->info['list-style-type'];\n $this->info['list-style-position'] = $def->info['list-style-position'];\n $this->info['list-style-image'] = $def->info['list-style-image'];\n }\n\n public function validate($string, $config, $context) {\n\n // regular pre-processing\n $string = $this->parseCDATA($string);\n if ($string === '') return false;\n\n // assumes URI doesn't have spaces in it\n $bits = explode(' ', strtolower($string)); // bits to process\n\n $caught = array();\n $caught['type'] = false;\n $caught['position'] = false;\n $caught['image'] = false;\n\n $i = 0; // number of catches\n $none = false;\n\n foreach ($bits as $bit) {\n if ($i >= 3) return; // optimization bit\n if ($bit === '') continue;\n foreach ($caught as $key => $status) {\n if ($status !== false) continue;\n $r = $this->info['list-style-' . $key]->validate($bit, $config, $context);\n if ($r === false) continue;\n if ($r === 'none') {\n if ($none) continue;\n else $none = true;\n if ($key == 'image') continue;\n }\n $caught[$key] = $r;\n $i++;\n break;\n }\n }\n\n if (!$i) return false;\n\n $ret = array();\n\n // construct type\n if ($caught['type']) $ret[] = $caught['type'];\n\n // construct image\n if ($caught['image']) $ret[] = $caught['image'];\n\n // construct position\n if ($caught['position']) $ret[] = $caught['position'];\n\n if (empty($ret)) return false;\n return implode(' ', $ret);\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Multiple.php",
"content": "single = $single;\n $this->max = $max;\n }\n\n public function validate($string, $config, $context) {\n $string = $this->parseCDATA($string);\n if ($string === '') return false;\n $parts = explode(' ', $string); // parseCDATA replaced \\r, \\t and \\n\n $length = count($parts);\n $final = '';\n for ($i = 0, $num = 0; $i < $length && $num < $this->max; $i++) {\n if (ctype_space($parts[$i])) continue;\n $result = $this->single->validate($parts[$i], $config, $context);\n if ($result !== false) {\n $final .= $result . ' ';\n $num++;\n }\n }\n if ($final === '') return false;\n return rtrim($final);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Number.php",
"content": "non_negative = $non_negative;\n }\n\n /**\n * @warning Some contexts do not pass $config, $context. These\n * variables should not be used without checking HTMLPurifier_Length\n */\n public function validate($number, $config, $context) {\n\n $number = $this->parseCDATA($number);\n\n if ($number === '') return false;\n if ($number === '0') return '0';\n\n $sign = '';\n switch ($number[0]) {\n case '-':\n if ($this->non_negative) return false;\n $sign = '-';\n case '+':\n $number = substr($number, 1);\n }\n\n if (ctype_digit($number)) {\n $number = ltrim($number, '0');\n return $number ? $sign . $number : '0';\n }\n\n // Period is the only non-numeric character allowed\n if (strpos($number, '.') === false) return false;\n\n list($left, $right) = explode('.', $number, 2);\n\n if ($left === '' && $right === '') return false;\n if ($left !== '' && !ctype_digit($left)) return false;\n\n $left = ltrim($left, '0');\n $right = rtrim($right, '0');\n\n if ($right === '') {\n return $left ? $sign . $left : '0';\n } elseif (!ctype_digit($right)) {\n return false;\n }\n\n return $sign . $left . '.' . $right;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/Percentage.php",
"content": "number_def = new HTMLPurifier_AttrDef_CSS_Number($non_negative);\n }\n\n public function validate($string, $config, $context) {\n\n $string = $this->parseCDATA($string);\n\n if ($string === '') return false;\n $length = strlen($string);\n if ($length === 1) return false;\n if ($string[$length - 1] !== '%') return false;\n\n $number = substr($string, 0, $length - 1);\n $number = $this->number_def->validate($number, $config, $context);\n\n if ($number === false) return false;\n return \"$number%\";\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/TextDecoration.php",
"content": " true,\n 'overline' => true,\n 'underline' => true,\n );\n\n $string = strtolower($this->parseCDATA($string));\n\n if ($string === 'none') return $string;\n\n $parts = explode(' ', $string);\n $final = '';\n foreach ($parts as $part) {\n if (isset($allowed_values[$part])) {\n $final .= $part . ' ';\n }\n }\n $final = rtrim($final);\n if ($final === '') return false;\n return $final;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS/URI.php",
"content": "parseCDATA($uri_string);\n if (strpos($uri_string, 'url(') !== 0) return false;\n $uri_string = substr($uri_string, 4);\n $new_length = strlen($uri_string) - 1;\n if ($uri_string[$new_length] != ')') return false;\n $uri = trim(substr($uri_string, 0, $new_length));\n\n if (!empty($uri) && ($uri[0] == \"'\" || $uri[0] == '\"')) {\n $quote = $uri[0];\n $new_length = strlen($uri) - 1;\n if ($uri[$new_length] !== $quote) return false;\n $uri = substr($uri, 1, $new_length - 1);\n }\n\n $keys = array( '(', ')', ',', ' ', '\"', \"'\");\n $values = array('\\\\(', '\\\\)', '\\\\,', '\\\\ ', '\\\\\"', \"\\\\'\");\n $uri = str_replace($values, $keys, $uri);\n\n $result = parent::validate($uri, $config, $context);\n\n if ($result === false) return false;\n\n // escape necessary characters according to CSS spec\n // except for the comma, none of these should appear in the\n // URI at all\n $result = str_replace($keys, $values, $result);\n\n return \"url($result)\";\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/CSS.php",
"content": "parseCDATA($css);\n\n $definition = $config->getCSSDefinition();\n\n // we're going to break the spec and explode by semicolons.\n // This is because semicolon rarely appears in escaped form\n // Doing this is generally flaky but fast\n // IT MIGHT APPEAR IN URIs, see HTMLPurifier_AttrDef_CSSURI\n // for details\n\n $declarations = explode(';', $css);\n $propvalues = array();\n\n /**\n * Name of the current CSS property being validated.\n */\n $property = false;\n $context->register('CurrentCSSProperty', $property);\n\n foreach ($declarations as $declaration) {\n if (!$declaration) continue;\n if (!strpos($declaration, ':')) continue;\n list($property, $value) = explode(':', $declaration, 2);\n $property = trim($property);\n $value = trim($value);\n $ok = false;\n do {\n if (isset($definition->info[$property])) {\n $ok = true;\n break;\n }\n if (ctype_lower($property)) break;\n $property = strtolower($property);\n if (isset($definition->info[$property])) {\n $ok = true;\n break;\n }\n } while(0);\n if (!$ok) continue;\n // inefficient call, since the validator will do this again\n if (strtolower(trim($value)) !== 'inherit') {\n // inherit works for everything (but only on the base property)\n $result = $definition->info[$property]->validate(\n $value, $config, $context );\n } else {\n $result = 'inherit';\n }\n if ($result === false) continue;\n $propvalues[$property] = $result;\n }\n\n $context->destroy('CurrentCSSProperty');\n\n // procedure does not write the new CSS simultaneously, so it's\n // slightly inefficient, but it's the only way of getting rid of\n // duplicates. Perhaps config to optimize it, but not now.\n\n $new_declarations = '';\n foreach ($propvalues as $prop => $value) {\n $new_declarations .= \"$prop:$value;\";\n }\n\n return $new_declarations ? $new_declarations : false;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/Enum.php",
"content": "valid_values = array_flip($valid_values);\n $this->case_sensitive = $case_sensitive;\n }\n\n public function validate($string, $config, $context) {\n $string = trim($string);\n if (!$this->case_sensitive) {\n // we may want to do full case-insensitive libraries\n $string = ctype_lower($string) ? $string : strtolower($string);\n }\n $result = isset($this->valid_values[$string]);\n\n return $result ? $string : false;\n }\n\n /**\n * @param $string In form of comma-delimited list of case-insensitive\n * valid values. Example: \"foo,bar,baz\". Prepend \"s:\" to make\n * case sensitive\n */\n public function make($string) {\n if (strlen($string) > 2 && $string[0] == 's' && $string[1] == ':') {\n $string = substr($string, 2);\n $sensitive = true;\n } else {\n $sensitive = false;\n }\n $values = explode(',', $string);\n return new HTMLPurifier_AttrDef_Enum($values, $sensitive);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/Bool.php",
"content": "name = $name;}\n\n public function validate($string, $config, $context) {\n if (empty($string)) return false;\n return $this->name;\n }\n\n /**\n * @param $string Name of attribute\n */\n public function make($string) {\n return new HTMLPurifier_AttrDef_HTML_Bool($string);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/Class.php",
"content": "getDefinition('HTML')->doctype->name;\n if ($name == \"XHTML 1.1\" || $name == \"XHTML 2.0\") {\n return parent::split($string, $config, $context);\n } else {\n return preg_split('/\\s+/', $string);\n }\n }\n protected function filter($tokens, $config, $context) {\n $allowed = $config->get('Attr.AllowedClasses');\n $forbidden = $config->get('Attr.ForbiddenClasses');\n $ret = array();\n foreach ($tokens as $token) {\n if (\n ($allowed === null || isset($allowed[$token])) &&\n !isset($forbidden[$token]) &&\n // We need this O(n) check because of PHP's array\n // implementation that casts -0 to 0.\n !in_array($token, $ret, true)\n ) {\n $ret[] = $token;\n }\n }\n return $ret;\n }\n}\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/Color.php",
"content": "get('Core.ColorKeywords');\n\n $string = trim($string);\n\n if (empty($string)) return false;\n if (isset($colors[$string])) return $colors[$string];\n if ($string[0] === '#') $hex = substr($string, 1);\n else $hex = $string;\n\n $length = strlen($hex);\n if ($length !== 3 && $length !== 6) return false;\n if (!ctype_xdigit($hex)) return false;\n if ($length === 3) $hex = $hex[0].$hex[0].$hex[1].$hex[1].$hex[2].$hex[2];\n\n return \"#$hex\";\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/FrameTarget.php",
"content": "valid_values === false) $this->valid_values = $config->get('Attr.AllowedFrameTargets');\n return parent::validate($string, $config, $context);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/ID.php",
"content": "get('Attr.EnableID')) return false;\n\n $id = trim($id); // trim it first\n\n if ($id === '') return false;\n\n $prefix = $config->get('Attr.IDPrefix');\n if ($prefix !== '') {\n $prefix .= $config->get('Attr.IDPrefixLocal');\n // prevent re-appending the prefix\n if (strpos($id, $prefix) !== 0) $id = $prefix . $id;\n } elseif ($config->get('Attr.IDPrefixLocal') !== '') {\n trigger_error('%Attr.IDPrefixLocal cannot be used unless '.\n '%Attr.IDPrefix is set', E_USER_WARNING);\n }\n\n //if (!$this->ref) {\n $id_accumulator =& $context->get('IDAccumulator');\n if (isset($id_accumulator->ids[$id])) return false;\n //}\n\n // we purposely avoid using regex, hopefully this is faster\n\n if (ctype_alpha($id)) {\n $result = true;\n } else {\n if (!ctype_alpha(@$id[0])) return false;\n $trim = trim( // primitive style of regexps, I suppose\n $id,\n 'A..Za..z0..9:-._'\n );\n $result = ($trim === '');\n }\n\n $regexp = $config->get('Attr.IDBlacklistRegexp');\n if ($regexp && preg_match($regexp, $id)) {\n return false;\n }\n\n if (/*!$this->ref && */$result) $id_accumulator->add($id);\n\n // if no change was made to the ID, return the result\n // else, return the new id if stripping whitespace made it\n // valid, or return false.\n return $result ? $id : false;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/Length.php",
"content": " 100) return '100%';\n\n return ((string) $points) . '%';\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/LinkTypes.php",
"content": " 'AllowedRel',\n 'rev' => 'AllowedRev'\n );\n if (!isset($configLookup[$name])) {\n trigger_error('Unrecognized attribute name for link '.\n 'relationship.', E_USER_ERROR);\n return;\n }\n $this->name = $configLookup[$name];\n }\n\n public function validate($string, $config, $context) {\n\n $allowed = $config->get('Attr.' . $this->name);\n if (empty($allowed)) return false;\n\n $string = $this->parseCDATA($string);\n $parts = explode(' ', $string);\n\n // lookup to prevent duplicates\n $ret_lookup = array();\n foreach ($parts as $part) {\n $part = strtolower(trim($part));\n if (!isset($allowed[$part])) continue;\n $ret_lookup[$part] = true;\n }\n\n if (empty($ret_lookup)) return false;\n $string = implode(' ', array_keys($ret_lookup));\n\n return $string;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/MultiLength.php",
"content": "split($string, $config, $context);\n $tokens = $this->filter($tokens, $config, $context);\n if (empty($tokens)) return false;\n return implode(' ', $tokens);\n\n }\n\n /**\n * Splits a space separated list of tokens into its constituent parts.\n */\n protected function split($string, $config, $context) {\n // OPTIMIZABLE!\n // do the preg_match, capture all subpatterns for reformulation\n\n // we don't support U+00A1 and up codepoints or\n // escaping because I don't know how to do that with regexps\n // and plus it would complicate optimization efforts (you never\n // see that anyway).\n $pattern = '/(?:(?<=\\s)|\\A)'. // look behind for space or string start\n '((?:--|-?[A-Za-z_])[A-Za-z_\\-0-9]*)'.\n '(?:(?=\\s)|\\z)/'; // look ahead for space or string end\n preg_match_all($pattern, $string, $matches);\n return $matches[1];\n }\n\n /**\n * Template method for removing certain tokens based on arbitrary criteria.\n * @note If we wanted to be really functional, we'd do an array_filter\n * with a callback. But... we're not.\n */\n protected function filter($tokens, $config, $context) {\n return $tokens;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/HTML/Pixels.php",
"content": "max = $max;\n }\n\n public function validate($string, $config, $context) {\n\n $string = trim($string);\n if ($string === '0') return $string;\n if ($string === '') return false;\n $length = strlen($string);\n if (substr($string, $length - 2) == 'px') {\n $string = substr($string, 0, $length - 2);\n }\n if (!is_numeric($string)) return false;\n $int = (int) $string;\n\n if ($int < 0) return '0';\n\n // upper-bound value, extremely high values can\n // crash operating systems, see \n // WARNING, above link WILL crash you if you're using Windows\n\n if ($this->max !== null && $int > $this->max) return (string) $this->max;\n\n return (string) $int;\n\n }\n\n public function make($string) {\n if ($string === '') $max = null;\n else $max = (int) $string;\n $class = get_class($this);\n return new $class($max);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/Integer.php",
"content": "negative = $negative;\n $this->zero = $zero;\n $this->positive = $positive;\n }\n\n public function validate($integer, $config, $context) {\n\n $integer = $this->parseCDATA($integer);\n if ($integer === '') return false;\n\n // we could possibly simply typecast it to integer, but there are\n // certain fringe cases that must not return an integer.\n\n // clip leading sign\n if ( $this->negative && $integer[0] === '-' ) {\n $digits = substr($integer, 1);\n if ($digits === '0') $integer = '0'; // rm minus sign for zero\n } elseif( $this->positive && $integer[0] === '+' ) {\n $digits = $integer = substr($integer, 1); // rm unnecessary plus\n } else {\n $digits = $integer;\n }\n\n // test if it's numeric\n if (!ctype_digit($digits)) return false;\n\n // perform scope tests\n if (!$this->zero && $integer == 0) return false;\n if (!$this->positive && $integer > 0) return false;\n if (!$this->negative && $integer < 0) return false;\n\n return $integer;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/Lang.php",
"content": " 8 || !ctype_alnum($subtags[1])) {\n return $new_string;\n }\n if (!ctype_lower($subtags[1])) $subtags[1] = strtolower($subtags[1]);\n\n $new_string .= '-' . $subtags[1];\n if ($num_subtags == 2) return $new_string;\n\n // process all other subtags, index 2 and up\n for ($i = 2; $i < $num_subtags; $i++) {\n $length = strlen($subtags[$i]);\n if ($length == 0 || $length > 8 || !ctype_alnum($subtags[$i])) {\n return $new_string;\n }\n if (!ctype_lower($subtags[$i])) {\n $subtags[$i] = strtolower($subtags[$i]);\n }\n $new_string .= '-' . $subtags[$i];\n }\n\n return $new_string;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/Switch.php",
"content": "tag = $tag;\n $this->withTag = $with_tag;\n $this->withoutTag = $without_tag;\n }\n\n public function validate($string, $config, $context) {\n $token = $context->get('CurrentToken', true);\n if (!$token || $token->name !== $this->tag) {\n return $this->withoutTag->validate($string, $config, $context);\n } else {\n return $this->withTag->validate($string, $config, $context);\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/Text.php",
"content": "parseCDATA($string);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/URI/Email/SimpleCheck.php",
"content": "\"\n // that needs more percent encoding to be done\n if ($string == '') return false;\n $string = trim($string);\n $result = preg_match('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\\.[A-Z]{2,4}$/i', $string);\n return $result ? $string : false;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/URI/Email.php",
"content": "ipv4 = new HTMLPurifier_AttrDef_URI_IPv4();\n $this->ipv6 = new HTMLPurifier_AttrDef_URI_IPv6();\n }\n\n public function validate($string, $config, $context) {\n $length = strlen($string);\n if ($string === '') return '';\n if ($length > 1 && $string[0] === '[' && $string[$length-1] === ']') {\n //IPv6\n $ip = substr($string, 1, $length - 2);\n $valid = $this->ipv6->validate($ip, $config, $context);\n if ($valid === false) return false;\n return '['. $valid . ']';\n }\n\n // need to do checks on unusual encodings too\n $ipv4 = $this->ipv4->validate($string, $config, $context);\n if ($ipv4 !== false) return $ipv4;\n\n // A regular domain name.\n\n // This breaks I18N domain names, but we don't have proper IRI support,\n // so force users to insert Punycode. If there's complaining we'll\n // try to fix things into an international friendly form.\n\n // The productions describing this are:\n $a = '[a-z]'; // alpha\n $an = '[a-z0-9]'; // alphanum\n $and = '[a-z0-9-]'; // alphanum | \"-\"\n // domainlabel = alphanum | alphanum *( alphanum | \"-\" ) alphanum\n $domainlabel = \"$an($and*$an)?\";\n // toplabel = alpha | alpha *( alphanum | \"-\" ) alphanum\n $toplabel = \"$a($and*$an)?\";\n // hostname = *( domainlabel \".\" ) toplabel [ \".\" ]\n $match = preg_match(\"/^($domainlabel\\.)*$toplabel\\.?$/i\", $string);\n if (!$match) return false;\n\n return $string;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/URI/IPv4.php",
"content": "ip4) $this->_loadRegex();\n\n if (preg_match('#^' . $this->ip4 . '$#s', $aIP))\n {\n return $aIP;\n }\n\n return false;\n\n }\n\n /**\n * Lazy load function to prevent regex from being stuffed in\n * cache.\n */\n protected function _loadRegex() {\n $oct = '(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9][0-9]|[0-9])'; // 0-255\n $this->ip4 = \"(?:{$oct}\\\\.{$oct}\\\\.{$oct}\\\\.{$oct})\";\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/URI/IPv6.php",
"content": "ip4) $this->_loadRegex();\n\n $original = $aIP;\n\n $hex = '[0-9a-fA-F]';\n $blk = '(?:' . $hex . '{1,4})';\n $pre = '(?:/(?:12[0-8]|1[0-1][0-9]|[1-9][0-9]|[0-9]))'; // /0 - /128\n\n // prefix check\n if (strpos($aIP, '/') !== false)\n {\n if (preg_match('#' . $pre . '$#s', $aIP, $find))\n {\n $aIP = substr($aIP, 0, 0-strlen($find[0]));\n unset($find);\n }\n else\n {\n return false;\n }\n }\n\n // IPv4-compatiblity check\n if (preg_match('#(?<=:'.')' . $this->ip4 . '$#s', $aIP, $find))\n {\n $aIP = substr($aIP, 0, 0-strlen($find[0]));\n $ip = explode('.', $find[0]);\n $ip = array_map('dechex', $ip);\n $aIP .= $ip[0] . $ip[1] . ':' . $ip[2] . $ip[3];\n unset($find, $ip);\n }\n\n // compression check\n $aIP = explode('::', $aIP);\n $c = count($aIP);\n if ($c > 2)\n {\n return false;\n }\n elseif ($c == 2)\n {\n list($first, $second) = $aIP;\n $first = explode(':', $first);\n $second = explode(':', $second);\n\n if (count($first) + count($second) > 8)\n {\n return false;\n }\n\n while(count($first) < 8)\n {\n array_push($first, '0');\n }\n\n array_splice($first, 8 - count($second), 8, $second);\n $aIP = $first;\n unset($first,$second);\n }\n else\n {\n $aIP = explode(':', $aIP[0]);\n }\n $c = count($aIP);\n\n if ($c != 8)\n {\n return false;\n }\n\n // All the pieces should be 16-bit hex strings. Are they?\n foreach ($aIP as $piece)\n {\n if (!preg_match('#^[0-9a-fA-F]{4}$#s', sprintf('%04s', $piece)))\n {\n return false;\n }\n }\n\n return $original;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef/URI.php",
"content": "parser = new HTMLPurifier_URIParser();\n $this->embedsResource = (bool) $embeds_resource;\n }\n\n public function make($string) {\n $embeds = (bool) $string;\n return new HTMLPurifier_AttrDef_URI($embeds);\n }\n\n public function validate($uri, $config, $context) {\n\n if ($config->get('URI.Disable')) return false;\n\n $uri = $this->parseCDATA($uri);\n\n // parse the URI\n $uri = $this->parser->parse($uri);\n if ($uri === false) return false;\n\n // add embedded flag to context for validators\n $context->register('EmbeddedURI', $this->embedsResource);\n\n $ok = false;\n do {\n\n // generic validation\n $result = $uri->validate($config, $context);\n if (!$result) break;\n\n // chained filtering\n $uri_def = $config->getDefinition('URI');\n $result = $uri_def->filter($uri, $config, $context);\n if (!$result) break;\n\n // scheme-specific validation\n $scheme_obj = $uri->getSchemeObj($config, $context);\n if (!$scheme_obj) break;\n if ($this->embedsResource && !$scheme_obj->browsable) break;\n $result = $scheme_obj->validate($uri, $config, $context);\n if (!$result) break;\n\n // Post chained filtering\n $result = $uri_def->postFilter($uri, $config, $context);\n if (!$result) break;\n\n // survived gauntlet\n $ok = true;\n\n } while (false);\n\n $context->destroy('EmbeddedURI');\n if (!$ok) return false;\n\n // back to string\n return $uri->toString();\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrDef.php",
"content": " by removing\n * leading and trailing whitespace, ignoring line feeds, and replacing\n * carriage returns and tabs with spaces. While most useful for HTML\n * attributes specified as CDATA, it can also be applied to most CSS\n * values.\n *\n * @note This method is not entirely standards compliant, as trim() removes\n * more types of whitespace than specified in the spec. In practice,\n * this is rarely a problem, as those extra characters usually have\n * already been removed by HTMLPurifier_Encoder.\n *\n * @warning This processing is inconsistent with XML's whitespace handling\n * as specified by section 3.3.3 and referenced XHTML 1.0 section\n * 4.7. However, note that we are NOT necessarily\n * parsing XML, thus, this behavior may still be correct. We\n * assume that newlines have been normalized.\n */\n public function parseCDATA($string) {\n $string = trim($string);\n $string = str_replace(array(\"\\n\", \"\\t\", \"\\r\"), ' ', $string);\n return $string;\n }\n\n /**\n * Factory method for creating this class from a string.\n * @param $string String construction info\n * @return Created AttrDef object corresponding to $string\n */\n public function make($string) {\n // default implementation, return a flyweight of this object.\n // If $string has an effect on the returned object (i.e. you\n // need to overload this method), it is best\n // to clone or instantiate new copies. (Instantiation is safer.)\n return $this;\n }\n\n /**\n * Removes spaces from rgb(0, 0, 0) so that shorthand CSS properties work\n * properly. THIS IS A HACK!\n */\n protected function mungeRgb($string) {\n return preg_replace('/rgb\\((\\d+)\\s*,\\s*(\\d+)\\s*,\\s*(\\d+)\\)/', 'rgb(\\1,\\2,\\3)', $string);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Background.php",
"content": "confiscateAttr($attr, 'background');\n // some validation should happen here\n\n $this->prependCSS($attr, \"background-image:url($background);\");\n\n return $attr;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/BdoDir.php",
"content": "get('Attr.DefaultTextDir');\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/BgColor.php",
"content": "confiscateAttr($attr, 'bgcolor');\n // some validation should happen here\n\n $this->prependCSS($attr, \"background-color:$bgcolor;\");\n\n return $attr;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/BoolToCSS.php",
"content": "attr = $attr;\n $this->css = $css;\n }\n\n public function transform($attr, $config, $context) {\n if (!isset($attr[$this->attr])) return $attr;\n unset($attr[$this->attr]);\n $this->prependCSS($attr, $this->css);\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Border.php",
"content": "confiscateAttr($attr, 'border');\n // some validation should happen here\n $this->prependCSS($attr, \"border:{$border_width}px solid;\");\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/EnumToCSS.php",
"content": "attr = $attr;\n $this->enumToCSS = $enum_to_css;\n $this->caseSensitive = (bool) $case_sensitive;\n }\n\n public function transform($attr, $config, $context) {\n\n if (!isset($attr[$this->attr])) return $attr;\n\n $value = trim($attr[$this->attr]);\n unset($attr[$this->attr]);\n\n if (!$this->caseSensitive) $value = strtolower($value);\n\n if (!isset($this->enumToCSS[$value])) {\n return $attr;\n }\n\n $this->prependCSS($attr, $this->enumToCSS[$value]);\n\n return $attr;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/ImgRequired.php",
"content": "get('Core.RemoveInvalidImg')) return $attr;\n $attr['src'] = $config->get('Attr.DefaultInvalidImage');\n $src = false;\n }\n\n if (!isset($attr['alt'])) {\n if ($src) {\n $alt = $config->get('Attr.DefaultImageAlt');\n if ($alt === null) {\n $attr['alt'] = basename($attr['src']);\n } else {\n $attr['alt'] = $alt;\n }\n } else {\n $attr['alt'] = $config->get('Attr.DefaultInvalidImageAlt');\n }\n }\n\n return $attr;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/ImgSpace.php",
"content": " array('left', 'right'),\n 'vspace' => array('top', 'bottom')\n );\n\n public function __construct($attr) {\n $this->attr = $attr;\n if (!isset($this->css[$attr])) {\n trigger_error(htmlspecialchars($attr) . ' is not valid space attribute');\n }\n }\n\n public function transform($attr, $config, $context) {\n\n if (!isset($attr[$this->attr])) return $attr;\n\n $width = $this->confiscateAttr($attr, $this->attr);\n // some validation could happen here\n\n if (!isset($this->css[$this->attr])) return $attr;\n\n $style = '';\n foreach ($this->css[$this->attr] as $suffix) {\n $property = \"margin-$suffix\";\n $style .= \"$property:{$width}px;\";\n }\n\n $this->prependCSS($attr, $style);\n\n return $attr;\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Input.php",
"content": "pixels = new HTMLPurifier_AttrDef_HTML_Pixels();\n }\n\n public function transform($attr, $config, $context) {\n if (!isset($attr['type'])) $t = 'text';\n else $t = strtolower($attr['type']);\n if (isset($attr['checked']) && $t !== 'radio' && $t !== 'checkbox') {\n unset($attr['checked']);\n }\n if (isset($attr['maxlength']) && $t !== 'text' && $t !== 'password') {\n unset($attr['maxlength']);\n }\n if (isset($attr['size']) && $t !== 'text' && $t !== 'password') {\n $result = $this->pixels->validate($attr['size'], $config, $context);\n if ($result === false) unset($attr['size']);\n else $attr['size'] = $result;\n }\n if (isset($attr['src']) && $t !== 'image') {\n unset($attr['src']);\n }\n if (!isset($attr['value']) && ($t === 'radio' || $t === 'checkbox')) {\n $attr['value'] = '';\n }\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Lang.php",
"content": "name = $name;\n $this->cssName = $css_name ? $css_name : $name;\n }\n\n public function transform($attr, $config, $context) {\n if (!isset($attr[$this->name])) return $attr;\n $length = $this->confiscateAttr($attr, $this->name);\n if(ctype_digit($length)) $length .= 'px';\n $this->prependCSS($attr, $this->cssName . \":$length;\");\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Name.php",
"content": "get('HTML.Attr.Name.UseCDATA')) return $attr;\n if (!isset($attr['name'])) return $attr;\n $id = $this->confiscateAttr($attr, 'name');\n if ( isset($attr['id'])) return $attr;\n $attr['id'] = $id;\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/NameSync.php",
"content": "idDef = new HTMLPurifier_AttrDef_HTML_ID();\n }\n\n public function transform($attr, $config, $context) {\n if (!isset($attr['name'])) return $attr;\n $name = $attr['name'];\n if (isset($attr['id']) && $attr['id'] === $name) return $attr;\n $result = $this->idDef->validate($name, $config, $context);\n if ($result === false) unset($attr['name']);\n else $attr['name'] = $result;\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/SafeEmbed.php",
"content": "uri = new HTMLPurifier_AttrDef_URI(true); // embedded\n }\n\n public function transform($attr, $config, $context) {\n // If we add support for other objects, we'll need to alter the\n // transforms.\n switch ($attr['name']) {\n // application/x-shockwave-flash\n // Keep this synchronized with Injector/SafeObject.php\n case 'allowScriptAccess':\n $attr['value'] = 'never';\n break;\n case 'allowNetworking':\n $attr['value'] = 'internal';\n break;\n case 'wmode':\n $attr['value'] = 'window';\n break;\n case 'movie':\n $attr['value'] = $this->uri->validate($attr['value'], $config, $context);\n break;\n // add other cases to support other param name/value pairs\n default:\n $attr['name'] = $attr['value'] = null;\n }\n return $attr;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/ScriptRequired.php",
"content": "\n */\nclass HTMLPurifier_AttrTransform_ScriptRequired extends HTMLPurifier_AttrTransform\n{\n public function transform($attr, $config, $context) {\n if (!isset($attr['type'])) {\n $attr['type'] = 'text/javascript';\n }\n return $attr;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform/Textarea.php",
"content": "\n */\nclass HTMLPurifier_AttrTransform_Textarea extends HTMLPurifier_AttrTransform\n{\n\n public function transform($attr, $config, $context) {\n // Calculated from Firefox\n if (!isset($attr['cols'])) $attr['cols'] = '22';\n if (!isset($attr['rows'])) $attr['rows'] = '3';\n return $attr;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrTransform.php",
"content": "info['Enum'] = new HTMLPurifier_AttrDef_Enum();\n $this->info['Bool'] = new HTMLPurifier_AttrDef_HTML_Bool();\n\n $this->info['CDATA'] = new HTMLPurifier_AttrDef_Text();\n $this->info['ID'] = new HTMLPurifier_AttrDef_HTML_ID();\n $this->info['Length'] = new HTMLPurifier_AttrDef_HTML_Length();\n $this->info['MultiLength'] = new HTMLPurifier_AttrDef_HTML_MultiLength();\n $this->info['NMTOKENS'] = new HTMLPurifier_AttrDef_HTML_Nmtokens();\n $this->info['Pixels'] = new HTMLPurifier_AttrDef_HTML_Pixels();\n $this->info['Text'] = new HTMLPurifier_AttrDef_Text();\n $this->info['URI'] = new HTMLPurifier_AttrDef_URI();\n $this->info['LanguageCode'] = new HTMLPurifier_AttrDef_Lang();\n $this->info['Color'] = new HTMLPurifier_AttrDef_HTML_Color();\n\n // unimplemented aliases\n $this->info['ContentType'] = new HTMLPurifier_AttrDef_Text();\n $this->info['ContentTypes'] = new HTMLPurifier_AttrDef_Text();\n $this->info['Charsets'] = new HTMLPurifier_AttrDef_Text();\n $this->info['Character'] = new HTMLPurifier_AttrDef_Text();\n\n // \"proprietary\" types\n $this->info['Class'] = new HTMLPurifier_AttrDef_HTML_Class();\n\n // number is really a positive integer (one or more digits)\n // FIXME: ^^ not always, see start and value of list items\n $this->info['Number'] = new HTMLPurifier_AttrDef_Integer(false, false, true);\n }\n\n /**\n * Retrieves a type\n * @param $type String type name\n * @return Object AttrDef for type\n */\n public function get($type) {\n\n // determine if there is any extra info tacked on\n if (strpos($type, '#') !== false) list($type, $string) = explode('#', $type, 2);\n else $string = '';\n\n if (!isset($this->info[$type])) {\n trigger_error('Cannot retrieve undefined attribute type ' . $type, E_USER_ERROR);\n return;\n }\n\n return $this->info[$type]->make($string);\n\n }\n\n /**\n * Sets a new implementation for a type\n * @param $type String type name\n * @param $impl Object AttrDef for type\n */\n public function set($type, $impl) {\n $this->info[$type] = $impl;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/AttrValidator.php",
"content": "getHTMLDefinition();\n $e =& $context->get('ErrorCollector', true);\n\n // initialize IDAccumulator if necessary\n $ok =& $context->get('IDAccumulator', true);\n if (!$ok) {\n $id_accumulator = HTMLPurifier_IDAccumulator::build($config, $context);\n $context->register('IDAccumulator', $id_accumulator);\n }\n\n // initialize CurrentToken if necessary\n $current_token =& $context->get('CurrentToken', true);\n if (!$current_token) $context->register('CurrentToken', $token);\n\n if (\n !$token instanceof HTMLPurifier_Token_Start &&\n !$token instanceof HTMLPurifier_Token_Empty\n ) return $token;\n\n // create alias to global definition array, see also $defs\n // DEFINITION CALL\n $d_defs = $definition->info_global_attr;\n\n // don't update token until the very end, to ensure an atomic update\n $attr = $token->attr;\n\n // do global transformations (pre)\n // nothing currently utilizes this\n foreach ($definition->info_attr_transform_pre as $transform) {\n $attr = $transform->transform($o = $attr, $config, $context);\n if ($e) {\n if ($attr != $o) $e->send(E_NOTICE, 'AttrValidator: Attributes transformed', $o, $attr);\n }\n }\n\n // do local transformations only applicable to this element (pre)\n // ex. to
\n foreach ($definition->info[$token->name]->attr_transform_pre as $transform) {\n $attr = $transform->transform($o = $attr, $config, $context);\n if ($e) {\n if ($attr != $o) $e->send(E_NOTICE, 'AttrValidator: Attributes transformed', $o, $attr);\n }\n }\n\n // create alias to this element's attribute definition array, see\n // also $d_defs (global attribute definition array)\n // DEFINITION CALL\n $defs = $definition->info[$token->name]->attr;\n\n $attr_key = false;\n $context->register('CurrentAttr', $attr_key);\n\n // iterate through all the attribute keypairs\n // Watch out for name collisions: $key has previously been used\n foreach ($attr as $attr_key => $value) {\n\n // call the definition\n if ( isset($defs[$attr_key]) ) {\n // there is a local definition defined\n if ($defs[$attr_key] === false) {\n // We've explicitly been told not to allow this element.\n // This is usually when there's a global definition\n // that must be overridden.\n // Theoretically speaking, we could have a\n // AttrDef_DenyAll, but this is faster!\n $result = false;\n } else {\n // validate according to the element's definition\n $result = $defs[$attr_key]->validate(\n $value, $config, $context\n );\n }\n } elseif ( isset($d_defs[$attr_key]) ) {\n // there is a global definition defined, validate according\n // to the global definition\n $result = $d_defs[$attr_key]->validate(\n $value, $config, $context\n );\n } else {\n // system never heard of the attribute? DELETE!\n $result = false;\n }\n\n // put the results into effect\n if ($result === false || $result === null) {\n // this is a generic error message that should replaced\n // with more specific ones when possible\n if ($e) $e->send(E_ERROR, 'AttrValidator: Attribute removed');\n\n // remove the attribute\n unset($attr[$attr_key]);\n } elseif (is_string($result)) {\n // generally, if a substitution is happening, there\n // was some sort of implicit correction going on. We'll\n // delegate it to the attribute classes to say exactly what.\n\n // simple substitution\n $attr[$attr_key] = $result;\n } else {\n // nothing happens\n }\n\n // we'd also want slightly more complicated substitution\n // involving an array as the return value,\n // although we're not sure how colliding attributes would\n // resolve (certain ones would be completely overriden,\n // others would prepend themselves).\n }\n\n $context->destroy('CurrentAttr');\n\n // post transforms\n\n // global (error reporting untested)\n foreach ($definition->info_attr_transform_post as $transform) {\n $attr = $transform->transform($o = $attr, $config, $context);\n if ($e) {\n if ($attr != $o) $e->send(E_NOTICE, 'AttrValidator: Attributes transformed', $o, $attr);\n }\n }\n\n // local (error reporting untested)\n foreach ($definition->info[$token->name]->attr_transform_post as $transform) {\n $attr = $transform->transform($o = $attr, $config, $context);\n if ($e) {\n if ($attr != $o) $e->send(E_NOTICE, 'AttrValidator: Attributes transformed', $o, $attr);\n }\n }\n\n $token->attr = $attr;\n\n // destroy CurrentToken if we made it ourselves\n if (!$current_token) $context->destroy('CurrentToken');\n\n }\n\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Bootstrap.php",
"content": "\nif (!defined('PHP_EOL')) {\n switch (strtoupper(substr(PHP_OS, 0, 3))) {\n case 'WIN':\n define('PHP_EOL', \"\\r\\n\");\n break;\n case 'DAR':\n define('PHP_EOL', \"\\r\");\n break;\n default:\n define('PHP_EOL', \"\\n\");\n }\n}\n\n/**\n * Bootstrap class that contains meta-functionality for HTML Purifier such as\n * the autoload function.\n *\n * @note\n * This class may be used without any other files from HTML Purifier.\n */\nclass HTMLPurifier_Bootstrap\n{\n\n /**\n * Autoload function for HTML Purifier\n * @param $class Class to load\n */\n public static function autoload($class) {\n $file = HTMLPurifier_Bootstrap::getPath($class);\n if (!$file) return false;\n require HTMLPURIFIER_PREFIX . '/' . $file;\n return true;\n }\n\n /**\n * Returns the path for a specific class.\n */\n public static function getPath($class) {\n if (strncmp('HTMLPurifier', $class, 12) !== 0) return false;\n // Custom implementations\n if (strncmp('HTMLPurifier_Language_', $class, 22) === 0) {\n $code = str_replace('_', '-', substr($class, 22));\n $file = 'HTMLPurifier/Language/classes/' . $code . '.php';\n } else {\n $file = str_replace('_', '/', $class) . '.php';\n }\n if (!file_exists(HTMLPURIFIER_PREFIX . '/' . $file)) return false;\n return $file;\n }\n\n /**\n * \"Pre-registers\" our autoloader on the SPL stack.\n */\n public static function registerAutoload() {\n $autoload = array('HTMLPurifier_Bootstrap', 'autoload');\n if ( ($funcs = spl_autoload_functions()) === false ) {\n spl_autoload_register($autoload);\n } elseif (function_exists('spl_autoload_unregister')) {\n $compat = version_compare(PHP_VERSION, '5.1.2', '<=') &&\n version_compare(PHP_VERSION, '5.1.0', '>=');\n foreach ($funcs as $func) {\n if (is_array($func)) {\n // :TRICKY: There are some compatibility issues and some\n // places where we need to error out\n $reflector = new ReflectionMethod($func[0], $func[1]);\n if (!$reflector->isStatic()) {\n throw new Exception('\n HTML Purifier autoloader registrar is not compatible\n with non-static object methods due to PHP Bug #44144;\n Please do not use HTMLPurifier.autoload.php (or any\n file that includes this file); instead, place the code:\n spl_autoload_register(array(\\'HTMLPurifier_Bootstrap\\', \\'autoload\\'))\n after your own autoloaders.\n ');\n }\n // Suprisingly, spl_autoload_register supports the\n // Class::staticMethod callback format, although call_user_func doesn't\n if ($compat) $func = implode('::', $func);\n }\n spl_autoload_unregister($func);\n }\n spl_autoload_register($autoload);\n foreach ($funcs as $func) spl_autoload_register($func);\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/CSSDefinition.php",
"content": "info['text-align'] = new HTMLPurifier_AttrDef_Enum(\n array('left', 'right', 'center', 'justify'), false);\n\n $border_style =\n $this->info['border-bottom-style'] =\n $this->info['border-right-style'] =\n $this->info['border-left-style'] =\n $this->info['border-top-style'] = new HTMLPurifier_AttrDef_Enum(\n array('none', 'hidden', 'dotted', 'dashed', 'solid', 'double',\n 'groove', 'ridge', 'inset', 'outset'), false);\n\n $this->info['border-style'] = new HTMLPurifier_AttrDef_CSS_Multiple($border_style);\n\n $this->info['clear'] = new HTMLPurifier_AttrDef_Enum(\n array('none', 'left', 'right', 'both'), false);\n $this->info['float'] = new HTMLPurifier_AttrDef_Enum(\n array('none', 'left', 'right'), false);\n $this->info['font-style'] = new HTMLPurifier_AttrDef_Enum(\n array('normal', 'italic', 'oblique'), false);\n $this->info['font-variant'] = new HTMLPurifier_AttrDef_Enum(\n array('normal', 'small-caps'), false);\n\n $uri_or_none = new HTMLPurifier_AttrDef_CSS_Composite(\n array(\n new HTMLPurifier_AttrDef_Enum(array('none')),\n new HTMLPurifier_AttrDef_CSS_URI()\n )\n );\n\n $this->info['list-style-position'] = new HTMLPurifier_AttrDef_Enum(\n array('inside', 'outside'), false);\n $this->info['list-style-type'] = new HTMLPurifier_AttrDef_Enum(\n array('disc', 'circle', 'square', 'decimal', 'lower-roman',\n 'upper-roman', 'lower-alpha', 'upper-alpha', 'none'), false);\n $this->info['list-style-image'] = $uri_or_none;\n\n $this->info['list-style'] = new HTMLPurifier_AttrDef_CSS_ListStyle($config);\n\n $this->info['text-transform'] = new HTMLPurifier_AttrDef_Enum(\n array('capitalize', 'uppercase', 'lowercase', 'none'), false);\n $this->info['color'] = new HTMLPurifier_AttrDef_CSS_Color();\n\n $this->info['background-image'] = $uri_or_none;\n $this->info['background-repeat'] = new HTMLPurifier_AttrDef_Enum(\n array('repeat', 'repeat-x', 'repeat-y', 'no-repeat')\n );\n $this->info['background-attachment'] = new HTMLPurifier_AttrDef_Enum(\n array('scroll', 'fixed')\n );\n $this->info['background-position'] = new HTMLPurifier_AttrDef_CSS_BackgroundPosition();\n\n $border_color =\n $this->info['border-top-color'] =\n $this->info['border-bottom-color'] =\n $this->info['border-left-color'] =\n $this->info['border-right-color'] =\n $this->info['background-color'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('transparent')),\n new HTMLPurifier_AttrDef_CSS_Color()\n ));\n\n $this->info['background'] = new HTMLPurifier_AttrDef_CSS_Background($config);\n\n $this->info['border-color'] = new HTMLPurifier_AttrDef_CSS_Multiple($border_color);\n\n $border_width =\n $this->info['border-top-width'] =\n $this->info['border-bottom-width'] =\n $this->info['border-left-width'] =\n $this->info['border-right-width'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('thin', 'medium', 'thick')),\n new HTMLPurifier_AttrDef_CSS_Length('0') //disallow negative\n ));\n\n $this->info['border-width'] = new HTMLPurifier_AttrDef_CSS_Multiple($border_width);\n\n $this->info['letter-spacing'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('normal')),\n new HTMLPurifier_AttrDef_CSS_Length()\n ));\n\n $this->info['word-spacing'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('normal')),\n new HTMLPurifier_AttrDef_CSS_Length()\n ));\n\n $this->info['font-size'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('xx-small', 'x-small',\n 'small', 'medium', 'large', 'x-large', 'xx-large',\n 'larger', 'smaller')),\n new HTMLPurifier_AttrDef_CSS_Percentage(),\n new HTMLPurifier_AttrDef_CSS_Length()\n ));\n\n $this->info['line-height'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('normal')),\n new HTMLPurifier_AttrDef_CSS_Number(true), // no negatives\n new HTMLPurifier_AttrDef_CSS_Length('0'),\n new HTMLPurifier_AttrDef_CSS_Percentage(true)\n ));\n\n $margin =\n $this->info['margin-top'] =\n $this->info['margin-bottom'] =\n $this->info['margin-left'] =\n $this->info['margin-right'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_CSS_Length(),\n new HTMLPurifier_AttrDef_CSS_Percentage(),\n new HTMLPurifier_AttrDef_Enum(array('auto'))\n ));\n\n $this->info['margin'] = new HTMLPurifier_AttrDef_CSS_Multiple($margin);\n\n // non-negative\n $padding =\n $this->info['padding-top'] =\n $this->info['padding-bottom'] =\n $this->info['padding-left'] =\n $this->info['padding-right'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_CSS_Length('0'),\n new HTMLPurifier_AttrDef_CSS_Percentage(true)\n ));\n\n $this->info['padding'] = new HTMLPurifier_AttrDef_CSS_Multiple($padding);\n\n $this->info['text-indent'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_CSS_Length(),\n new HTMLPurifier_AttrDef_CSS_Percentage()\n ));\n\n $trusted_wh = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_CSS_Length('0'),\n new HTMLPurifier_AttrDef_CSS_Percentage(true),\n new HTMLPurifier_AttrDef_Enum(array('auto'))\n ));\n $max = $config->get('CSS.MaxImgLength');\n\n $this->info['width'] =\n $this->info['height'] =\n $max === null ?\n $trusted_wh :\n new HTMLPurifier_AttrDef_Switch('img',\n // For img tags:\n new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_CSS_Length('0', $max),\n new HTMLPurifier_AttrDef_Enum(array('auto'))\n )),\n // For everyone else:\n $trusted_wh\n );\n\n $this->info['text-decoration'] = new HTMLPurifier_AttrDef_CSS_TextDecoration();\n\n $this->info['font-family'] = new HTMLPurifier_AttrDef_CSS_FontFamily();\n\n // this could use specialized code\n $this->info['font-weight'] = new HTMLPurifier_AttrDef_Enum(\n array('normal', 'bold', 'bolder', 'lighter', '100', '200', '300',\n '400', '500', '600', '700', '800', '900'), false);\n\n // MUST be called after other font properties, as it references\n // a CSSDefinition object\n $this->info['font'] = new HTMLPurifier_AttrDef_CSS_Font($config);\n\n // same here\n $this->info['border'] =\n $this->info['border-bottom'] =\n $this->info['border-top'] =\n $this->info['border-left'] =\n $this->info['border-right'] = new HTMLPurifier_AttrDef_CSS_Border($config);\n\n $this->info['border-collapse'] = new HTMLPurifier_AttrDef_Enum(array(\n 'collapse', 'separate'));\n\n $this->info['caption-side'] = new HTMLPurifier_AttrDef_Enum(array(\n 'top', 'bottom'));\n\n $this->info['table-layout'] = new HTMLPurifier_AttrDef_Enum(array(\n 'auto', 'fixed'));\n\n $this->info['vertical-align'] = new HTMLPurifier_AttrDef_CSS_Composite(array(\n new HTMLPurifier_AttrDef_Enum(array('baseline', 'sub', 'super',\n 'top', 'text-top', 'middle', 'bottom', 'text-bottom')),\n new HTMLPurifier_AttrDef_CSS_Length(),\n new HTMLPurifier_AttrDef_CSS_Percentage()\n ));\n\n $this->info['border-spacing'] = new HTMLPurifier_AttrDef_CSS_Multiple(new HTMLPurifier_AttrDef_CSS_Length(), 2);\n\n // partial support\n $this->info['white-space'] = new HTMLPurifier_AttrDef_Enum(array('nowrap'));\n\n if ($config->get('CSS.Proprietary')) {\n $this->doSetupProprietary($config);\n }\n\n if ($config->get('CSS.AllowTricky')) {\n $this->doSetupTricky($config);\n }\n\n $allow_important = $config->get('CSS.AllowImportant');\n // wrap all attr-defs with decorator that handles !important\n foreach ($this->info as $k => $v) {\n $this->info[$k] = new HTMLPurifier_AttrDef_CSS_ImportantDecorator($v, $allow_important);\n }\n\n $this->setupConfigStuff($config);\n }\n\n protected function doSetupProprietary($config) {\n // Internet Explorer only scrollbar colors\n $this->info['scrollbar-arrow-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n $this->info['scrollbar-base-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n $this->info['scrollbar-darkshadow-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n $this->info['scrollbar-face-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n $this->info['scrollbar-highlight-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n $this->info['scrollbar-shadow-color'] = new HTMLPurifier_AttrDef_CSS_Color();\n\n // technically not proprietary, but CSS3, and no one supports it\n $this->info['opacity'] = new HTMLPurifier_AttrDef_CSS_AlphaValue();\n $this->info['-moz-opacity'] = new HTMLPurifier_AttrDef_CSS_AlphaValue();\n $this->info['-khtml-opacity'] = new HTMLPurifier_AttrDef_CSS_AlphaValue();\n\n // only opacity, for now\n $this->info['filter'] = new HTMLPurifier_AttrDef_CSS_Filter();\n\n }\n\n protected function doSetupTricky($config) {\n $this->info['display'] = new HTMLPurifier_AttrDef_Enum(array(\n 'inline', 'block', 'list-item', 'run-in', 'compact',\n 'marker', 'table', 'inline-table', 'table-row-group',\n 'table-header-group', 'table-footer-group', 'table-row',\n 'table-column-group', 'table-column', 'table-cell', 'table-caption', 'none'\n ));\n $this->info['visibility'] = new HTMLPurifier_AttrDef_Enum(array(\n 'visible', 'hidden', 'collapse'\n ));\n $this->info['overflow'] = new HTMLPurifier_AttrDef_Enum(array('visible', 'hidden', 'auto', 'scroll'));\n }\n\n\n /**\n * Performs extra config-based processing. Based off of\n * HTMLPurifier_HTMLDefinition.\n * @todo Refactor duplicate elements into common class (probably using\n * composition, not inheritance).\n */\n protected function setupConfigStuff($config) {\n\n // setup allowed elements\n $support = \"(for information on implementing this, see the \".\n \"support forums) \";\n $allowed_attributes = $config->get('CSS.AllowedProperties');\n if ($allowed_attributes !== null) {\n foreach ($this->info as $name => $d) {\n if(!isset($allowed_attributes[$name])) unset($this->info[$name]);\n unset($allowed_attributes[$name]);\n }\n // emit errors\n foreach ($allowed_attributes as $name => $d) {\n // :TODO: Is this htmlspecialchars() call really necessary?\n $name = htmlspecialchars($name);\n trigger_error(\"Style attribute '$name' is not supported $support\", E_USER_WARNING);\n }\n }\n\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/Chameleon.php",
"content": "inline = new HTMLPurifier_ChildDef_Optional($inline);\n $this->block = new HTMLPurifier_ChildDef_Optional($block);\n $this->elements = $this->block->elements;\n }\n\n public function validateChildren($tokens_of_children, $config, $context) {\n if ($context->get('IsInline') === false) {\n return $this->block->validateChildren(\n $tokens_of_children, $config, $context);\n } else {\n return $this->inline->validateChildren(\n $tokens_of_children, $config, $context);\n }\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/Custom.php",
"content": "dtd_regex = $dtd_regex;\n $this->_compileRegex();\n }\n /**\n * Compiles the PCRE regex from a DTD regex ($dtd_regex to $_pcre_regex)\n */\n protected function _compileRegex() {\n $raw = str_replace(' ', '', $this->dtd_regex);\n if ($raw{0} != '(') {\n $raw = \"($raw)\";\n }\n $el = '[#a-zA-Z0-9_.-]+';\n $reg = $raw;\n\n // COMPLICATED! AND MIGHT BE BUGGY! I HAVE NO CLUE WHAT I'M\n // DOING! Seriously: if there's problems, please report them.\n\n // collect all elements into the $elements array\n preg_match_all(\"/$el/\", $reg, $matches);\n foreach ($matches[0] as $match) {\n $this->elements[$match] = true;\n }\n\n // setup all elements as parentheticals with leading commas\n $reg = preg_replace(\"/$el/\", '(,\\\\0)', $reg);\n\n // remove commas when they were not solicited\n $reg = preg_replace(\"/([^,(|]\\(+),/\", '\\\\1', $reg);\n\n // remove all non-paranthetical commas: they are handled by first regex\n $reg = preg_replace(\"/,\\(/\", '(', $reg);\n\n $this->_pcre_regex = $reg;\n }\n public function validateChildren($tokens_of_children, $config, $context) {\n $list_of_children = '';\n $nesting = 0; // depth into the nest\n foreach ($tokens_of_children as $token) {\n if (!empty($token->is_whitespace)) continue;\n\n $is_child = ($nesting == 0); // direct\n\n if ($token instanceof HTMLPurifier_Token_Start) {\n $nesting++;\n } elseif ($token instanceof HTMLPurifier_Token_End) {\n $nesting--;\n }\n\n if ($is_child) {\n $list_of_children .= $token->name . ',';\n }\n }\n // add leading comma to deal with stray comma declarations\n $list_of_children = ',' . rtrim($list_of_children, ',');\n $okay =\n preg_match(\n '/^,?'.$this->_pcre_regex.'$/',\n $list_of_children\n );\n\n return (bool) $okay;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/Empty.php",
"content": "whitespace) return $tokens_of_children;\n else return array();\n }\n return $result;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/Required.php",
"content": " $x) {\n $elements[$i] = true;\n if (empty($i)) unset($elements[$i]); // remove blank\n }\n }\n $this->elements = $elements;\n }\n public $allow_empty = false;\n public $type = 'required';\n public function validateChildren($tokens_of_children, $config, $context) {\n // Flag for subclasses\n $this->whitespace = false;\n\n // if there are no tokens, delete parent node\n if (empty($tokens_of_children)) return false;\n\n // the new set of children\n $result = array();\n\n // current depth into the nest\n $nesting = 0;\n\n // whether or not we're deleting a node\n $is_deleting = false;\n\n // whether or not parsed character data is allowed\n // this controls whether or not we silently drop a tag\n // or generate escaped HTML from it\n $pcdata_allowed = isset($this->elements['#PCDATA']);\n\n // a little sanity check to make sure it's not ALL whitespace\n $all_whitespace = true;\n\n // some configuration\n $escape_invalid_children = $config->get('Core.EscapeInvalidChildren');\n\n // generator\n $gen = new HTMLPurifier_Generator($config, $context);\n\n foreach ($tokens_of_children as $token) {\n if (!empty($token->is_whitespace)) {\n $result[] = $token;\n continue;\n }\n $all_whitespace = false; // phew, we're not talking about whitespace\n\n $is_child = ($nesting == 0);\n\n if ($token instanceof HTMLPurifier_Token_Start) {\n $nesting++;\n } elseif ($token instanceof HTMLPurifier_Token_End) {\n $nesting--;\n }\n\n if ($is_child) {\n $is_deleting = false;\n if (!isset($this->elements[$token->name])) {\n $is_deleting = true;\n if ($pcdata_allowed && $token instanceof HTMLPurifier_Token_Text) {\n $result[] = $token;\n } elseif ($pcdata_allowed && $escape_invalid_children) {\n $result[] = new HTMLPurifier_Token_Text(\n $gen->generateFromToken($token)\n );\n }\n continue;\n }\n }\n if (!$is_deleting || ($pcdata_allowed && $token instanceof HTMLPurifier_Token_Text)) {\n $result[] = $token;\n } elseif ($pcdata_allowed && $escape_invalid_children) {\n $result[] =\n new HTMLPurifier_Token_Text(\n $gen->generateFromToken($token)\n );\n } else {\n // drop silently\n }\n }\n if (empty($result)) return false;\n if ($all_whitespace) {\n $this->whitespace = true;\n return false;\n }\n if ($tokens_of_children == $result) return true;\n return $result;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/StrictBlockquote.php",
"content": "init($config);\n return $this->fake_elements;\n }\n\n public function validateChildren($tokens_of_children, $config, $context) {\n\n $this->init($config);\n\n // trick the parent class into thinking it allows more\n $this->elements = $this->fake_elements;\n $result = parent::validateChildren($tokens_of_children, $config, $context);\n $this->elements = $this->real_elements;\n\n if ($result === false) return array();\n if ($result === true) $result = $tokens_of_children;\n\n $def = $config->getHTMLDefinition();\n $block_wrap_start = new HTMLPurifier_Token_Start($def->info_block_wrapper);\n $block_wrap_end = new HTMLPurifier_Token_End( $def->info_block_wrapper);\n $is_inline = false;\n $depth = 0;\n $ret = array();\n\n // assuming that there are no comment tokens\n foreach ($result as $i => $token) {\n $token = $result[$i];\n // ifs are nested for readability\n if (!$is_inline) {\n if (!$depth) {\n if (\n ($token instanceof HTMLPurifier_Token_Text && !$token->is_whitespace) ||\n (!$token instanceof HTMLPurifier_Token_Text && !isset($this->elements[$token->name]))\n ) {\n $is_inline = true;\n $ret[] = $block_wrap_start;\n }\n }\n } else {\n if (!$depth) {\n // starting tokens have been inline text / empty\n if ($token instanceof HTMLPurifier_Token_Start || $token instanceof HTMLPurifier_Token_Empty) {\n if (isset($this->elements[$token->name])) {\n // ended\n $ret[] = $block_wrap_end;\n $is_inline = false;\n }\n }\n }\n }\n $ret[] = $token;\n if ($token instanceof HTMLPurifier_Token_Start) $depth++;\n if ($token instanceof HTMLPurifier_Token_End) $depth--;\n }\n if ($is_inline) $ret[] = $block_wrap_end;\n return $ret;\n }\n\n private function init($config) {\n if (!$this->init) {\n $def = $config->getHTMLDefinition();\n // allow all inline elements\n $this->real_elements = $this->elements;\n $this->fake_elements = $def->info_content_sets['Flow'];\n $this->fake_elements['#PCDATA'] = true;\n $this->init = true;\n }\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef/Table.php",
"content": " true, 'tbody' => true, 'thead' => true,\n 'tfoot' => true, 'caption' => true, 'colgroup' => true, 'col' => true);\n public function __construct() {}\n public function validateChildren($tokens_of_children, $config, $context) {\n if (empty($tokens_of_children)) return false;\n\n // this ensures that the loop gets run one last time before closing\n // up. It's a little bit of a hack, but it works! Just make sure you\n // get rid of the token later.\n $tokens_of_children[] = false;\n\n // only one of these elements is allowed in a table\n $caption = false;\n $thead = false;\n $tfoot = false;\n\n // as many of these as you want\n $cols = array();\n $content = array();\n\n $nesting = 0; // current depth so we can determine nodes\n $is_collecting = false; // are we globbing together tokens to package\n // into one of the collectors?\n $collection = array(); // collected nodes\n $tag_index = 0; // the first node might be whitespace,\n // so this tells us where the start tag is\n\n foreach ($tokens_of_children as $token) {\n $is_child = ($nesting == 0);\n\n if ($token === false) {\n // terminating sequence started\n } elseif ($token instanceof HTMLPurifier_Token_Start) {\n $nesting++;\n } elseif ($token instanceof HTMLPurifier_Token_End) {\n $nesting--;\n }\n\n // handle node collection\n if ($is_collecting) {\n if ($is_child) {\n // okay, let's stash the tokens away\n // first token tells us the type of the collection\n switch ($collection[$tag_index]->name) {\n case 'tr':\n case 'tbody':\n $content[] = $collection;\n break;\n case 'caption':\n if ($caption !== false) break;\n $caption = $collection;\n break;\n case 'thead':\n case 'tfoot':\n // access the appropriate variable, $thead or $tfoot\n $var = $collection[$tag_index]->name;\n if ($$var === false) {\n $$var = $collection;\n } else {\n // transmutate the first and less entries into\n // tbody tags, and then put into content\n $collection[$tag_index]->name = 'tbody';\n $collection[count($collection)-1]->name = 'tbody';\n $content[] = $collection;\n }\n break;\n case 'colgroup':\n $cols[] = $collection;\n break;\n }\n $collection = array();\n $is_collecting = false;\n $tag_index = 0;\n } else {\n // add the node to the collection\n $collection[] = $token;\n }\n }\n\n // terminate\n if ($token === false) break;\n\n if ($is_child) {\n // determine what we're dealing with\n if ($token->name == 'col') {\n // the only empty tag in the possie, we can handle it\n // immediately\n $cols[] = array_merge($collection, array($token));\n $collection = array();\n $tag_index = 0;\n continue;\n }\n switch($token->name) {\n case 'caption':\n case 'colgroup':\n case 'thead':\n case 'tfoot':\n case 'tbody':\n case 'tr':\n $is_collecting = true;\n $collection[] = $token;\n continue;\n default:\n if (!empty($token->is_whitespace)) {\n $collection[] = $token;\n $tag_index++;\n }\n continue;\n }\n }\n }\n\n if (empty($content)) return false;\n\n $ret = array();\n if ($caption !== false) $ret = array_merge($ret, $caption);\n if ($cols !== false) foreach ($cols as $token_array) $ret = array_merge($ret, $token_array);\n if ($thead !== false) $ret = array_merge($ret, $thead);\n if ($tfoot !== false) $ret = array_merge($ret, $tfoot);\n foreach ($content as $token_array) $ret = array_merge($ret, $token_array);\n if (!empty($collection) && $is_collecting == false){\n // grab the trailing space\n $ret = array_merge($ret, $collection);\n }\n\n array_pop($tokens_of_children); // remove phantom token\n\n return ($ret === $tokens_of_children) ? true : $ret;\n\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ChildDef.php",
"content": "elements;\n }\n\n /**\n * Validates nodes according to definition and returns modification.\n *\n * @param $tokens_of_children Array of HTMLPurifier_Token\n * @param $config HTMLPurifier_Config object\n * @param $context HTMLPurifier_Context object\n * @return bool true to leave nodes as is\n * @return bool false to remove parent node\n * @return array of replacement child tokens\n */\n abstract public function validateChildren($tokens_of_children, $config, $context);\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Config.php",
"content": "defaultPlist;\n $this->plist = new HTMLPurifier_PropertyList($parent);\n $this->def = $definition; // keep a copy around for checking\n $this->parser = new HTMLPurifier_VarParser_Flexible();\n }\n\n /**\n * Convenience constructor that creates a config object based on a mixed var\n * @param mixed $config Variable that defines the state of the config\n * object. Can be: a HTMLPurifier_Config() object,\n * an array of directives based on loadArray(),\n * or a string filename of an ini file.\n * @param HTMLPurifier_ConfigSchema Schema object\n * @return Configured HTMLPurifier_Config object\n */\n public static function create($config, $schema = null) {\n if ($config instanceof HTMLPurifier_Config) {\n // pass-through\n return $config;\n }\n if (!$schema) {\n $ret = HTMLPurifier_Config::createDefault();\n } else {\n $ret = new HTMLPurifier_Config($schema);\n }\n if (is_string($config)) $ret->loadIni($config);\n elseif (is_array($config)) $ret->loadArray($config);\n return $ret;\n }\n\n /**\n * Creates a new config object that inherits from a previous one.\n * @param HTMLPurifier_Config $config Configuration object to inherit\n * from.\n * @return HTMLPurifier_Config object with $config as its parent.\n */\n public static function inherit(HTMLPurifier_Config $config) {\n return new HTMLPurifier_Config($config->def, $config->plist);\n }\n\n /**\n * Convenience constructor that creates a default configuration object.\n * @return Default HTMLPurifier_Config object.\n */\n public static function createDefault() {\n $definition = HTMLPurifier_ConfigSchema::instance();\n $config = new HTMLPurifier_Config($definition);\n return $config;\n }\n\n /**\n * Retreives a value from the configuration.\n * @param $key String key\n */\n public function get($key, $a = null) {\n if ($a !== null) {\n $this->triggerError(\"Using deprecated API: use \\$config->get('$key.$a') instead\", E_USER_WARNING);\n $key = \"$key.$a\";\n }\n if (!$this->finalized) $this->autoFinalize();\n if (!isset($this->def->info[$key])) {\n // can't add % due to SimpleTest bug\n $this->triggerError('Cannot retrieve value of undefined directive ' . htmlspecialchars($key),\n E_USER_WARNING);\n return;\n }\n if (isset($this->def->info[$key]->isAlias)) {\n $d = $this->def->info[$key];\n $this->triggerError('Cannot get value from aliased directive, use real name ' . $d->key,\n E_USER_ERROR);\n return;\n }\n if ($this->lock) {\n list($ns) = explode('.', $key);\n if ($ns !== $this->lock) {\n $this->triggerError('Cannot get value of namespace ' . $ns . ' when lock for ' . $this->lock . ' is active, this probably indicates a Definition setup method is accessing directives that are not within its namespace', E_USER_ERROR);\n return;\n }\n }\n return $this->plist->get($key);\n }\n\n /**\n * Retreives an array of directives to values from a given namespace\n * @param $namespace String namespace\n */\n public function getBatch($namespace) {\n if (!$this->finalized) $this->autoFinalize();\n $full = $this->getAll();\n if (!isset($full[$namespace])) {\n $this->triggerError('Cannot retrieve undefined namespace ' . htmlspecialchars($namespace),\n E_USER_WARNING);\n return;\n }\n return $full[$namespace];\n }\n\n /**\n * Returns a md5 signature of a segment of the configuration object\n * that uniquely identifies that particular configuration\n * @note Revision is handled specially and is removed from the batch\n * before processing!\n * @param $namespace Namespace to get serial for\n */\n public function getBatchSerial($namespace) {\n if (empty($this->serials[$namespace])) {\n $batch = $this->getBatch($namespace);\n unset($batch['DefinitionRev']);\n $this->serials[$namespace] = md5(serialize($batch));\n }\n return $this->serials[$namespace];\n }\n\n /**\n * Returns a md5 signature for the entire configuration object\n * that uniquely identifies that particular configuration\n */\n public function getSerial() {\n if (empty($this->serial)) {\n $this->serial = md5(serialize($this->getAll()));\n }\n return $this->serial;\n }\n\n /**\n * Retrieves all directives, organized by namespace\n * @warning This is a pretty inefficient function, avoid if you can\n */\n public function getAll() {\n if (!$this->finalized) $this->autoFinalize();\n $ret = array();\n foreach ($this->plist->squash() as $name => $value) {\n list($ns, $key) = explode('.', $name, 2);\n $ret[$ns][$key] = $value;\n }\n return $ret;\n }\n\n /**\n * Sets a value to configuration.\n * @param $key String key\n * @param $value Mixed value\n */\n public function set($key, $value, $a = null) {\n if (strpos($key, '.') === false) {\n $namespace = $key;\n $directive = $value;\n $value = $a;\n $key = \"$key.$directive\";\n $this->triggerError(\"Using deprecated API: use \\$config->set('$key', ...) instead\", E_USER_NOTICE);\n } else {\n list($namespace) = explode('.', $key);\n }\n if ($this->isFinalized('Cannot set directive after finalization')) return;\n if (!isset($this->def->info[$key])) {\n $this->triggerError('Cannot set undefined directive ' . htmlspecialchars($key) . ' to value',\n E_USER_WARNING);\n return;\n }\n $def = $this->def->info[$key];\n\n if (isset($def->isAlias)) {\n if ($this->aliasMode) {\n $this->triggerError('Double-aliases not allowed, please fix '.\n 'ConfigSchema bug with' . $key, E_USER_ERROR);\n return;\n }\n $this->aliasMode = true;\n $this->set($def->key, $value);\n $this->aliasMode = false;\n $this->triggerError(\"$key is an alias, preferred directive name is {$def->key}\", E_USER_NOTICE);\n return;\n }\n\n // Raw type might be negative when using the fully optimized form\n // of stdclass, which indicates allow_null == true\n $rtype = is_int($def) ? $def : $def->type;\n if ($rtype < 0) {\n $type = -$rtype;\n $allow_null = true;\n } else {\n $type = $rtype;\n $allow_null = isset($def->allow_null);\n }\n\n try {\n $value = $this->parser->parse($value, $type, $allow_null);\n } catch (HTMLPurifier_VarParserException $e) {\n $this->triggerError('Value for ' . $key . ' is of invalid type, should be ' . HTMLPurifier_VarParser::getTypeName($type), E_USER_WARNING);\n return;\n }\n if (is_string($value) && is_object($def)) {\n // resolve value alias if defined\n if (isset($def->aliases[$value])) {\n $value = $def->aliases[$value];\n }\n // check to see if the value is allowed\n if (isset($def->allowed) && !isset($def->allowed[$value])) {\n $this->triggerError('Value not supported, valid values are: ' .\n $this->_listify($def->allowed), E_USER_WARNING);\n return;\n }\n }\n $this->plist->set($key, $value);\n\n // reset definitions if the directives they depend on changed\n // this is a very costly process, so it's discouraged\n // with finalization\n if ($namespace == 'HTML' || $namespace == 'CSS' || $namespace == 'URI') {\n $this->definitions[$namespace] = null;\n }\n\n $this->serials[$namespace] = false;\n }\n\n /**\n * Convenience function for error reporting\n */\n private function _listify($lookup) {\n $list = array();\n foreach ($lookup as $name => $b) $list[] = $name;\n return implode(', ', $list);\n }\n\n /**\n * Retrieves object reference to the HTML definition.\n * @param $raw Return a copy that has not been setup yet. Must be\n * called before it's been setup, otherwise won't work.\n */\n public function getHTMLDefinition($raw = false) {\n return $this->getDefinition('HTML', $raw);\n }\n\n /**\n * Retrieves object reference to the CSS definition\n * @param $raw Return a copy that has not been setup yet. Must be\n * called before it's been setup, otherwise won't work.\n */\n public function getCSSDefinition($raw = false) {\n return $this->getDefinition('CSS', $raw);\n }\n\n /**\n * Retrieves a definition\n * @param $type Type of definition: HTML, CSS, etc\n * @param $raw Whether or not definition should be returned raw\n */\n public function getDefinition($type, $raw = false) {\n if (!$this->finalized) $this->autoFinalize();\n // temporarily suspend locks, so we can handle recursive definition calls\n $lock = $this->lock;\n $this->lock = null;\n $factory = HTMLPurifier_DefinitionCacheFactory::instance();\n $cache = $factory->create($type, $this);\n $this->lock = $lock;\n if (!$raw) {\n // see if we can quickly supply a definition\n if (!empty($this->definitions[$type])) {\n if (!$this->definitions[$type]->setup) {\n $this->definitions[$type]->setup($this);\n $cache->set($this->definitions[$type], $this);\n }\n return $this->definitions[$type];\n }\n // memory check missed, try cache\n $this->definitions[$type] = $cache->get($this);\n if ($this->definitions[$type]) {\n // definition in cache, return it\n return $this->definitions[$type];\n }\n } elseif (\n !empty($this->definitions[$type]) &&\n !$this->definitions[$type]->setup\n ) {\n // raw requested, raw in memory, quick return\n return $this->definitions[$type];\n }\n // quick checks failed, let's create the object\n if ($type == 'HTML') {\n $this->definitions[$type] = new HTMLPurifier_HTMLDefinition();\n } elseif ($type == 'CSS') {\n $this->definitions[$type] = new HTMLPurifier_CSSDefinition();\n } elseif ($type == 'URI') {\n $this->definitions[$type] = new HTMLPurifier_URIDefinition();\n } else {\n throw new HTMLPurifier_Exception(\"Definition of $type type not supported\");\n }\n // quick abort if raw\n if ($raw) {\n if (is_null($this->get($type . '.DefinitionID'))) {\n // fatally error out if definition ID not set\n throw new HTMLPurifier_Exception(\"Cannot retrieve raw version without specifying %$type.DefinitionID\");\n }\n return $this->definitions[$type];\n }\n // set it up\n $this->lock = $type;\n $this->definitions[$type]->setup($this);\n $this->lock = null;\n // save in cache\n $cache->set($this->definitions[$type], $this);\n return $this->definitions[$type];\n }\n\n /**\n * Loads configuration values from an array with the following structure:\n * Namespace.Directive => Value\n * @param $config_array Configuration associative array\n */\n public function loadArray($config_array) {\n if ($this->isFinalized('Cannot load directives after finalization')) return;\n foreach ($config_array as $key => $value) {\n $key = str_replace('_', '.', $key);\n if (strpos($key, '.') !== false) {\n $this->set($key, $value);\n } else {\n $namespace = $key;\n $namespace_values = $value;\n foreach ($namespace_values as $directive => $value) {\n $this->set($namespace .'.'. $directive, $value);\n }\n }\n }\n }\n\n /**\n * Returns a list of array(namespace, directive) for all directives\n * that are allowed in a web-form context as per an allowed\n * namespaces/directives list.\n * @param $allowed List of allowed namespaces/directives\n */\n public static function getAllowedDirectivesForForm($allowed, $schema = null) {\n if (!$schema) {\n $schema = HTMLPurifier_ConfigSchema::instance();\n }\n if ($allowed !== true) {\n if (is_string($allowed)) $allowed = array($allowed);\n $allowed_ns = array();\n $allowed_directives = array();\n $blacklisted_directives = array();\n foreach ($allowed as $ns_or_directive) {\n if (strpos($ns_or_directive, '.') !== false) {\n // directive\n if ($ns_or_directive[0] == '-') {\n $blacklisted_directives[substr($ns_or_directive, 1)] = true;\n } else {\n $allowed_directives[$ns_or_directive] = true;\n }\n } else {\n // namespace\n $allowed_ns[$ns_or_directive] = true;\n }\n }\n }\n $ret = array();\n foreach ($schema->info as $key => $def) {\n list($ns, $directive) = explode('.', $key, 2);\n if ($allowed !== true) {\n if (isset($blacklisted_directives[\"$ns.$directive\"])) continue;\n if (!isset($allowed_directives[\"$ns.$directive\"]) && !isset($allowed_ns[$ns])) continue;\n }\n if (isset($def->isAlias)) continue;\n if ($directive == 'DefinitionID' || $directive == 'DefinitionRev') continue;\n $ret[] = array($ns, $directive);\n }\n return $ret;\n }\n\n /**\n * Loads configuration values from $_GET/$_POST that were posted\n * via ConfigForm\n * @param $array $_GET or $_POST array to import\n * @param $index Index/name that the config variables are in\n * @param $allowed List of allowed namespaces/directives\n * @param $mq_fix Boolean whether or not to enable magic quotes fix\n * @param $schema Instance of HTMLPurifier_ConfigSchema to use, if not global copy\n */\n public static function loadArrayFromForm($array, $index = false, $allowed = true, $mq_fix = true, $schema = null) {\n $ret = HTMLPurifier_Config::prepareArrayFromForm($array, $index, $allowed, $mq_fix, $schema);\n $config = HTMLPurifier_Config::create($ret, $schema);\n return $config;\n }\n\n /**\n * Merges in configuration values from $_GET/$_POST to object. NOT STATIC.\n * @note Same parameters as loadArrayFromForm\n */\n public function mergeArrayFromForm($array, $index = false, $allowed = true, $mq_fix = true) {\n $ret = HTMLPurifier_Config::prepareArrayFromForm($array, $index, $allowed, $mq_fix, $this->def);\n $this->loadArray($ret);\n }\n\n /**\n * Prepares an array from a form into something usable for the more\n * strict parts of HTMLPurifier_Config\n */\n public static function prepareArrayFromForm($array, $index = false, $allowed = true, $mq_fix = true, $schema = null) {\n if ($index !== false) $array = (isset($array[$index]) && is_array($array[$index])) ? $array[$index] : array();\n $mq = $mq_fix && function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc();\n\n $allowed = HTMLPurifier_Config::getAllowedDirectivesForForm($allowed, $schema);\n $ret = array();\n foreach ($allowed as $key) {\n list($ns, $directive) = $key;\n $skey = \"$ns.$directive\";\n if (!empty($array[\"Null_$skey\"])) {\n $ret[$ns][$directive] = null;\n continue;\n }\n if (!isset($array[$skey])) continue;\n $value = $mq ? stripslashes($array[$skey]) : $array[$skey];\n $ret[$ns][$directive] = $value;\n }\n return $ret;\n }\n\n /**\n * Loads configuration values from an ini file\n * @param $filename Name of ini file\n */\n public function loadIni($filename) {\n if ($this->isFinalized('Cannot load directives after finalization')) return;\n $array = parse_ini_file($filename, true);\n $this->loadArray($array);\n }\n\n /**\n * Checks whether or not the configuration object is finalized.\n * @param $error String error message, or false for no error\n */\n public function isFinalized($error = false) {\n if ($this->finalized && $error) {\n $this->triggerError($error, E_USER_ERROR);\n }\n return $this->finalized;\n }\n\n /**\n * Finalizes configuration only if auto finalize is on and not\n * already finalized\n */\n public function autoFinalize() {\n if ($this->autoFinalize) {\n $this->finalize();\n } else {\n $this->plist->squash(true);\n }\n }\n\n /**\n * Finalizes a configuration object, prohibiting further change\n */\n public function finalize() {\n $this->finalized = true;\n unset($this->parser);\n }\n\n /**\n * Produces a nicely formatted error message by supplying the\n * stack frame information from two levels up and OUTSIDE of\n * HTMLPurifier_Config.\n */\n protected function triggerError($msg, $no) {\n // determine previous stack frame\n $backtrace = debug_backtrace();\n if ($this->chatty && isset($backtrace[1])) {\n $frame = $backtrace[1];\n $extra = \" on line {$frame['line']} in file {$frame['file']}\";\n } else {\n $extra = '';\n }\n trigger_error($msg . $extra, $no);\n }\n\n /**\n * Returns a serialized form of the configuration object that can\n * be reconstituted.\n */\n public function serialize() {\n $this->getDefinition('HTML');\n $this->getDefinition('CSS');\n $this->getDefinition('URI');\n return serialize($this);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Builder/ConfigSchema.php",
"content": "directives as $d) {\n $schema->add(\n $d->id->key,\n $d->default,\n $d->type,\n $d->typeAllowsNull\n );\n if ($d->allowed !== null) {\n $schema->addAllowedValues(\n $d->id->key,\n $d->allowed\n );\n }\n foreach ($d->aliases as $alias) {\n $schema->addAlias(\n $alias->key,\n $d->id->key\n );\n }\n if ($d->valueAliases !== null) {\n $schema->addValueAliases(\n $d->id->key,\n $d->valueAliases\n );\n }\n }\n $schema->postProcess();\n return $schema;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Builder/Xml.php",
"content": "startElement('div');\n\n $purifier = HTMLPurifier::getInstance();\n $html = $purifier->purify($html);\n $this->writeAttribute('xmlns', 'http://www.w3.org/1999/xhtml');\n $this->writeRaw($html);\n\n $this->endElement(); // div\n }\n\n protected function export($var) {\n if ($var === array()) return 'array()';\n return var_export($var, true);\n }\n\n public function build($interchange) {\n // global access, only use as last resort\n $this->interchange = $interchange;\n\n $this->setIndent(true);\n $this->startDocument('1.0', 'UTF-8');\n $this->startElement('configdoc');\n $this->writeElement('title', $interchange->name);\n\n foreach ($interchange->directives as $directive) {\n $this->buildDirective($directive);\n }\n\n if ($this->namespace) $this->endElement(); // namespace\n\n $this->endElement(); // configdoc\n $this->flush();\n }\n\n public function buildDirective($directive) {\n\n // Kludge, although I suppose having a notion of a \"root namespace\"\n // certainly makes things look nicer when documentation is built.\n // Depends on things being sorted.\n if (!$this->namespace || $this->namespace !== $directive->id->getRootNamespace()) {\n if ($this->namespace) $this->endElement(); // namespace\n $this->namespace = $directive->id->getRootNamespace();\n $this->startElement('namespace');\n $this->writeAttribute('id', $this->namespace);\n $this->writeElement('name', $this->namespace);\n }\n\n $this->startElement('directive');\n $this->writeAttribute('id', $directive->id->toString());\n\n $this->writeElement('name', $directive->id->getDirective());\n\n $this->startElement('aliases');\n foreach ($directive->aliases as $alias) $this->writeElement('alias', $alias->toString());\n $this->endElement(); // aliases\n\n $this->startElement('constraints');\n if ($directive->version) $this->writeElement('version', $directive->version);\n $this->startElement('type');\n if ($directive->typeAllowsNull) $this->writeAttribute('allow-null', 'yes');\n $this->text($directive->type);\n $this->endElement(); // type\n if ($directive->allowed) {\n $this->startElement('allowed');\n foreach ($directive->allowed as $value => $x) $this->writeElement('value', $value);\n $this->endElement(); // allowed\n }\n $this->writeElement('default', $this->export($directive->default));\n $this->writeAttribute('xml:space', 'preserve');\n if ($directive->external) {\n $this->startElement('external');\n foreach ($directive->external as $project) $this->writeElement('project', $project);\n $this->endElement();\n }\n $this->endElement(); // constraints\n\n if ($directive->deprecatedVersion) {\n $this->startElement('deprecated');\n $this->writeElement('version', $directive->deprecatedVersion);\n $this->writeElement('use', $directive->deprecatedUse->toString());\n $this->endElement(); // deprecated\n }\n\n $this->startElement('description');\n $this->writeHTMLDiv($directive->description);\n $this->endElement(); // description\n\n $this->endElement(); // directive\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Exception.php",
"content": " true).\n * Null if all values are allowed.\n */\n public $allowed;\n\n /**\n * List of aliases for the directive,\n * e.g. array(new HTMLPurifier_ConfigSchema_Interchange_Id('Ns', 'Dir'))).\n */\n public $aliases = array();\n\n /**\n * Hash of value aliases, e.g. array('alt' => 'real'). Null if value\n * aliasing is disabled (necessary for non-scalar types).\n */\n public $valueAliases;\n\n /**\n * Version of HTML Purifier the directive was introduced, e.g. '1.3.1'.\n * Null if the directive has always existed.\n */\n public $version;\n\n /**\n * ID of directive that supercedes this old directive, is an instance\n * of HTMLPurifier_ConfigSchema_Interchange_Id. Null if not deprecated.\n */\n public $deprecatedUse;\n\n /**\n * Version of HTML Purifier this directive was deprecated. Null if not\n * deprecated.\n */\n public $deprecatedVersion;\n\n /**\n * List of external projects this directive depends on, e.g. array('CSSTidy').\n */\n public $external = array();\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Interchange/Id.php",
"content": "key = $key;\n }\n\n /**\n * @warning This is NOT magic, to ensure that people don't abuse SPL and\n * cause problems for PHP 5.0 support.\n */\n public function toString() {\n return $this->key;\n }\n\n public function getRootNamespace() {\n return substr($this->key, 0, strpos($this->key, \".\"));\n }\n\n public function getDirective() {\n return substr($this->key, strpos($this->key, \".\") + 1);\n }\n\n public static function make($id) {\n return new HTMLPurifier_ConfigSchema_Interchange_Id($id);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Interchange.php",
"content": " array(directive info)\n */\n public $directives = array();\n\n /**\n * Adds a directive array to $directives\n */\n public function addDirective($directive) {\n if (isset($this->directives[$i = $directive->id->toString()])) {\n throw new HTMLPurifier_ConfigSchema_Exception(\"Cannot redefine directive '$i'\");\n }\n $this->directives[$i] = $directive;\n }\n\n /**\n * Convenience function to perform standard validation. Throws exception\n * on failed validation.\n */\n public function validate() {\n $validator = new HTMLPurifier_ConfigSchema_Validator();\n return $validator->validate($this);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/InterchangeBuilder.php",
"content": "varParser = $varParser ? $varParser : new HTMLPurifier_VarParser_Native();\n }\n\n public static function buildFromDirectory($dir = null) {\n $builder = new HTMLPurifier_ConfigSchema_InterchangeBuilder();\n $interchange = new HTMLPurifier_ConfigSchema_Interchange();\n return $builder->buildDir($interchange, $dir);\n }\n\n public function buildDir($interchange, $dir = null) {\n if (!$dir) $dir = HTMLPURIFIER_PREFIX . '/HTMLPurifier/ConfigSchema/schema';\n if (file_exists($dir . '/info.ini')) {\n $info = parse_ini_file($dir . '/info.ini');\n $interchange->name = $info['name'];\n }\n\n $files = array();\n $dh = opendir($dir);\n while (false !== ($file = readdir($dh))) {\n if (!$file || $file[0] == '.' || strrchr($file, '.') !== '.txt') {\n continue;\n }\n $files[] = $file;\n }\n closedir($dh);\n\n sort($files);\n foreach ($files as $file) {\n $this->buildFile($interchange, $dir . '/' . $file);\n }\n\n return $interchange;\n }\n\n public function buildFile($interchange, $file) {\n $parser = new HTMLPurifier_StringHashParser();\n $this->build(\n $interchange,\n new HTMLPurifier_StringHash( $parser->parseFile($file) )\n );\n }\n\n /**\n * Builds an interchange object based on a hash.\n * @param $interchange HTMLPurifier_ConfigSchema_Interchange object to build\n * @param $hash HTMLPurifier_ConfigSchema_StringHash source data\n */\n public function build($interchange, $hash) {\n if (!$hash instanceof HTMLPurifier_StringHash) {\n $hash = new HTMLPurifier_StringHash($hash);\n }\n if (!isset($hash['ID'])) {\n throw new HTMLPurifier_ConfigSchema_Exception('Hash does not have any ID');\n }\n if (strpos($hash['ID'], '.') === false) {\n if (count($hash) == 2 && isset($hash['DESCRIPTION'])) {\n $hash->offsetGet('DESCRIPTION'); // prevent complaining\n } else {\n throw new HTMLPurifier_ConfigSchema_Exception('All directives must have a namespace');\n }\n } else {\n $this->buildDirective($interchange, $hash);\n }\n $this->_findUnused($hash);\n }\n\n public function buildDirective($interchange, $hash) {\n $directive = new HTMLPurifier_ConfigSchema_Interchange_Directive();\n\n // These are required elements:\n $directive->id = $this->id($hash->offsetGet('ID'));\n $id = $directive->id->toString(); // convenience\n\n if (isset($hash['TYPE'])) {\n $type = explode('/', $hash->offsetGet('TYPE'));\n if (isset($type[1])) $directive->typeAllowsNull = true;\n $directive->type = $type[0];\n } else {\n throw new HTMLPurifier_ConfigSchema_Exception(\"TYPE in directive hash '$id' not defined\");\n }\n\n if (isset($hash['DEFAULT'])) {\n try {\n $directive->default = $this->varParser->parse($hash->offsetGet('DEFAULT'), $directive->type, $directive->typeAllowsNull);\n } catch (HTMLPurifier_VarParserException $e) {\n throw new HTMLPurifier_ConfigSchema_Exception($e->getMessage() . \" in DEFAULT in directive hash '$id'\");\n }\n }\n\n if (isset($hash['DESCRIPTION'])) {\n $directive->description = $hash->offsetGet('DESCRIPTION');\n }\n\n if (isset($hash['ALLOWED'])) {\n $directive->allowed = $this->lookup($this->evalArray($hash->offsetGet('ALLOWED')));\n }\n\n if (isset($hash['VALUE-ALIASES'])) {\n $directive->valueAliases = $this->evalArray($hash->offsetGet('VALUE-ALIASES'));\n }\n\n if (isset($hash['ALIASES'])) {\n $raw_aliases = trim($hash->offsetGet('ALIASES'));\n $aliases = preg_split('/\\s*,\\s*/', $raw_aliases);\n foreach ($aliases as $alias) {\n $directive->aliases[] = $this->id($alias);\n }\n }\n\n if (isset($hash['VERSION'])) {\n $directive->version = $hash->offsetGet('VERSION');\n }\n\n if (isset($hash['DEPRECATED-USE'])) {\n $directive->deprecatedUse = $this->id($hash->offsetGet('DEPRECATED-USE'));\n }\n\n if (isset($hash['DEPRECATED-VERSION'])) {\n $directive->deprecatedVersion = $hash->offsetGet('DEPRECATED-VERSION');\n }\n\n if (isset($hash['EXTERNAL'])) {\n $directive->external = preg_split('/\\s*,\\s*/', trim($hash->offsetGet('EXTERNAL')));\n }\n\n $interchange->addDirective($directive);\n }\n\n /**\n * Evaluates an array PHP code string without array() wrapper\n */\n protected function evalArray($contents) {\n return eval('return array('. $contents .');');\n }\n\n /**\n * Converts an array list into a lookup array.\n */\n protected function lookup($array) {\n $ret = array();\n foreach ($array as $val) $ret[$val] = true;\n return $ret;\n }\n\n /**\n * Convenience function that creates an HTMLPurifier_ConfigSchema_Interchange_Id\n * object based on a string Id.\n */\n protected function id($id) {\n return HTMLPurifier_ConfigSchema_Interchange_Id::make($id);\n }\n\n /**\n * Triggers errors for any unused keys passed in the hash; such keys\n * may indicate typos, missing values, etc.\n * @param $hash Instance of ConfigSchema_StringHash to check.\n */\n protected function _findUnused($hash) {\n $accessed = $hash->getAccessed();\n foreach ($hash as $k => $v) {\n if (!isset($accessed[$k])) {\n trigger_error(\"String hash key '$k' not used by builder\", E_USER_NOTICE);\n }\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/Validator.php",
"content": "parser = new HTMLPurifier_VarParser();\n }\n\n /**\n * Validates a fully-formed interchange object. Throws an\n * HTMLPurifier_ConfigSchema_Exception if there's a problem.\n */\n public function validate($interchange) {\n $this->interchange = $interchange;\n $this->aliases = array();\n // PHP is a bit lax with integer <=> string conversions in\n // arrays, so we don't use the identical !== comparison\n foreach ($interchange->directives as $i => $directive) {\n $id = $directive->id->toString();\n if ($i != $id) $this->error(false, \"Integrity violation: key '$i' does not match internal id '$id'\");\n $this->validateDirective($directive);\n }\n return true;\n }\n\n /**\n * Validates a HTMLPurifier_ConfigSchema_Interchange_Id object.\n */\n public function validateId($id) {\n $id_string = $id->toString();\n $this->context[] = \"id '$id_string'\";\n if (!$id instanceof HTMLPurifier_ConfigSchema_Interchange_Id) {\n // handled by InterchangeBuilder\n $this->error(false, 'is not an instance of HTMLPurifier_ConfigSchema_Interchange_Id');\n }\n // keys are now unconstrained (we might want to narrow down to A-Za-z0-9.)\n // we probably should check that it has at least one namespace\n $this->with($id, 'key')\n ->assertNotEmpty()\n ->assertIsString(); // implicit assertIsString handled by InterchangeBuilder\n array_pop($this->context);\n }\n\n /**\n * Validates a HTMLPurifier_ConfigSchema_Interchange_Directive object.\n */\n public function validateDirective($d) {\n $id = $d->id->toString();\n $this->context[] = \"directive '$id'\";\n $this->validateId($d->id);\n\n $this->with($d, 'description')\n ->assertNotEmpty();\n\n // BEGIN - handled by InterchangeBuilder\n $this->with($d, 'type')\n ->assertNotEmpty();\n $this->with($d, 'typeAllowsNull')\n ->assertIsBool();\n try {\n // This also tests validity of $d->type\n $this->parser->parse($d->default, $d->type, $d->typeAllowsNull);\n } catch (HTMLPurifier_VarParserException $e) {\n $this->error('default', 'had error: ' . $e->getMessage());\n }\n // END - handled by InterchangeBuilder\n\n if (!is_null($d->allowed) || !empty($d->valueAliases)) {\n // allowed and valueAliases require that we be dealing with\n // strings, so check for that early.\n $d_int = HTMLPurifier_VarParser::$types[$d->type];\n if (!isset(HTMLPurifier_VarParser::$stringTypes[$d_int])) {\n $this->error('type', 'must be a string type when used with allowed or value aliases');\n }\n }\n\n $this->validateDirectiveAllowed($d);\n $this->validateDirectiveValueAliases($d);\n $this->validateDirectiveAliases($d);\n\n array_pop($this->context);\n }\n\n /**\n * Extra validation if $allowed member variable of\n * HTMLPurifier_ConfigSchema_Interchange_Directive is defined.\n */\n public function validateDirectiveAllowed($d) {\n if (is_null($d->allowed)) return;\n $this->with($d, 'allowed')\n ->assertNotEmpty()\n ->assertIsLookup(); // handled by InterchangeBuilder\n if (is_string($d->default) && !isset($d->allowed[$d->default])) {\n $this->error('default', 'must be an allowed value');\n }\n $this->context[] = 'allowed';\n foreach ($d->allowed as $val => $x) {\n if (!is_string($val)) $this->error(\"value $val\", 'must be a string');\n }\n array_pop($this->context);\n }\n\n /**\n * Extra validation if $valueAliases member variable of\n * HTMLPurifier_ConfigSchema_Interchange_Directive is defined.\n */\n public function validateDirectiveValueAliases($d) {\n if (is_null($d->valueAliases)) return;\n $this->with($d, 'valueAliases')\n ->assertIsArray(); // handled by InterchangeBuilder\n $this->context[] = 'valueAliases';\n foreach ($d->valueAliases as $alias => $real) {\n if (!is_string($alias)) $this->error(\"alias $alias\", 'must be a string');\n if (!is_string($real)) $this->error(\"alias target $real from alias '$alias'\", 'must be a string');\n if ($alias === $real) {\n $this->error(\"alias '$alias'\", \"must not be an alias to itself\");\n }\n }\n if (!is_null($d->allowed)) {\n foreach ($d->valueAliases as $alias => $real) {\n if (isset($d->allowed[$alias])) {\n $this->error(\"alias '$alias'\", 'must not be an allowed value');\n } elseif (!isset($d->allowed[$real])) {\n $this->error(\"alias '$alias'\", 'must be an alias to an allowed value');\n }\n }\n }\n array_pop($this->context);\n }\n\n /**\n * Extra validation if $aliases member variable of\n * HTMLPurifier_ConfigSchema_Interchange_Directive is defined.\n */\n public function validateDirectiveAliases($d) {\n $this->with($d, 'aliases')\n ->assertIsArray(); // handled by InterchangeBuilder\n $this->context[] = 'aliases';\n foreach ($d->aliases as $alias) {\n $this->validateId($alias);\n $s = $alias->toString();\n if (isset($this->interchange->directives[$s])) {\n $this->error(\"alias '$s'\", 'collides with another directive');\n }\n if (isset($this->aliases[$s])) {\n $other_directive = $this->aliases[$s];\n $this->error(\"alias '$s'\", \"collides with alias for directive '$other_directive'\");\n }\n $this->aliases[$s] = $d->id->toString();\n }\n array_pop($this->context);\n }\n\n // protected helper functions\n\n /**\n * Convenience function for generating HTMLPurifier_ConfigSchema_ValidatorAtom\n * for validating simple member variables of objects.\n */\n protected function with($obj, $member) {\n return new HTMLPurifier_ConfigSchema_ValidatorAtom($this->getFormattedContext(), $obj, $member);\n }\n\n /**\n * Emits an error, providing helpful context.\n */\n protected function error($target, $msg) {\n if ($target !== false) $prefix = ucfirst($target) . ' in ' . $this->getFormattedContext();\n else $prefix = ucfirst($this->getFormattedContext());\n throw new HTMLPurifier_ConfigSchema_Exception(trim($prefix . ' ' . $msg));\n }\n\n /**\n * Returns a formatted context string.\n */\n protected function getFormattedContext() {\n return implode(' in ', array_reverse($this->context));\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/ValidatorAtom.php",
"content": "context = $context;\n $this->obj = $obj;\n $this->member = $member;\n $this->contents =& $obj->$member;\n }\n\n public function assertIsString() {\n if (!is_string($this->contents)) $this->error('must be a string');\n return $this;\n }\n\n public function assertIsBool() {\n if (!is_bool($this->contents)) $this->error('must be a boolean');\n return $this;\n }\n\n public function assertIsArray() {\n if (!is_array($this->contents)) $this->error('must be an array');\n return $this;\n }\n\n public function assertNotNull() {\n if ($this->contents === null) $this->error('must not be null');\n return $this;\n }\n\n public function assertAlnum() {\n $this->assertIsString();\n if (!ctype_alnum($this->contents)) $this->error('must be alphanumeric');\n return $this;\n }\n\n public function assertNotEmpty() {\n if (empty($this->contents)) $this->error('must not be empty');\n return $this;\n }\n\n public function assertIsLookup() {\n $this->assertIsArray();\n foreach ($this->contents as $v) {\n if ($v !== true) $this->error('must be a lookup array');\n }\n return $this;\n }\n\n protected function error($msg) {\n throw new HTMLPurifier_ConfigSchema_Exception(ucfirst($this->member) . ' in ' . $this->context . ' ' . $msg);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.AllowedClasses.txt",
"content": "Attr.AllowedClasses\nTYPE: lookup/null\nVERSION: 4.0.0\nDEFAULT: null\n--DESCRIPTION--\nList of allowed class values in the class attribute. By default, this is null,\nwhich means all classes are allowed.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.AllowedFrameTargets.txt",
"content": "Attr.AllowedFrameTargets\nTYPE: lookup\nDEFAULT: array()\n--DESCRIPTION--\nLookup table of all allowed link frame targets. Some commonly used link\ntargets include _blank, _self, _parent and _top. Values should be\nlowercase, as validation will be done in a case-sensitive manner despite\nW3C's recommendation. XHTML 1.0 Strict does not permit the target attribute\nso this directive will have no effect in that doctype. XHTML 1.1 does not\nenable the Target module by default, you will have to manually enable it\n(see the module documentation for more details.)\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.AllowedRel.txt",
"content": "Attr.AllowedRel\nTYPE: lookup\nVERSION: 1.6.0\nDEFAULT: array()\n--DESCRIPTION--\nList of allowed forward document relationships in the rel attribute. Common\nvalues may be nofollow or print. By default, this is empty, meaning that no\ndocument relationships are allowed.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.AllowedRev.txt",
"content": "Attr.AllowedRev\nTYPE: lookup\nVERSION: 1.6.0\nDEFAULT: array()\n--DESCRIPTION--\nList of allowed reverse document relationships in the rev attribute. This\nattribute is a bit of an edge-case; if you don't know what it is for, stay\naway.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.ClassUseCDATA.txt",
"content": "Attr.ClassUseCDATA\nTYPE: bool/null\nDEFAULT: null\nVERSION: 4.0.0\n--DESCRIPTION--\nIf null, class will auto-detect the doctype and, if matching XHTML 1.1 or\nXHTML 2.0, will use the restrictive NMTOKENS specification of class. Otherwise,\nit will use a relaxed CDATA definition. If true, the relaxed CDATA definition\nis forced; if false, the NMTOKENS definition is forced. To get behavior\nof HTML Purifier prior to 4.0.0, set this directive to false.\n\nSome rational behind the auto-detection:\nin previous versions of HTML Purifier, it was assumed that the form of\nclass was NMTOKENS, as specified by the XHTML Modularization (representing\nXHTML 1.1 and XHTML 2.0). The DTDs for HTML 4.01 and XHTML 1.0, however\nspecify class as CDATA. HTML 5 effectively defines it as CDATA, but\nwith the additional constraint that each name should be unique (this is not\nexplicitly outlined in previous specifications).\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.DefaultImageAlt.txt",
"content": "Attr.DefaultImageAlt\nTYPE: string/null\nDEFAULT: null\nVERSION: 3.2.0\n--DESCRIPTION--\nThis is the content of the alt tag of an image if the user had not\npreviously specified an alt attribute. This applies to all images without\na valid alt attribute, as opposed to %Attr.DefaultInvalidImageAlt, which\nonly applies to invalid images, and overrides in the case of an invalid image.\nDefault behavior with null is to use the basename of the src tag for the alt.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.DefaultInvalidImage.txt",
"content": "Attr.DefaultInvalidImage\nTYPE: string\nDEFAULT: ''\n--DESCRIPTION--\nThis is the default image an img tag will be pointed to if it does not have\na valid src attribute. In future versions, we may allow the image tag to\nbe removed completely, but due to design issues, this is not possible right\nnow.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.DefaultInvalidImageAlt.txt",
"content": "Attr.DefaultInvalidImageAlt\nTYPE: string\nDEFAULT: 'Invalid image'\n--DESCRIPTION--\nThis is the content of the alt tag of an invalid image if the user had not\npreviously specified an alt attribute. It has no effect when the image is\nvalid but there was no alt attribute present.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.DefaultTextDir.txt",
"content": "Attr.DefaultTextDir\nTYPE: string\nDEFAULT: 'ltr'\n--DESCRIPTION--\nDefines the default text direction (ltr or rtl) of the document being\nparsed. This generally is the same as the value of the dir attribute in\nHTML, or ltr if that is not specified.\n--ALLOWED--\n'ltr', 'rtl'\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.EnableID.txt",
"content": "Attr.EnableID\nTYPE: bool\nDEFAULT: false\nVERSION: 1.2.0\n--DESCRIPTION--\nAllows the ID attribute in HTML. This is disabled by default due to the\nfact that without proper configuration user input can easily break the\nvalidation of a webpage by specifying an ID that is already on the\nsurrounding HTML. If you don't mind throwing caution to the wind, enable\nthis directive, but I strongly recommend you also consider blacklisting IDs\nyou use (%Attr.IDBlacklist) or prefixing all user supplied IDs\n(%Attr.IDPrefix). When set to true HTML Purifier reverts to the behavior of\npre-1.2.0 versions.\n--ALIASES--\nHTML.EnableAttrID\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.ForbiddenClasses.txt",
"content": "Attr.ForbiddenClasses\nTYPE: lookup\nVERSION: 4.0.0\nDEFAULT: array()\n--DESCRIPTION--\nList of forbidden class values in the class attribute. By default, this is\nempty, which means that no classes are forbidden. See also %Attr.AllowedClasses.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.IDBlacklist.txt",
"content": "Attr.IDBlacklist\nTYPE: list\nDEFAULT: array()\nDESCRIPTION: Array of IDs not allowed in the document.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.IDBlacklistRegexp.txt",
"content": "Attr.IDBlacklistRegexp\nTYPE: string/null\nVERSION: 1.6.0\nDEFAULT: NULL\n--DESCRIPTION--\nPCRE regular expression to be matched against all IDs. If the expression is\nmatches, the ID is rejected. Use this with care: may cause significant\ndegradation. ID matching is done after all other validation.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.IDPrefix.txt",
"content": "Attr.IDPrefix\nTYPE: string\nVERSION: 1.2.0\nDEFAULT: ''\n--DESCRIPTION--\nString to prefix to IDs. If you have no idea what IDs your pages may use,\nyou may opt to simply add a prefix to all user-submitted ID attributes so\nthat they are still usable, but will not conflict with core page IDs.\nExample: setting the directive to 'user_' will result in a user submitted\n'foo' to become 'user_foo' Be sure to set %HTML.EnableAttrID to true\nbefore using this.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Attr.IDPrefixLocal.txt",
"content": "Attr.IDPrefixLocal\nTYPE: string\nVERSION: 1.2.0\nDEFAULT: ''\n--DESCRIPTION--\nTemporary prefix for IDs used in conjunction with %Attr.IDPrefix. If you\nneed to allow multiple sets of user content on web page, you may need to\nhave a seperate prefix that changes with each iteration. This way,\nseperately submitted user content displayed on the same page doesn't\nclobber each other. Ideal values are unique identifiers for the content it\nrepresents (i.e. the id of the row in the database). Be sure to add a\nseperator (like an underscore) at the end. Warning: this directive will\nnot work unless %Attr.IDPrefix is set to a non-empty value!\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.AutoParagraph.txt",
"content": "AutoFormat.AutoParagraph\nTYPE: bool\nVERSION: 2.0.1\nDEFAULT: false\n--DESCRIPTION--\n\n
\n This directive turns on auto-paragraphing, where double newlines are\n converted in to paragraphs whenever possible. Auto-paragraphing:\n
\n\n - Always applies to inline elements or text in the root node,
\n - Applies to inline elements or text with double newlines in nodes\n that allow paragraph tags,
\n - Applies to double newlines in paragraph tags
\n
\n\n p tags must be allowed for this directive to take effect.\n We do not use br tags for paragraphing, as that is\n semantically incorrect.\n
\n\n To prevent auto-paragraphing as a content-producer, refrain from using\n double-newlines except to specify a new paragraph or in contexts where\n it has special meaning (whitespace usually has no meaning except in\n tags like pre, so this should not be difficult.) To prevent\n the paragraphing of inline text adjacent to block elements, wrap them\n in div tags (the behavior is slightly different outside of\n the root node.)\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.Custom.txt",
"content": "AutoFormat.Custom\nTYPE: list\nVERSION: 2.0.1\nDEFAULT: array()\n--DESCRIPTION--\n\n\n This directive can be used to add custom auto-format injectors.\n Specify an array of injector names (class name minus the prefix)\n or concrete implementations. Injector class must exist.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.DisplayLinkURI.txt",
"content": "AutoFormat.DisplayLinkURI\nTYPE: bool\nVERSION: 3.2.0\nDEFAULT: false\n--DESCRIPTION--\n\n This directive turns on the in-text display of URIs in <a> tags, and disables\n those links. For example, example becomes\n example (http://example.com).\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.Linkify.txt",
"content": "AutoFormat.Linkify\nTYPE: bool\nVERSION: 2.0.1\nDEFAULT: false\n--DESCRIPTION--\n\n\n This directive turns on linkification, auto-linking http, ftp and\n https URLs. a tags with the href attribute\n must be allowed.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.PurifierLinkify.DocURL.txt",
"content": "AutoFormat.PurifierLinkify.DocURL\nTYPE: string\nVERSION: 2.0.1\nDEFAULT: '#%s'\nALIASES: AutoFormatParam.PurifierLinkifyDocURL\n--DESCRIPTION--\n\n Location of configuration documentation to link to, let %s substitute\n into the configuration's namespace and directive names sans the percent\n sign.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.PurifierLinkify.txt",
"content": "AutoFormat.PurifierLinkify\nTYPE: bool\nVERSION: 2.0.1\nDEFAULT: false\n--DESCRIPTION--\n\n\n Internal auto-formatter that converts configuration directives in\n syntax %Namespace.Directive to links. a tags\n with the href attribute must be allowed.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.RemoveEmpty.RemoveNbsp.Exceptions.txt",
"content": "AutoFormat.RemoveEmpty.RemoveNbsp.Exceptions\nTYPE: lookup\nVERSION: 4.0.0\nDEFAULT: array('td' => true, 'th' => true)\n--DESCRIPTION--\n\n When %AutoFormat.RemoveEmpty and %AutoFormat.RemoveEmpty.RemoveNbsp\n are enabled, this directive defines what HTML elements should not be\n removede if they have only a non-breaking space in them.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.RemoveEmpty.RemoveNbsp.txt",
"content": "AutoFormat.RemoveEmpty.RemoveNbsp\nTYPE: bool\nVERSION: 4.0.0\nDEFAULT: false\n--DESCRIPTION--\n\n When enabled, HTML Purifier will treat any elements that contain only\n non-breaking spaces as well as regular whitespace as empty, and remove\n them when %AutoForamt.RemoveEmpty is enabled.\n
\n\n See %AutoFormat.RemoveEmpty.RemoveNbsp.Exceptions for a list of elements\n that don't have this behavior applied to them.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.RemoveEmpty.txt",
"content": "AutoFormat.RemoveEmpty\nTYPE: bool\nVERSION: 3.2.0\nDEFAULT: false\n--DESCRIPTION--\n\n When enabled, HTML Purifier will attempt to remove empty elements that\n contribute no semantic information to the document. The following types\n of nodes will be removed:\n
\n- \n Tags with no attributes and no content, and that are not empty\n elements (remove
<a></a> but not\n <br />), and\n \n - \n Tags with no content, except for:
\n - The
colgroup element, or \n - \n Elements with the
id or name attribute,\n when those attributes are permitted on those elements.\n \n
\n
\n\n Please be very careful when using this functionality; while it may not\n seem that empty elements contain useful information, they can alter the\n layout of a document given appropriate styling. This directive is most\n useful when you are processing machine-generated HTML, please avoid using\n it on regular user HTML.\n
\n\n Elements that contain only whitespace will be treated as empty. Non-breaking\n spaces, however, do not count as whitespace. See\n %AutoFormat.RemoveEmpty.RemoveNbsp for alternate behavior.\n
\n\n This algorithm is not perfect; you may still notice some empty tags,\n particularly if a node had elements, but those elements were later removed\n because they were not permitted in that context, or tags that, after\n being auto-closed by another tag, where empty. This is for safety reasons\n to prevent clever code from breaking validation. The general rule of thumb:\n if a tag looked empty on the way in, it will get removed; if HTML Purifier\n made it empty, it will stay.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.AllowImportant.txt",
"content": "CSS.AllowImportant\nTYPE: bool\nDEFAULT: false\nVERSION: 3.1.0\n--DESCRIPTION--\nThis parameter determines whether or not !important cascade modifiers should\nbe allowed in user CSS. If false, !important will stripped.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.AllowTricky.txt",
"content": "CSS.AllowTricky\nTYPE: bool\nDEFAULT: false\nVERSION: 3.1.0\n--DESCRIPTION--\nThis parameter determines whether or not to allow \"tricky\" CSS properties and\nvalues. Tricky CSS properties/values can drastically modify page layout or\nbe used for deceptive practices but do not directly constitute a security risk.\nFor example, display:none; is considered a tricky property that\nwill only be allowed if this directive is set to true.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.AllowedProperties.txt",
"content": "CSS.AllowedProperties\nTYPE: lookup/null\nVERSION: 3.1.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n If HTML Purifier's style attributes set is unsatisfactory for your needs,\n you can overload it with your own list of tags to allow. Note that this\n method is subtractive: it does its job by taking away from HTML Purifier\n usual feature set, so you cannot add an attribute that HTML Purifier never\n supported in the first place.\n
\n\n Warning: If another directive conflicts with the\n elements here, that directive will win and override.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.DefinitionRev.txt",
"content": "CSS.DefinitionRev\nTYPE: int\nVERSION: 2.0.0\nDEFAULT: 1\n--DESCRIPTION--\n\n\n Revision identifier for your custom definition. See\n %HTML.DefinitionRev for details.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.MaxImgLength.txt",
"content": "CSS.MaxImgLength\nTYPE: string/null\nDEFAULT: '1200px'\nVERSION: 3.1.1\n--DESCRIPTION--\n\n This parameter sets the maximum allowed length on img tags,\n effectively the width and height properties.\n Only absolute units of measurement (in, pt, pc, mm, cm) and pixels (px) are allowed. This is\n in place to prevent imagecrash attacks, disable with null at your own risk.\n This directive is similar to %HTML.MaxImgLength, and both should be\n concurrently edited, although there are\n subtle differences in the input format (the CSS max is a number with\n a unit).\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/CSS.Proprietary.txt",
"content": "CSS.Proprietary\nTYPE: bool\nVERSION: 3.0.0\nDEFAULT: false\n--DESCRIPTION--\n\n\n Whether or not to allow safe, proprietary CSS values.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Cache.DefinitionImpl.txt",
"content": "Cache.DefinitionImpl\nTYPE: string/null\nVERSION: 2.0.0\nDEFAULT: 'Serializer'\n--DESCRIPTION--\n\nThis directive defines which method to use when caching definitions,\nthe complex data-type that makes HTML Purifier tick. Set to null\nto disable caching (not recommended, as you will see a definite\nperformance degradation).\n\n--ALIASES--\nCore.DefinitionCache\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Cache.SerializerPath.txt",
"content": "Cache.SerializerPath\nTYPE: string/null\nVERSION: 2.0.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n Absolute path with no trailing slash to store serialized definitions in.\n Default is within the\n HTML Purifier library inside DefinitionCache/Serializer. This\n path must be writable by the webserver.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.AggressivelyFixLt.txt",
"content": "Core.AggressivelyFixLt\nTYPE: bool\nVERSION: 2.1.0\nDEFAULT: true\n--DESCRIPTION--\n\n This directive enables aggressive pre-filter fixes HTML Purifier can\n perform in order to ensure that open angled-brackets do not get killed\n during parsing stage. Enabling this will result in two preg_replace_callback\n calls and at least two preg_replace calls for every HTML document parsed;\n if your users make very well-formed HTML, you can set this directive false.\n This has no effect when DirectLex is used.\n
\n\n Notice: This directive's default turned from false to true\n in HTML Purifier 3.2.0.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.CollectErrors.txt",
"content": "Core.CollectErrors\nTYPE: bool\nVERSION: 2.0.0\nDEFAULT: false\n--DESCRIPTION--\n\nWhether or not to collect errors found while filtering the document. This\nis a useful way to give feedback to your users. Warning:\nCurrently this feature is very patchy and experimental, with lots of\npossible error messages not yet implemented. It will not cause any\nproblems, but it may not help your users either.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.ColorKeywords.txt",
"content": "Core.ColorKeywords\nTYPE: hash\nVERSION: 2.0.0\n--DEFAULT--\narray (\n 'maroon' => '#800000',\n 'red' => '#FF0000',\n 'orange' => '#FFA500',\n 'yellow' => '#FFFF00',\n 'olive' => '#808000',\n 'purple' => '#800080',\n 'fuchsia' => '#FF00FF',\n 'white' => '#FFFFFF',\n 'lime' => '#00FF00',\n 'green' => '#008000',\n 'navy' => '#000080',\n 'blue' => '#0000FF',\n 'aqua' => '#00FFFF',\n 'teal' => '#008080',\n 'black' => '#000000',\n 'silver' => '#C0C0C0',\n 'gray' => '#808080',\n)\n--DESCRIPTION--\n\nLookup array of color names to six digit hexadecimal number corresponding\nto color, with preceding hash mark. Used when parsing colors.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.ConvertDocumentToFragment.txt",
"content": "Core.ConvertDocumentToFragment\nTYPE: bool\nDEFAULT: true\n--DESCRIPTION--\n\nThis parameter determines whether or not the filter should convert\ninput that is a full document with html and body tags to a fragment\nof just the contents of a body tag. This parameter is simply something\nHTML Purifier can do during an edge-case: for most inputs, this\nprocessing is not necessary.\n\n--ALIASES--\nCore.AcceptFullDocuments\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.DirectLexLineNumberSyncInterval.txt",
"content": "Core.DirectLexLineNumberSyncInterval\nTYPE: int\nVERSION: 2.0.0\nDEFAULT: 0\n--DESCRIPTION--\n\n\n Specifies the number of tokens the DirectLex line number tracking\n implementations should process before attempting to resyncronize the\n current line count by manually counting all previous new-lines. When\n at 0, this functionality is disabled. Lower values will decrease\n performance, and this is only strictly necessary if the counting\n algorithm is buggy (in which case you should report it as a bug).\n This has no effect when %Core.MaintainLineNumbers is disabled or DirectLex is\n not being used.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.Encoding.txt",
"content": "Core.Encoding\nTYPE: istring\nDEFAULT: 'utf-8'\n--DESCRIPTION--\nIf for some reason you are unable to convert all webpages to UTF-8, you can\nuse this directive as a stop-gap compatibility change to let HTML Purifier\ndeal with non UTF-8 input. This technique has notable deficiencies:\nabsolutely no characters outside of the selected character encoding will be\npreserved, not even the ones that have been ampersand escaped (this is due\nto a UTF-8 specific feature that automatically resolves all\nentities), making it pretty useless for anything except the most I18N-blind\napplications, although %Core.EscapeNonASCIICharacters offers fixes this\ntrouble with another tradeoff. This directive only accepts ISO-8859-1 if\niconv is not enabled.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.EscapeInvalidChildren.txt",
"content": "Core.EscapeInvalidChildren\nTYPE: bool\nDEFAULT: false\n--DESCRIPTION--\nWhen true, a child is found that is not allowed in the context of the\nparent element will be transformed into text as if it were ASCII. When\nfalse, that element and all internal tags will be dropped, though text will\nbe preserved. There is no option for dropping the element but preserving\nchild nodes.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.EscapeInvalidTags.txt",
"content": "Core.EscapeInvalidTags\nTYPE: bool\nDEFAULT: false\n--DESCRIPTION--\nWhen true, invalid tags will be written back to the document as plain text.\nOtherwise, they are silently dropped.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.EscapeNonASCIICharacters.txt",
"content": "Core.EscapeNonASCIICharacters\nTYPE: bool\nVERSION: 1.4.0\nDEFAULT: false\n--DESCRIPTION--\nThis directive overcomes a deficiency in %Core.Encoding by blindly\nconverting all non-ASCII characters into decimal numeric entities before\nconverting it to its native encoding. This means that even characters that\ncan be expressed in the non-UTF-8 encoding will be entity-ized, which can\nbe a real downer for encodings like Big5. It also assumes that the ASCII\nrepetoire is available, although this is the case for almost all encodings.\nAnyway, use UTF-8!\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.HiddenElements.txt",
"content": "Core.HiddenElements\nTYPE: lookup\n--DEFAULT--\narray (\n 'script' => true,\n 'style' => true,\n)\n--DESCRIPTION--\n\n\n This directive is a lookup array of elements which should have their\n contents removed when they are not allowed by the HTML definition.\n For example, the contents of a script tag are not\n normally shown in a document, so if script tags are to be removed,\n their contents should be removed to. This is opposed to a b\n tag, which defines some presentational changes but does not hide its\n contents.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.Language.txt",
"content": "Core.Language\nTYPE: string\nVERSION: 2.0.0\nDEFAULT: 'en'\n--DESCRIPTION--\n\nISO 639 language code for localizable things in HTML Purifier to use,\nwhich is mainly error reporting. There is currently only an English (en)\ntranslation, so this directive is currently useless.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.LexerImpl.txt",
"content": "Core.LexerImpl\nTYPE: mixed/null\nVERSION: 2.0.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n This parameter determines what lexer implementation can be used. The\n valid values are:\n
\n\n - null
\n - \n Recommended, the lexer implementation will be auto-detected based on\n your PHP-version and configuration.\n
\n - string lexer identifier
\n - \n This is a slim way of manually overridding the implementation.\n Currently recognized values are: DOMLex (the default PHP5\nimplementation)\n and DirectLex (the default PHP4 implementation). Only use this if\n you know what you are doing: usually, the auto-detection will\n manage things for cases you aren't even aware of.\n
\n - object lexer instance
\n - \n Super-advanced: you can specify your own, custom, implementation that\n implements the interface defined by
HTMLPurifier_Lexer.\n I may remove this option simply because I don't expect anyone\n to use it.\n \n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.MaintainLineNumbers.txt",
"content": "Core.MaintainLineNumbers\nTYPE: bool/null\nVERSION: 2.0.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n If true, HTML Purifier will add line number information to all tokens.\n This is useful when error reporting is turned on, but can result in\n significant performance degradation and should not be used when\n unnecessary. This directive must be used with the DirectLex lexer,\n as the DOMLex lexer does not (yet) support this functionality.\n If the value is null, an appropriate value will be selected based\n on other configuration.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.RemoveInvalidImg.txt",
"content": "Core.RemoveInvalidImg\nTYPE: bool\nDEFAULT: true\nVERSION: 1.3.0\n--DESCRIPTION--\n\n\n This directive enables pre-emptive URI checking in img\n tags, as the attribute validation strategy is not authorized to\n remove elements from the document. Revert to pre-1.3.0 behavior by setting to false.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Core.RemoveScriptContents.txt",
"content": "Core.RemoveScriptContents\nTYPE: bool/null\nDEFAULT: NULL\nVERSION: 2.0.0\nDEPRECATED-VERSION: 2.1.0\nDEPRECATED-USE: Core.HiddenElements\n--DESCRIPTION--\n\n This directive enables HTML Purifier to remove not only script tags\n but all of their contents.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.Custom.txt",
"content": "Filter.Custom\nTYPE: list\nVERSION: 3.1.0\nDEFAULT: array()\n--DESCRIPTION--\n\n This directive can be used to add custom filters; it is nearly the\n equivalent of the now deprecated HTMLPurifier->addFilter()\n method. Specify an array of concrete implementations.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.ExtractStyleBlocks.Escaping.txt",
"content": "Filter.ExtractStyleBlocks.Escaping\nTYPE: bool\nVERSION: 3.0.0\nDEFAULT: true\nALIASES: Filter.ExtractStyleBlocksEscaping, FilterParam.ExtractStyleBlocksEscaping\n--DESCRIPTION--\n\n\n Whether or not to escape the dangerous characters <, > and &\n as \\3C, \\3E and \\26, respectively. This is can be safely set to false\n if the contents of StyleBlocks will be placed in an external stylesheet,\n where there is no risk of it being interpreted as HTML.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.ExtractStyleBlocks.Scope.txt",
"content": "Filter.ExtractStyleBlocks.Scope\nTYPE: string/null\nVERSION: 3.0.0\nDEFAULT: NULL\nALIASES: Filter.ExtractStyleBlocksScope, FilterParam.ExtractStyleBlocksScope\n--DESCRIPTION--\n\n\n If you would like users to be able to define external stylesheets, but\n only allow them to specify CSS declarations for a specific node and\n prevent them from fiddling with other elements, use this directive.\n It accepts any valid CSS selector, and will prepend this to any\n CSS declaration extracted from the document. For example, if this\n directive is set to #user-content and a user uses the\n selector a:hover, the final selector will be\n #user-content a:hover.\n
\n\n The comma shorthand may be used; consider the above example, with\n #user-content, #user-content2, the final selector will\n be #user-content a:hover, #user-content2 a:hover.\n
\n\n Warning: It is possible for users to bypass this measure\n using a naughty + selector. This is a bug in CSS Tidy 1.3, not HTML\n Purifier, and I am working to get it fixed. Until then, HTML Purifier\n performs a basic check to prevent this.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.ExtractStyleBlocks.TidyImpl.txt",
"content": "Filter.ExtractStyleBlocks.TidyImpl\nTYPE: mixed/null\nVERSION: 3.1.0\nDEFAULT: NULL\nALIASES: FilterParam.ExtractStyleBlocksTidyImpl\n--DESCRIPTION--\n\n If left NULL, HTML Purifier will attempt to instantiate a csstidy\n class to use for internal cleaning. This will usually be good enough.\n
\n\n However, for trusted user input, you can set this to false to\n disable cleaning. In addition, you can supply your own concrete implementation\n of Tidy's interface to use, although I don't know why you'd want to do that.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.ExtractStyleBlocks.txt",
"content": "Filter.ExtractStyleBlocks\nTYPE: bool\nVERSION: 3.1.0\nDEFAULT: false\nEXTERNAL: CSSTidy\n--DESCRIPTION--\n\n This directive turns on the style block extraction filter, which removes\n style blocks from input HTML, cleans them up with CSSTidy,\n and places them in the StyleBlocks context variable, for further\n use by you, usually to be placed in an external stylesheet, or a\n style block in the head of your document.\n
\n\n Sample usage:\n
\n';\n?>\n\n\n\n Filter.ExtractStyleBlocks \nbody {color:#F00;} Some text';\n\n $config = HTMLPurifier_Config::createDefault();\n $config->set('Filter', 'ExtractStyleBlocks', true);\n $purifier = new HTMLPurifier($config);\n\n $html = $purifier->purify($dirty);\n\n // This implementation writes the stylesheets to the styles/ directory.\n // You can also echo the styles inside the document, but it's a bit\n // more difficult to make sure they get interpreted properly by\n // browsers; try the usual CSS armoring techniques.\n $styles = $purifier->context->get('StyleBlocks');\n $dir = 'styles/';\n if (!is_dir($dir)) mkdir($dir);\n $hash = sha1($_GET['html']);\n foreach ($styles as $i => $style) {\n file_put_contents($name = $dir . $hash . \"_$i\");\n echo '';\n }\n?>\n\n\n \n \n \n\n\n]]>
\n\n Warning: It is possible for a user to mount an\n imagecrash attack using this CSS. Counter-measures are difficult;\n it is not simply enough to limit the range of CSS lengths (using\n relative lengths with many nesting levels allows for large values\n to be attained without actually specifying them in the stylesheet),\n and the flexible nature of selectors makes it difficult to selectively\n disable lengths on image tags (HTML Purifier, however, does disable\n CSS width and height in inline styling). There are probably two effective\n counter measures: an explicit width and height set to auto in all\n images in your document (unlikely) or the disabling of width and\n height (somewhat reasonable). Whether or not these measures should be\n used is left to the reader.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Filter.YouTube.txt",
"content": "Filter.YouTube\nTYPE: bool\nVERSION: 3.1.0\nDEFAULT: false\n--DESCRIPTION--\n\n This directive enables YouTube video embedding in HTML Purifier. Check\n this document\n on embedding videos for more information on what this filter does.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Allowed.txt",
"content": "HTML.Allowed\nTYPE: itext/null\nVERSION: 2.0.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n This is a convenience directive that rolls the functionality of\n %HTML.AllowedElements and %HTML.AllowedAttributes into one directive.\n Specify elements and attributes that are allowed using:\n element1[attr1|attr2],element2.... You can also use\n newlines instead of commas to separate elements.\n
\n\n Warning:\n All of the constraints on the component directives are still enforced.\n The syntax is a subset of TinyMCE's valid_elements\n whitelist: directly copy-pasting it here will probably result in\n broken whitelists. If %HTML.AllowedElements or %HTML.AllowedAttributes\n are set, this directive has no effect.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.AllowedAttributes.txt",
"content": "HTML.AllowedAttributes\nTYPE: lookup/null\nVERSION: 1.3.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n If HTML Purifier's attribute set is unsatisfactory, overload it!\n The syntax is \"tag.attr\" or \"*.attr\" for the global attributes\n (style, id, class, dir, lang, xml:lang).\n
\n\n Warning: If another directive conflicts with the\n elements here, that directive will win and override. For\n example, %HTML.EnableAttrID will take precedence over *.id in this\n directive. You must set that directive to true before you can use\n IDs at all.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.AllowedElements.txt",
"content": "HTML.AllowedElements\nTYPE: lookup/null\nVERSION: 1.3.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n If HTML Purifier's tag set is unsatisfactory for your needs, you\n can overload it with your own list of tags to allow. Note that this\n method is subtractive: it does its job by taking away from HTML Purifier\n usual feature set, so you cannot add a tag that HTML Purifier never\n supported in the first place (like embed, form or head). If you\n change this, you probably also want to change %HTML.AllowedAttributes.\n
\n\n Warning: If another directive conflicts with the\n elements here, that directive will win and override.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.AllowedModules.txt",
"content": "HTML.AllowedModules\nTYPE: lookup/null\nVERSION: 2.0.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n A doctype comes with a set of usual modules to use. Without having\n to mucking about with the doctypes, you can quickly activate or\n disable these modules by specifying which modules you wish to allow\n with this directive. This is most useful for unit testing specific\n modules, although end users may find it useful for their own ends.\n
\n\n If you specify a module that does not exist, the manager will silently\n fail to use it, so be careful! User-defined modules are not affected\n by this directive. Modules defined in %HTML.CoreModules are not\n affected by this directive.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Attr.Name.UseCDATA.txt",
"content": "HTML.Attr.Name.UseCDATA\nTYPE: bool\nDEFAULT: false\nVERSION: 4.0.0\n--DESCRIPTION--\nThe W3C specification DTD defines the name attribute to be CDATA, not ID, due\nto limitations of DTD. In certain documents, this relaxed behavior is desired,\nwhether it is to specify duplicate names, or to specify names that would be\nillegal IDs (for example, names that begin with a digit.) Set this configuration\ndirective to true to use the relaxed parsing rules.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.BlockWrapper.txt",
"content": "HTML.BlockWrapper\nTYPE: string\nVERSION: 1.3.0\nDEFAULT: 'p'\n--DESCRIPTION--\n\n\n String name of element to wrap inline elements that are inside a block\n context. This only occurs in the children of blockquote in strict mode.\n
\n\n Example: by default value,\n <blockquote>Foo</blockquote> would become\n <blockquote><p>Foo</p></blockquote>.\n The <p> tags can be replaced with whatever you desire,\n as long as it is a block level element.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.CoreModules.txt",
"content": "HTML.CoreModules\nTYPE: lookup\nVERSION: 2.0.0\n--DEFAULT--\narray (\n 'Structure' => true,\n 'Text' => true,\n 'Hypertext' => true,\n 'List' => true,\n 'NonXMLCommonAttributes' => true,\n 'XMLCommonAttributes' => true,\n 'CommonAttributes' => true,\n)\n--DESCRIPTION--\n\n\n Certain modularized doctypes (XHTML, namely), have certain modules\n that must be included for the doctype to be an conforming document\n type: put those modules here. By default, XHTML's core modules\n are used. You can set this to a blank array to disable core module\n protection, but this is not recommended.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.CustomDoctype.txt",
"content": "HTML.CustomDoctype\nTYPE: string/null\nVERSION: 2.0.1\nDEFAULT: NULL\n--DESCRIPTION--\n\nA custom doctype for power-users who defined there own document\ntype. This directive only applies when %HTML.Doctype is blank.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.DefinitionID.txt",
"content": "HTML.DefinitionID\nTYPE: string/null\nDEFAULT: NULL\nVERSION: 2.0.0\n--DESCRIPTION--\n\n\n Unique identifier for a custom-built HTML definition. If you edit\n the raw version of the HTMLDefinition, introducing changes that the\n configuration object does not reflect, you must specify this variable.\n If you change your custom edits, you should change this directive, or\n clear your cache. Example:\n
\n\n$config = HTMLPurifier_Config::createDefault();\n$config->set('HTML', 'DefinitionID', '1');\n$def = $config->getHTMLDefinition();\n$def->addAttribute('a', 'tabindex', 'Number');\n\n\n In the above example, the configuration is still at the defaults, but\n using the advanced API, an extra attribute has been added. The\n configuration object normally has no way of knowing that this change\n has taken place, so it needs an extra directive: %HTML.DefinitionID.\n If someone else attempts to use the default configuration, these two\n pieces of code will not clobber each other in the cache, since one has\n an extra directive attached to it.\n
\n\n You must specify a value to this directive to use the\n advanced API features.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.DefinitionRev.txt",
"content": "HTML.DefinitionRev\nTYPE: int\nVERSION: 2.0.0\nDEFAULT: 1\n--DESCRIPTION--\n\n\n Revision identifier for your custom definition specified in\n %HTML.DefinitionID. This serves the same purpose: uniquely identifying\n your custom definition, but this one does so in a chronological\n context: revision 3 is more up-to-date then revision 2. Thus, when\n this gets incremented, the cache handling is smart enough to clean\n up any older revisions of your definition as well as flush the\n cache.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Doctype.txt",
"content": "HTML.Doctype\nTYPE: string/null\nDEFAULT: NULL\n--DESCRIPTION--\nDoctype to use during filtering. Technically speaking this is not actually\na doctype (as it does not identify a corresponding DTD), but we are using\nthis name for sake of simplicity. When non-blank, this will override any\nolder directives like %HTML.XHTML or %HTML.Strict.\n--ALLOWED--\n'HTML 4.01 Transitional', 'HTML 4.01 Strict', 'XHTML 1.0 Transitional', 'XHTML 1.0 Strict', 'XHTML 1.1'\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.ForbiddenAttributes.txt",
"content": "HTML.ForbiddenAttributes\nTYPE: lookup\nVERSION: 3.1.0\nDEFAULT: array()\n--DESCRIPTION--\n\n While this directive is similar to %HTML.AllowedAttributes, for\n forwards-compatibility with XML, this attribute has a different syntax. Instead of\n tag.attr, use tag@attr. To disallow href\n attributes in a tags, set this directive to\n a@href. You can also disallow an attribute globally with\n attr or *@attr (either syntax is fine; the latter\n is provided for consistency with %HTML.AllowedAttributes).\n
\n\n Warning: This directive complements %HTML.ForbiddenElements,\n accordingly, check\n out that directive for a discussion of why you\n should think twice before using this directive.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.ForbiddenElements.txt",
"content": "HTML.ForbiddenElements\nTYPE: lookup\nVERSION: 3.1.0\nDEFAULT: array()\n--DESCRIPTION--\n\n This was, perhaps, the most requested feature ever in HTML\n Purifier. Please don't abuse it! This is the logical inverse of\n %HTML.AllowedElements, and it will override that directive, or any\n other directive.\n
\n\n If possible, %HTML.Allowed is recommended over this directive, because it\n can sometimes be difficult to tell whether or not you've forbidden all of\n the behavior you would like to disallow. If you forbid img\n with the expectation of preventing images on your site, you'll be in for\n a nasty surprise when people start using the background-image\n CSS property.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.MaxImgLength.txt",
"content": "HTML.MaxImgLength\nTYPE: int/null\nDEFAULT: 1200\nVERSION: 3.1.1\n--DESCRIPTION--\n\n This directive controls the maximum number of pixels in the width and\n height attributes in img tags. This is\n in place to prevent imagecrash attacks, disable with null at your own risk.\n This directive is similar to %CSS.MaxImgLength, and both should be\n concurrently edited, although there are\n subtle differences in the input format (the HTML max is an integer).\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Parent.txt",
"content": "HTML.Parent\nTYPE: string\nVERSION: 1.3.0\nDEFAULT: 'div'\n--DESCRIPTION--\n\n\n String name of element that HTML fragment passed to library will be\n inserted in. An interesting variation would be using span as the\n parent element, meaning that only inline tags would be allowed.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Proprietary.txt",
"content": "HTML.Proprietary\nTYPE: bool\nVERSION: 3.1.0\nDEFAULT: false\n--DESCRIPTION--\n\n Whether or not to allow proprietary elements and attributes in your\n documents, as per HTMLPurifier_HTMLModule_Proprietary.\n Warning: This can cause your documents to stop\n validating!\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.SafeEmbed.txt",
"content": "HTML.SafeEmbed\nTYPE: bool\nVERSION: 3.1.1\nDEFAULT: false\n--DESCRIPTION--\n\n Whether or not to permit embed tags in documents, with a number of extra\n security features added to prevent script execution. This is similar to\n what websites like MySpace do to embed tags. Embed is a proprietary\n element and will cause your website to stop validating. You probably want\n to enable this with %HTML.SafeObject.\n Highly experimental.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.SafeObject.txt",
"content": "HTML.SafeObject\nTYPE: bool\nVERSION: 3.1.1\nDEFAULT: false\n--DESCRIPTION--\n\n Whether or not to permit object tags in documents, with a number of extra\n security features added to prevent script execution. This is similar to\n what websites like MySpace do to object tags. You may also want to\n enable %HTML.SafeEmbed for maximum interoperability with Internet Explorer,\n although embed tags will cause your website to stop validating.\n Highly experimental.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Strict.txt",
"content": "HTML.Strict\nTYPE: bool\nVERSION: 1.3.0\nDEFAULT: false\nDEPRECATED-VERSION: 1.7.0\nDEPRECATED-USE: HTML.Doctype\n--DESCRIPTION--\nDetermines whether or not to use Transitional (loose) or Strict rulesets.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.TidyAdd.txt",
"content": "HTML.TidyAdd\nTYPE: lookup\nVERSION: 2.0.0\nDEFAULT: array()\n--DESCRIPTION--\n\nFixes to add to the default set of Tidy fixes as per your level.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.TidyLevel.txt",
"content": "HTML.TidyLevel\nTYPE: string\nVERSION: 2.0.0\nDEFAULT: 'medium'\n--DESCRIPTION--\n\nGeneral level of cleanliness the Tidy module should enforce.\nThere are four allowed values:
\n\n - none
\n - No extra tidying should be done
\n - light
\n - Only fix elements that would be discarded otherwise due to\n lack of support in doctype
\n - medium
\n - Enforce best practices
\n - heavy
\n - Transform all deprecated elements and attributes to standards\n compliant equivalents
\n
\n\n--ALLOWED--\n'none', 'light', 'medium', 'heavy'\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.TidyRemove.txt",
"content": "HTML.TidyRemove\nTYPE: lookup\nVERSION: 2.0.0\nDEFAULT: array()\n--DESCRIPTION--\n\nFixes to remove from the default set of Tidy fixes as per your level.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.Trusted.txt",
"content": "HTML.Trusted\nTYPE: bool\nVERSION: 2.0.0\nDEFAULT: false\n--DESCRIPTION--\nIndicates whether or not the user input is trusted or not. If the input is\ntrusted, a more expansive set of allowed tags and attributes will be used.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/HTML.XHTML.txt",
"content": "HTML.XHTML\nTYPE: bool\nDEFAULT: true\nVERSION: 1.1.0\nDEPRECATED-VERSION: 1.7.0\nDEPRECATED-USE: HTML.Doctype\n--DESCRIPTION--\nDetermines whether or not output is XHTML 1.0 or HTML 4.01 flavor.\n--ALIASES--\nCore.XHTML\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Output.CommentScriptContents.txt",
"content": "Output.CommentScriptContents\nTYPE: bool\nVERSION: 2.0.0\nDEFAULT: true\n--DESCRIPTION--\nDetermines whether or not HTML Purifier should attempt to fix up the\ncontents of script tags for legacy browsers with comments.\n--ALIASES--\nCore.CommentScriptContents\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Output.Newline.txt",
"content": "Output.Newline\nTYPE: string/null\nVERSION: 2.0.1\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n Newline string to format final output with. If left null, HTML Purifier\n will auto-detect the default newline type of the system and use that;\n you can manually override it here. Remember, \\r\\n is Windows, \\r\n is Mac, and \\n is Unix.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Output.SortAttr.txt",
"content": "Output.SortAttr\nTYPE: bool\nVERSION: 3.2.0\nDEFAULT: false\n--DESCRIPTION--\n\n If true, HTML Purifier will sort attributes by name before writing them back\n to the document, converting a tag like: <el b=\"\" a=\"\" c=\"\" />\n to <el a=\"\" b=\"\" c=\"\" />. This is a workaround for\n a bug in FCKeditor which causes it to swap attributes order, adding noise\n to text diffs. If you're not seeing this bug, chances are, you don't need\n this directive.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Output.TidyFormat.txt",
"content": "Output.TidyFormat\nTYPE: bool\nVERSION: 1.1.1\nDEFAULT: false\n--DESCRIPTION--\n\n Determines whether or not to run Tidy on the final output for pretty\n formatting reasons, such as indentation and wrap.\n
\n\n This can greatly improve readability for editors who are hand-editing\n the HTML, but is by no means necessary as HTML Purifier has already\n fixed all major errors the HTML may have had. Tidy is a non-default\n extension, and this directive will silently fail if Tidy is not\n available.\n
\n\n If you are looking to make the overall look of your page's source\n better, I recommend running Tidy on the entire page rather than just\n user-content (after all, the indentation relative to the containing\n blocks will be incorrect).\n
\n--ALIASES--\nCore.TidyFormat\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/Test.ForceNoIconv.txt",
"content": "Test.ForceNoIconv\nTYPE: bool\nDEFAULT: false\n--DESCRIPTION--\nWhen set to true, HTMLPurifier_Encoder will act as if iconv does not exist\nand use only pure PHP implementations.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.AllowedSchemes.txt",
"content": "URI.AllowedSchemes\nTYPE: lookup\n--DEFAULT--\narray (\n 'http' => true,\n 'https' => true,\n 'mailto' => true,\n 'ftp' => true,\n 'nntp' => true,\n 'news' => true,\n)\n--DESCRIPTION--\nWhitelist that defines the schemes that a URI is allowed to have. This\nprevents XSS attacks from using pseudo-schemes like javascript or mocha.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.Base.txt",
"content": "URI.Base\nTYPE: string/null\nVERSION: 2.1.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n The base URI is the URI of the document this purified HTML will be\n inserted into. This information is important if HTML Purifier needs\n to calculate absolute URIs from relative URIs, such as when %URI.MakeAbsolute\n is on. You may use a non-absolute URI for this value, but behavior\n may vary (%URI.MakeAbsolute deals nicely with both absolute and\n relative paths, but forwards-compatibility is not guaranteed).\n Warning: If set, the scheme on this URI\n overrides the one specified by %URI.DefaultScheme.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DefaultScheme.txt",
"content": "URI.DefaultScheme\nTYPE: string\nDEFAULT: 'http'\n--DESCRIPTION--\n\n\n Defines through what scheme the output will be served, in order to\n select the proper object validator when no scheme information is present.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DefinitionID.txt",
"content": "URI.DefinitionID\nTYPE: string/null\nVERSION: 2.1.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n Unique identifier for a custom-built URI definition. If you want\n to add custom URIFilters, you must specify this value.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DefinitionRev.txt",
"content": "URI.DefinitionRev\nTYPE: int\nVERSION: 2.1.0\nDEFAULT: 1\n--DESCRIPTION--\n\n\n Revision identifier for your custom definition. See\n %HTML.DefinitionRev for details.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.Disable.txt",
"content": "URI.Disable\nTYPE: bool\nVERSION: 1.3.0\nDEFAULT: false\n--DESCRIPTION--\n\n\n Disables all URIs in all forms. Not sure why you'd want to do that\n (after all, the Internet's founded on the notion of a hyperlink).\n
\n\n--ALIASES--\nAttr.DisableURI\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DisableExternal.txt",
"content": "URI.DisableExternal\nTYPE: bool\nVERSION: 1.2.0\nDEFAULT: false\n--DESCRIPTION--\nDisables links to external websites. This is a highly effective anti-spam\nand anti-pagerank-leech measure, but comes at a hefty price: nolinks or\nimages outside of your domain will be allowed. Non-linkified URIs will\nstill be preserved. If you want to be able to link to subdomains or use\nabsolute URIs, specify %URI.Host for your website.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DisableExternalResources.txt",
"content": "URI.DisableExternalResources\nTYPE: bool\nVERSION: 1.3.0\nDEFAULT: false\n--DESCRIPTION--\nDisables the embedding of external resources, preventing users from\nembedding things like images from other hosts. This prevents access\ntracking (good for email viewers), bandwidth leeching, cross-site request\nforging, goatse.cx posting, and other nasties, but also results in a loss\nof end-user functionality (they can't directly post a pic they posted from\nFlickr anymore). Use it if you don't have a robust user-content moderation\nteam.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.DisableResources.txt",
"content": "URI.DisableResources\nTYPE: bool\nVERSION: 1.3.0\nDEFAULT: false\n--DESCRIPTION--\n\n\n Disables embedding resources, essentially meaning no pictures. You can\n still link to them though. See %URI.DisableExternalResources for why\n this might be a good idea.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.Host.txt",
"content": "URI.Host\nTYPE: string/null\nVERSION: 1.2.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n Defines the domain name of the server, so we can determine whether or\n an absolute URI is from your website or not. Not strictly necessary,\n as users should be using relative URIs to reference resources on your\n website. It will, however, let you use absolute URIs to link to\n subdomains of the domain you post here: i.e. example.com will allow\n sub.example.com. However, higher up domains will still be excluded:\n if you set %URI.Host to sub.example.com, example.com will be blocked.\n Note: This directive overrides %URI.Base because\n a given page may be on a sub-domain, but you wish HTML Purifier to be\n more relaxed and allow some of the parent domains too.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.HostBlacklist.txt",
"content": "URI.HostBlacklist\nTYPE: list\nVERSION: 1.3.0\nDEFAULT: array()\n--DESCRIPTION--\nList of strings that are forbidden in the host of any URI. Use it to kill\ndomain names of spam, etc. Note that it will catch anything in the domain,\nso moo.com will catch moo.com.example.com.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.MakeAbsolute.txt",
"content": "URI.MakeAbsolute\nTYPE: bool\nVERSION: 2.1.0\nDEFAULT: false\n--DESCRIPTION--\n\n\n Converts all URIs into absolute forms. This is useful when the HTML\n being filtered assumes a specific base path, but will actually be\n viewed in a different context (and setting an alternate base URI is\n not possible). %URI.Base must be set for this directive to work.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.Munge.txt",
"content": "URI.Munge\nTYPE: string/null\nVERSION: 1.3.0\nDEFAULT: NULL\n--DESCRIPTION--\n\n\n Munges all browsable (usually http, https and ftp)\n absolute URIs into another URI, usually a URI redirection service.\n This directive accepts a URI, formatted with a %s where\n the url-encoded original URI should be inserted (sample:\n http://www.google.com/url?q=%s).\n
\n\n Uses for this directive:\n
\n\n - \n Prevent PageRank leaks, while being fairly transparent\n to users (you may also want to add some client side JavaScript to\n override the text in the statusbar). Notice:\n Many security experts believe that this form of protection does not deter spam-bots.\n
\n - \n Redirect users to a splash page telling them they are leaving your\n website. While this is poor usability practice, it is often mandated\n in corporate environments.\n
\n
\n\n Prior to HTML Purifier 3.1.1, this directive also enabled the munging\n of browsable external resources, which could break things if your redirection\n script was a splash page or used meta tags. To revert to\n previous behavior, please use %URI.MungeResources.\n
\n\n You may want to also use %URI.MungeSecretKey along with this directive\n in order to enforce what URIs your redirector script allows. Open\n redirector scripts can be a security risk and negatively affect the\n reputation of your domain name.\n
\n\n Starting with HTML Purifier 3.1.1, there is also these substitutions:\n
\n\n \n \n Key \n Description \n Example <a href=\"\"> \n \n \n \n \n %r \n 1 - The URI embeds a resource
(blank) - The URI is merely a link \n \n \n %n \n The name of the tag this URI came from \n a \n \n \n %m \n The name of the attribute this URI came from \n href \n \n \n %p \n The name of the CSS property this URI came from, or blank if irrelevant \n \n \n
\n\n Admittedly, these letters are somewhat arbitrary; the only stipulation\n was that they couldn't be a through f. r is for resource (I would have preferred\n e, but you take what you can get), n is for name, m\n was picked because it came after n (and I couldn't use a), p is for\n property.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.MungeResources.txt",
"content": "URI.MungeResources\nTYPE: bool\nVERSION: 3.1.1\nDEFAULT: false\n--DESCRIPTION--\n\n If true, any URI munging directives like %URI.Munge\n will also apply to embedded resources, such as <img src=\"\">.\n Be careful enabling this directive if you have a redirector script\n that does not use the Location HTTP header; all of your images\n and other embedded resources will break.\n
\n\n Warning: It is strongly advised you use this in conjunction\n %URI.MungeSecretKey to mitigate the security risk of an open redirector.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.MungeSecretKey.txt",
"content": "URI.MungeSecretKey\nTYPE: string/null\nVERSION: 3.1.1\nDEFAULT: NULL\n--DESCRIPTION--\n\n This directive enables secure checksum generation along with %URI.Munge.\n It should be set to a secure key that is not shared with anyone else.\n The checksum can be placed in the URI using %t. Use of this checksum\n affords an additional level of protection by allowing a redirector\n to check if a URI has passed through HTML Purifier with this line:\n
\n\n$checksum === sha1($secret_key . ':' . $url)
\n\n\n If the output is TRUE, the redirector script should accept the URI.\n
\n\n\n Please note that it would still be possible for an attacker to procure\n secure hashes en-mass by abusing your website's Preview feature or the\n like, but this service affords an additional level of protection\n that should be combined with website blacklisting.\n
\n\n\n Remember this has no effect if %URI.Munge is not on.\n
\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/URI.OverrideAllowedSchemes.txt",
"content": "URI.OverrideAllowedSchemes\nTYPE: bool\nDEFAULT: true\n--DESCRIPTION--\nIf this is set to true (which it is by default), you can override\n%URI.AllowedSchemes by simply registering a HTMLPurifier_URIScheme to the\nregistry. If false, you will also have to update that directive in order\nto add more schemes.\n--# vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema/schema/info.ini",
"content": "name = \"HTML Purifier\"\n\n; vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ConfigSchema.php",
"content": " array(\n * 'Directive' => new stdclass(),\n * )\n * )\n *\n * The stdclass may have the following properties:\n *\n * - If isAlias isn't set:\n * - type: Integer type of directive, see HTMLPurifier_VarParser for definitions\n * - allow_null: If set, this directive allows null values\n * - aliases: If set, an associative array of value aliases to real values\n * - allowed: If set, a lookup array of allowed (string) values\n * - If isAlias is set:\n * - namespace: Namespace this directive aliases to\n * - name: Directive name this directive aliases to\n *\n * In certain degenerate cases, stdclass will actually be an integer. In\n * that case, the value is equivalent to an stdclass with the type\n * property set to the integer. If the integer is negative, type is\n * equal to the absolute value of integer, and allow_null is true.\n *\n * This class is friendly with HTMLPurifier_Config. If you need introspection\n * about the schema, you're better of using the ConfigSchema_Interchange,\n * which uses more memory but has much richer information.\n */\n public $info = array();\n\n /**\n * Application-wide singleton\n */\n static protected $singleton;\n\n public function __construct() {\n $this->defaultPlist = new HTMLPurifier_PropertyList();\n }\n\n /**\n * Unserializes the default ConfigSchema.\n */\n public static function makeFromSerial() {\n return unserialize(file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/ConfigSchema/schema.ser'));\n }\n\n /**\n * Retrieves an instance of the application-wide configuration definition.\n */\n public static function instance($prototype = null) {\n if ($prototype !== null) {\n HTMLPurifier_ConfigSchema::$singleton = $prototype;\n } elseif (HTMLPurifier_ConfigSchema::$singleton === null || $prototype === true) {\n HTMLPurifier_ConfigSchema::$singleton = HTMLPurifier_ConfigSchema::makeFromSerial();\n }\n return HTMLPurifier_ConfigSchema::$singleton;\n }\n\n /**\n * Defines a directive for configuration\n * @warning Will fail of directive's namespace is defined.\n * @warning This method's signature is slightly different from the legacy\n * define() static method! Beware!\n * @param $namespace Namespace the directive is in\n * @param $name Key of directive\n * @param $default Default value of directive\n * @param $type Allowed type of the directive. See\n * HTMLPurifier_DirectiveDef::$type for allowed values\n * @param $allow_null Whether or not to allow null values\n */\n public function add($key, $default, $type, $allow_null) {\n $obj = new stdclass();\n $obj->type = is_int($type) ? $type : HTMLPurifier_VarParser::$types[$type];\n if ($allow_null) $obj->allow_null = true;\n $this->info[$key] = $obj;\n $this->defaults[$key] = $default;\n $this->defaultPlist->set($key, $default);\n }\n\n /**\n * Defines a directive value alias.\n *\n * Directive value aliases are convenient for developers because it lets\n * them set a directive to several values and get the same result.\n * @param $namespace Directive's namespace\n * @param $name Name of Directive\n * @param $aliases Hash of aliased values to the real alias\n */\n public function addValueAliases($key, $aliases) {\n if (!isset($this->info[$key]->aliases)) {\n $this->info[$key]->aliases = array();\n }\n foreach ($aliases as $alias => $real) {\n $this->info[$key]->aliases[$alias] = $real;\n }\n }\n\n /**\n * Defines a set of allowed values for a directive.\n * @warning This is slightly different from the corresponding static\n * method definition.\n * @param $namespace Namespace of directive\n * @param $name Name of directive\n * @param $allowed Lookup array of allowed values\n */\n public function addAllowedValues($key, $allowed) {\n $this->info[$key]->allowed = $allowed;\n }\n\n /**\n * Defines a directive alias for backwards compatibility\n * @param $namespace\n * @param $name Directive that will be aliased\n * @param $new_namespace\n * @param $new_name Directive that the alias will be to\n */\n public function addAlias($key, $new_key) {\n $obj = new stdclass;\n $obj->key = $new_key;\n $obj->isAlias = true;\n $this->info[$key] = $obj;\n }\n\n /**\n * Replaces any stdclass that only has the type property with type integer.\n */\n public function postProcess() {\n foreach ($this->info as $key => $v) {\n if (count((array) $v) == 1) {\n $this->info[$key] = $v->type;\n } elseif (count((array) $v) == 2 && isset($v->allow_null)) {\n $this->info[$key] = -$v->type;\n }\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ContentSets.php",
"content": " true) indexed by name.\n * @note This is in HTMLPurifier_HTMLDefinition->info_content_sets\n */\n public $lookup = array();\n\n /**\n * Synchronized list of defined content sets (keys of info)\n */\n protected $keys = array();\n /**\n * Synchronized list of defined content values (values of info)\n */\n protected $values = array();\n\n /**\n * Merges in module's content sets, expands identifiers in the content\n * sets and populates the keys, values and lookup member variables.\n * @param $modules List of HTMLPurifier_HTMLModule\n */\n public function __construct($modules) {\n if (!is_array($modules)) $modules = array($modules);\n // populate content_sets based on module hints\n // sorry, no way of overloading\n foreach ($modules as $module_i => $module) {\n foreach ($module->content_sets as $key => $value) {\n $temp = $this->convertToLookup($value);\n if (isset($this->lookup[$key])) {\n // add it into the existing content set\n $this->lookup[$key] = array_merge($this->lookup[$key], $temp);\n } else {\n $this->lookup[$key] = $temp;\n }\n }\n }\n $old_lookup = false;\n while ($old_lookup !== $this->lookup) {\n $old_lookup = $this->lookup;\n foreach ($this->lookup as $i => $set) {\n $add = array();\n foreach ($set as $element => $x) {\n if (isset($this->lookup[$element])) {\n $add += $this->lookup[$element];\n unset($this->lookup[$i][$element]);\n }\n }\n $this->lookup[$i] += $add;\n }\n }\n\n foreach ($this->lookup as $key => $lookup) {\n $this->info[$key] = implode(' | ', array_keys($lookup));\n }\n $this->keys = array_keys($this->info);\n $this->values = array_values($this->info);\n }\n\n /**\n * Accepts a definition; generates and assigns a ChildDef for it\n * @param $def HTMLPurifier_ElementDef reference\n * @param $module Module that defined the ElementDef\n */\n public function generateChildDef(&$def, $module) {\n if (!empty($def->child)) return; // already done!\n $content_model = $def->content_model;\n if (is_string($content_model)) {\n // Assume that $this->keys is alphanumeric\n $def->content_model = preg_replace_callback(\n '/\\b(' . implode('|', $this->keys) . ')\\b/',\n array($this, 'generateChildDefCallback'),\n $content_model\n );\n //$def->content_model = str_replace(\n // $this->keys, $this->values, $content_model);\n }\n $def->child = $this->getChildDef($def, $module);\n }\n\n public function generateChildDefCallback($matches) {\n return $this->info[$matches[0]];\n }\n\n /**\n * Instantiates a ChildDef based on content_model and content_model_type\n * member variables in HTMLPurifier_ElementDef\n * @note This will also defer to modules for custom HTMLPurifier_ChildDef\n * subclasses that need content set expansion\n * @param $def HTMLPurifier_ElementDef to have ChildDef extracted\n * @return HTMLPurifier_ChildDef corresponding to ElementDef\n */\n public function getChildDef($def, $module) {\n $value = $def->content_model;\n if (is_object($value)) {\n trigger_error(\n 'Literal object child definitions should be stored in '.\n 'ElementDef->child not ElementDef->content_model',\n E_USER_NOTICE\n );\n return $value;\n }\n switch ($def->content_model_type) {\n case 'required':\n return new HTMLPurifier_ChildDef_Required($value);\n case 'optional':\n return new HTMLPurifier_ChildDef_Optional($value);\n case 'empty':\n return new HTMLPurifier_ChildDef_Empty();\n case 'custom':\n return new HTMLPurifier_ChildDef_Custom($value);\n }\n // defer to its module\n $return = false;\n if ($module->defines_child_def) { // save a func call\n $return = $module->getChildDef($def);\n }\n if ($return !== false) return $return;\n // error-out\n trigger_error(\n 'Could not determine which ChildDef class to instantiate',\n E_USER_ERROR\n );\n return false;\n }\n\n /**\n * Converts a string list of elements separated by pipes into\n * a lookup array.\n * @param $string List of elements\n * @return Lookup array of elements\n */\n protected function convertToLookup($string) {\n $array = explode('|', str_replace(' ', '', $string));\n $ret = array();\n foreach ($array as $i => $k) {\n $ret[$k] = true;\n }\n return $ret;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Context.php",
"content": "_storage[$name])) {\n trigger_error(\"Name $name produces collision, cannot re-register\",\n E_USER_ERROR);\n return;\n }\n $this->_storage[$name] =& $ref;\n }\n\n /**\n * Retrieves a variable reference from the context.\n * @param $name String name\n * @param $ignore_error Boolean whether or not to ignore error\n */\n public function &get($name, $ignore_error = false) {\n if (!isset($this->_storage[$name])) {\n if (!$ignore_error) {\n trigger_error(\"Attempted to retrieve non-existent variable $name\",\n E_USER_ERROR);\n }\n $var = null; // so we can return by reference\n return $var;\n }\n return $this->_storage[$name];\n }\n\n /**\n * Destorys a variable in the context.\n * @param $name String name\n */\n public function destroy($name) {\n if (!isset($this->_storage[$name])) {\n trigger_error(\"Attempted to destroy non-existent variable $name\",\n E_USER_ERROR);\n return;\n }\n unset($this->_storage[$name]);\n }\n\n /**\n * Checks whether or not the variable exists.\n * @param $name String name\n */\n public function exists($name) {\n return isset($this->_storage[$name]);\n }\n\n /**\n * Loads a series of variables from an associative array\n * @param $context_array Assoc array of variables to load\n */\n public function loadArray($context_array) {\n foreach ($context_array as $key => $discard) {\n $this->register($key, $context_array[$key]);\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Definition.php",
"content": "setup) return;\n $this->setup = true;\n $this->doSetup($config);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DefinitionCache/Decorator/Cleanup.php",
"content": "definitions[$this->generateKey($config)] = $def;\n return $status;\n }\n\n public function set($def, $config) {\n $status = parent::set($def, $config);\n if ($status) $this->definitions[$this->generateKey($config)] = $def;\n return $status;\n }\n\n public function replace($def, $config) {\n $status = parent::replace($def, $config);\n if ($status) $this->definitions[$this->generateKey($config)] = $def;\n return $status;\n }\n\n public function get($config) {\n $key = $this->generateKey($config);\n if (isset($this->definitions[$key])) return $this->definitions[$key];\n $this->definitions[$key] = parent::get($config);\n return $this->definitions[$key];\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DefinitionCache/Decorator/Template.php.in",
"content": "copy();\n // reference is necessary for mocks in PHP 4\n $decorator->cache =& $cache;\n $decorator->type = $cache->type;\n return $decorator;\n }\n\n /**\n * Cross-compatible clone substitute\n */\n public function copy() {\n return new HTMLPurifier_DefinitionCache_Decorator();\n }\n\n public function add($def, $config) {\n return $this->cache->add($def, $config);\n }\n\n public function set($def, $config) {\n return $this->cache->set($def, $config);\n }\n\n public function replace($def, $config) {\n return $this->cache->replace($def, $config);\n }\n\n public function get($config) {\n return $this->cache->get($config);\n }\n\n public function remove($config) {\n return $this->cache->remove($config);\n }\n\n public function flush($config) {\n return $this->cache->flush($config);\n }\n\n public function cleanup($config) {\n return $this->cache->cleanup($config);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DefinitionCache/Null.php",
"content": "checkDefType($def)) return;\n $file = $this->generateFilePath($config);\n if (file_exists($file)) return false;\n if (!$this->_prepareDir($config)) return false;\n return $this->_write($file, serialize($def));\n }\n\n public function set($def, $config) {\n if (!$this->checkDefType($def)) return;\n $file = $this->generateFilePath($config);\n if (!$this->_prepareDir($config)) return false;\n return $this->_write($file, serialize($def));\n }\n\n public function replace($def, $config) {\n if (!$this->checkDefType($def)) return;\n $file = $this->generateFilePath($config);\n if (!file_exists($file)) return false;\n if (!$this->_prepareDir($config)) return false;\n return $this->_write($file, serialize($def));\n }\n\n public function get($config) {\n $file = $this->generateFilePath($config);\n if (!file_exists($file)) return false;\n return unserialize(file_get_contents($file));\n }\n\n public function remove($config) {\n $file = $this->generateFilePath($config);\n if (!file_exists($file)) return false;\n return unlink($file);\n }\n\n public function flush($config) {\n if (!$this->_prepareDir($config)) return false;\n $dir = $this->generateDirectoryPath($config);\n $dh = opendir($dir);\n while (false !== ($filename = readdir($dh))) {\n if (empty($filename)) continue;\n if ($filename[0] === '.') continue;\n unlink($dir . '/' . $filename);\n }\n }\n\n public function cleanup($config) {\n if (!$this->_prepareDir($config)) return false;\n $dir = $this->generateDirectoryPath($config);\n $dh = opendir($dir);\n while (false !== ($filename = readdir($dh))) {\n if (empty($filename)) continue;\n if ($filename[0] === '.') continue;\n $key = substr($filename, 0, strlen($filename) - 4);\n if ($this->isOld($key, $config)) unlink($dir . '/' . $filename);\n }\n }\n\n /**\n * Generates the file path to the serial file corresponding to\n * the configuration and definition name\n * @todo Make protected\n */\n public function generateFilePath($config) {\n $key = $this->generateKey($config);\n return $this->generateDirectoryPath($config) . '/' . $key . '.ser';\n }\n\n /**\n * Generates the path to the directory contain this cache's serial files\n * @note No trailing slash\n * @todo Make protected\n */\n public function generateDirectoryPath($config) {\n $base = $this->generateBaseDirectoryPath($config);\n return $base . '/' . $this->type;\n }\n\n /**\n * Generates path to base directory that contains all definition type\n * serials\n * @todo Make protected\n */\n public function generateBaseDirectoryPath($config) {\n $base = $config->get('Cache.SerializerPath');\n $base = is_null($base) ? HTMLPURIFIER_PREFIX . '/HTMLPurifier/DefinitionCache/Serializer' : $base;\n return $base;\n }\n\n /**\n * Convenience wrapper function for file_put_contents\n * @param $file File name to write to\n * @param $data Data to write into file\n * @return Number of bytes written if success, or false if failure.\n */\n private function _write($file, $data) {\n return file_put_contents($file, $data);\n }\n\n /**\n * Prepares the directory that this type stores the serials in\n * @return True if successful\n */\n private function _prepareDir($config) {\n $directory = $this->generateDirectoryPath($config);\n if (!is_dir($directory)) {\n $base = $this->generateBaseDirectoryPath($config);\n if (!is_dir($base)) {\n trigger_error('Base directory '.$base.' does not exist,\n please create or change using %Cache.SerializerPath',\n E_USER_WARNING);\n return false;\n } elseif (!$this->_testPermissions($base)) {\n return false;\n }\n $old = umask(0022); // disable group and world writes\n mkdir($directory);\n umask($old);\n } elseif (!$this->_testPermissions($directory)) {\n return false;\n }\n return true;\n }\n\n /**\n * Tests permissions on a directory and throws out friendly\n * error messages and attempts to chmod it itself if possible\n */\n private function _testPermissions($dir) {\n // early abort, if it is writable, everything is hunky-dory\n if (is_writable($dir)) return true;\n if (!is_dir($dir)) {\n // generally, you'll want to handle this beforehand\n // so a more specific error message can be given\n trigger_error('Directory '.$dir.' does not exist',\n E_USER_WARNING);\n return false;\n }\n if (function_exists('posix_getuid')) {\n // POSIX system, we can give more specific advice\n if (fileowner($dir) === posix_getuid()) {\n // we can chmod it ourselves\n chmod($dir, 0755);\n return true;\n } elseif (filegroup($dir) === posix_getgid()) {\n $chmod = '775';\n } else {\n // PHP's probably running as nobody, so we'll\n // need to give global permissions\n $chmod = '777';\n }\n trigger_error('Directory '.$dir.' not writable, '.\n 'please chmod to ' . $chmod,\n E_USER_WARNING);\n } else {\n // generic error message\n trigger_error('Directory '.$dir.' not writable, '.\n 'please alter file permissions',\n E_USER_WARNING);\n }\n return false;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DefinitionCache.php",
"content": "type = $type;\n }\n\n /**\n * Generates a unique identifier for a particular configuration\n * @param Instance of HTMLPurifier_Config\n */\n public function generateKey($config) {\n return $config->version . ',' . // possibly replace with function calls\n $config->getBatchSerial($this->type) . ',' .\n $config->get($this->type . '.DefinitionRev');\n }\n\n /**\n * Tests whether or not a key is old with respect to the configuration's\n * version and revision number.\n * @param $key Key to test\n * @param $config Instance of HTMLPurifier_Config to test against\n */\n public function isOld($key, $config) {\n if (substr_count($key, ',') < 2) return true;\n list($version, $hash, $revision) = explode(',', $key, 3);\n $compare = version_compare($version, $config->version);\n // version mismatch, is always old\n if ($compare != 0) return true;\n // versions match, ids match, check revision number\n if (\n $hash == $config->getBatchSerial($this->type) &&\n $revision < $config->get($this->type . '.DefinitionRev')\n ) return true;\n return false;\n }\n\n /**\n * Checks if a definition's type jives with the cache's type\n * @note Throws an error on failure\n * @param $def Definition object to check\n * @return Boolean true if good, false if not\n */\n public function checkDefType($def) {\n if ($def->type !== $this->type) {\n trigger_error(\"Cannot use definition of type {$def->type} in cache for {$this->type}\");\n return false;\n }\n return true;\n }\n\n /**\n * Adds a definition object to the cache\n */\n abstract public function add($def, $config);\n\n /**\n * Unconditionally saves a definition object to the cache\n */\n abstract public function set($def, $config);\n\n /**\n * Replace an object in the cache\n */\n abstract public function replace($def, $config);\n\n /**\n * Retrieves a definition object from the cache\n */\n abstract public function get($config);\n\n /**\n * Removes a definition object to the cache\n */\n abstract public function remove($config);\n\n /**\n * Clears all objects from cache\n */\n abstract public function flush($config);\n\n /**\n * Clears all expired (older version or revision) objects from cache\n * @note Be carefuly implementing this method as flush. Flush must\n * not interfere with other Definition types, and cleanup()\n * should not be repeatedly called by userland code.\n */\n abstract public function cleanup($config);\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DefinitionCacheFactory.php",
"content": " array());\n protected $implementations = array();\n protected $decorators = array();\n\n /**\n * Initialize default decorators\n */\n public function setup() {\n $this->addDecorator('Cleanup');\n }\n\n /**\n * Retrieves an instance of global definition cache factory.\n */\n public static function instance($prototype = null) {\n static $instance;\n if ($prototype !== null) {\n $instance = $prototype;\n } elseif ($instance === null || $prototype === true) {\n $instance = new HTMLPurifier_DefinitionCacheFactory();\n $instance->setup();\n }\n return $instance;\n }\n\n /**\n * Registers a new definition cache object\n * @param $short Short name of cache object, for reference\n * @param $long Full class name of cache object, for construction\n */\n public function register($short, $long) {\n $this->implementations[$short] = $long;\n }\n\n /**\n * Factory method that creates a cache object based on configuration\n * @param $name Name of definitions handled by cache\n * @param $config Instance of HTMLPurifier_Config\n */\n public function create($type, $config) {\n $method = $config->get('Cache.DefinitionImpl');\n if ($method === null) {\n return new HTMLPurifier_DefinitionCache_Null($type);\n }\n if (!empty($this->caches[$method][$type])) {\n return $this->caches[$method][$type];\n }\n if (\n isset($this->implementations[$method]) &&\n class_exists($class = $this->implementations[$method], false)\n ) {\n $cache = new $class($type);\n } else {\n if ($method != 'Serializer') {\n trigger_error(\"Unrecognized DefinitionCache $method, using Serializer instead\", E_USER_WARNING);\n }\n $cache = new HTMLPurifier_DefinitionCache_Serializer($type);\n }\n foreach ($this->decorators as $decorator) {\n $new_cache = $decorator->decorate($cache);\n // prevent infinite recursion in PHP 4\n unset($cache);\n $cache = $new_cache;\n }\n $this->caches[$method][$type] = $cache;\n return $this->caches[$method][$type];\n }\n\n /**\n * Registers a decorator to add to all new cache objects\n * @param\n */\n public function addDecorator($decorator) {\n if (is_string($decorator)) {\n $class = \"HTMLPurifier_DefinitionCache_Decorator_$decorator\";\n $decorator = new $class;\n }\n $this->decorators[$decorator->name] = $decorator;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Doctype.php",
"content": "renderDoctype.\n * If structure changes, please update that function.\n */\nclass HTMLPurifier_Doctype\n{\n /**\n * Full name of doctype\n */\n public $name;\n\n /**\n * List of standard modules (string identifiers or literal objects)\n * that this doctype uses\n */\n public $modules = array();\n\n /**\n * List of modules to use for tidying up code\n */\n public $tidyModules = array();\n\n /**\n * Is the language derived from XML (i.e. XHTML)?\n */\n public $xml = true;\n\n /**\n * List of aliases for this doctype\n */\n public $aliases = array();\n\n /**\n * Public DTD identifier\n */\n public $dtdPublic;\n\n /**\n * System DTD identifier\n */\n public $dtdSystem;\n\n public function __construct($name = null, $xml = true, $modules = array(),\n $tidyModules = array(), $aliases = array(), $dtd_public = null, $dtd_system = null\n ) {\n $this->name = $name;\n $this->xml = $xml;\n $this->modules = $modules;\n $this->tidyModules = $tidyModules;\n $this->aliases = $aliases;\n $this->dtdPublic = $dtd_public;\n $this->dtdSystem = $dtd_system;\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/DoctypeRegistry.php",
"content": "doctypes[$doctype->name] = $doctype;\n $name = $doctype->name;\n // hookup aliases\n foreach ($doctype->aliases as $alias) {\n if (isset($this->doctypes[$alias])) continue;\n $this->aliases[$alias] = $name;\n }\n // remove old aliases\n if (isset($this->aliases[$name])) unset($this->aliases[$name]);\n return $doctype;\n }\n\n /**\n * Retrieves reference to a doctype of a certain name\n * @note This function resolves aliases\n * @note When possible, use the more fully-featured make()\n * @param $doctype Name of doctype\n * @return Editable doctype object\n */\n public function get($doctype) {\n if (isset($this->aliases[$doctype])) $doctype = $this->aliases[$doctype];\n if (!isset($this->doctypes[$doctype])) {\n trigger_error('Doctype ' . htmlspecialchars($doctype) . ' does not exist', E_USER_ERROR);\n $anon = new HTMLPurifier_Doctype($doctype);\n return $anon;\n }\n return $this->doctypes[$doctype];\n }\n\n /**\n * Creates a doctype based on a configuration object,\n * will perform initialization on the doctype\n * @note Use this function to get a copy of doctype that config\n * can hold on to (this is necessary in order to tell\n * Generator whether or not the current document is XML\n * based or not).\n */\n public function make($config) {\n return clone $this->get($this->getDoctypeFromConfig($config));\n }\n\n /**\n * Retrieves the doctype from the configuration object\n */\n public function getDoctypeFromConfig($config) {\n // recommended test\n $doctype = $config->get('HTML.Doctype');\n if (!empty($doctype)) return $doctype;\n $doctype = $config->get('HTML.CustomDoctype');\n if (!empty($doctype)) return $doctype;\n // backwards-compatibility\n if ($config->get('HTML.XHTML')) {\n $doctype = 'XHTML 1.0';\n } else {\n $doctype = 'HTML 4.01';\n }\n if ($config->get('HTML.Strict')) {\n $doctype .= ' Strict';\n } else {\n $doctype .= ' Transitional';\n }\n return $doctype;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ElementDef.php",
"content": "setup(), this array may also\n * contain an array at index 0 that indicates which attribute\n * collections to load into the full array. It may also\n * contain string indentifiers in lieu of HTMLPurifier_AttrDef,\n * see HTMLPurifier_AttrTypes on how they are expanded during\n * HTMLPurifier_HTMLDefinition->setup() processing.\n */\n public $attr = array();\n\n /**\n * Indexed list of tag's HTMLPurifier_AttrTransform to be done before validation\n */\n public $attr_transform_pre = array();\n\n /**\n * Indexed list of tag's HTMLPurifier_AttrTransform to be done after validation\n */\n public $attr_transform_post = array();\n\n /**\n * HTMLPurifier_ChildDef of this tag.\n */\n public $child;\n\n /**\n * Abstract string representation of internal ChildDef rules. See\n * HTMLPurifier_ContentSets for how this is parsed and then transformed\n * into an HTMLPurifier_ChildDef.\n * @warning This is a temporary variable that is not available after\n * being processed by HTMLDefinition\n */\n public $content_model;\n\n /**\n * Value of $child->type, used to determine which ChildDef to use,\n * used in combination with $content_model.\n * @warning This must be lowercase\n * @warning This is a temporary variable that is not available after\n * being processed by HTMLDefinition\n */\n public $content_model_type;\n\n\n\n /**\n * Does the element have a content model (#PCDATA | Inline)*? This\n * is important for chameleon ins and del processing in\n * HTMLPurifier_ChildDef_Chameleon. Dynamically set: modules don't\n * have to worry about this one.\n */\n public $descendants_are_inline = false;\n\n /**\n * List of the names of required attributes this element has. Dynamically\n * populated by HTMLPurifier_HTMLDefinition::getElement\n */\n public $required_attr = array();\n\n /**\n * Lookup table of tags excluded from all descendants of this tag.\n * @note SGML permits exclusions for all descendants, but this is\n * not possible with DTDs or XML Schemas. W3C has elected to\n * use complicated compositions of content_models to simulate\n * exclusion for children, but we go the simpler, SGML-style\n * route of flat-out exclusions, which correctly apply to\n * all descendants and not just children. Note that the XHTML\n * Modularization Abstract Modules are blithely unaware of such\n * distinctions.\n */\n public $excludes = array();\n\n /**\n * This tag is explicitly auto-closed by the following tags.\n */\n public $autoclose = array();\n\n /**\n * Whether or not this is a formatting element affected by the\n * \"Active Formatting Elements\" algorithm.\n */\n public $formatting;\n\n /**\n * Low-level factory constructor for creating new standalone element defs\n */\n public static function create($content_model, $content_model_type, $attr) {\n $def = new HTMLPurifier_ElementDef();\n $def->content_model = $content_model;\n $def->content_model_type = $content_model_type;\n $def->attr = $attr;\n return $def;\n }\n\n /**\n * Merges the values of another element definition into this one.\n * Values from the new element def take precedence if a value is\n * not mergeable.\n */\n public function mergeIn($def) {\n\n // later keys takes precedence\n foreach($def->attr as $k => $v) {\n if ($k === 0) {\n // merge in the includes\n // sorry, no way to override an include\n foreach ($v as $v2) {\n $this->attr[0][] = $v2;\n }\n continue;\n }\n if ($v === false) {\n if (isset($this->attr[$k])) unset($this->attr[$k]);\n continue;\n }\n $this->attr[$k] = $v;\n }\n $this->_mergeAssocArray($this->attr_transform_pre, $def->attr_transform_pre);\n $this->_mergeAssocArray($this->attr_transform_post, $def->attr_transform_post);\n $this->_mergeAssocArray($this->excludes, $def->excludes);\n\n if(!empty($def->content_model)) {\n $this->content_model =\n str_replace(\"#SUPER\", $this->content_model, $def->content_model);\n $this->child = false;\n }\n if(!empty($def->content_model_type)) {\n $this->content_model_type = $def->content_model_type;\n $this->child = false;\n }\n if(!is_null($def->child)) $this->child = $def->child;\n if(!is_null($def->formatting)) $this->formatting = $def->formatting;\n if($def->descendants_are_inline) $this->descendants_are_inline = $def->descendants_are_inline;\n\n }\n\n /**\n * Merges one array into another, removes values which equal false\n * @param $a1 Array by reference that is merged into\n * @param $a2 Array that merges into $a1\n */\n private function _mergeAssocArray(&$a1, $a2) {\n foreach ($a2 as $k => $v) {\n if ($v === false) {\n if (isset($a1[$k])) unset($a1[$k]);\n continue;\n }\n $a1[$k] = $v;\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Encoder.php",
"content": " under the\n * LGPL license. Notes on what changed are inside, but in general,\n * the original code transformed UTF-8 text into an array of integer\n * Unicode codepoints. Understandably, transforming that back to\n * a string would be somewhat expensive, so the function was modded to\n * directly operate on the string. However, this discourages code\n * reuse, and the logic enumerated here would be useful for any\n * function that needs to be able to understand UTF-8 characters.\n * As of right now, only smart lossless character encoding converters\n * would need that, and I'm probably not going to implement them.\n * Once again, PHP 6 should solve all our problems.\n */\n public static function cleanUTF8($str, $force_php = false) {\n\n // UTF-8 validity is checked since PHP 4.3.5\n // This is an optimization: if the string is already valid UTF-8, no\n // need to do PHP stuff. 99% of the time, this will be the case.\n // The regexp matches the XML char production, as well as well as excluding\n // non-SGML codepoints U+007F to U+009F\n if (preg_match('/^[\\x{9}\\x{A}\\x{D}\\x{20}-\\x{7E}\\x{A0}-\\x{D7FF}\\x{E000}-\\x{FFFD}\\x{10000}-\\x{10FFFF}]*$/Du', $str)) {\n return $str;\n }\n\n $mState = 0; // cached expected number of octets after the current octet\n // until the beginning of the next UTF8 character sequence\n $mUcs4 = 0; // cached Unicode character\n $mBytes = 1; // cached expected number of octets in the current sequence\n\n // original code involved an $out that was an array of Unicode\n // codepoints. Instead of having to convert back into UTF-8, we've\n // decided to directly append valid UTF-8 characters onto a string\n // $out once they're done. $char accumulates raw bytes, while $mUcs4\n // turns into the Unicode code point, so there's some redundancy.\n\n $out = '';\n $char = '';\n\n $len = strlen($str);\n for($i = 0; $i < $len; $i++) {\n $in = ord($str{$i});\n $char .= $str[$i]; // append byte to char\n if (0 == $mState) {\n // When mState is zero we expect either a US-ASCII character\n // or a multi-octet sequence.\n if (0 == (0x80 & ($in))) {\n // US-ASCII, pass straight through.\n if (($in <= 31 || $in == 127) &&\n !($in == 9 || $in == 13 || $in == 10) // save \\r\\t\\n\n ) {\n // control characters, remove\n } else {\n $out .= $char;\n }\n // reset\n $char = '';\n $mBytes = 1;\n } elseif (0xC0 == (0xE0 & ($in))) {\n // First octet of 2 octet sequence\n $mUcs4 = ($in);\n $mUcs4 = ($mUcs4 & 0x1F) << 6;\n $mState = 1;\n $mBytes = 2;\n } elseif (0xE0 == (0xF0 & ($in))) {\n // First octet of 3 octet sequence\n $mUcs4 = ($in);\n $mUcs4 = ($mUcs4 & 0x0F) << 12;\n $mState = 2;\n $mBytes = 3;\n } elseif (0xF0 == (0xF8 & ($in))) {\n // First octet of 4 octet sequence\n $mUcs4 = ($in);\n $mUcs4 = ($mUcs4 & 0x07) << 18;\n $mState = 3;\n $mBytes = 4;\n } elseif (0xF8 == (0xFC & ($in))) {\n // First octet of 5 octet sequence.\n //\n // This is illegal because the encoded codepoint must be\n // either:\n // (a) not the shortest form or\n // (b) outside the Unicode range of 0-0x10FFFF.\n // Rather than trying to resynchronize, we will carry on\n // until the end of the sequence and let the later error\n // handling code catch it.\n $mUcs4 = ($in);\n $mUcs4 = ($mUcs4 & 0x03) << 24;\n $mState = 4;\n $mBytes = 5;\n } elseif (0xFC == (0xFE & ($in))) {\n // First octet of 6 octet sequence, see comments for 5\n // octet sequence.\n $mUcs4 = ($in);\n $mUcs4 = ($mUcs4 & 1) << 30;\n $mState = 5;\n $mBytes = 6;\n } else {\n // Current octet is neither in the US-ASCII range nor a\n // legal first octet of a multi-octet sequence.\n $mState = 0;\n $mUcs4 = 0;\n $mBytes = 1;\n $char = '';\n }\n } else {\n // When mState is non-zero, we expect a continuation of the\n // multi-octet sequence\n if (0x80 == (0xC0 & ($in))) {\n // Legal continuation.\n $shift = ($mState - 1) * 6;\n $tmp = $in;\n $tmp = ($tmp & 0x0000003F) << $shift;\n $mUcs4 |= $tmp;\n\n if (0 == --$mState) {\n // End of the multi-octet sequence. mUcs4 now contains\n // the final Unicode codepoint to be output\n\n // Check for illegal sequences and codepoints.\n\n // From Unicode 3.1, non-shortest form is illegal\n if (((2 == $mBytes) && ($mUcs4 < 0x0080)) ||\n ((3 == $mBytes) && ($mUcs4 < 0x0800)) ||\n ((4 == $mBytes) && ($mUcs4 < 0x10000)) ||\n (4 < $mBytes) ||\n // From Unicode 3.2, surrogate characters = illegal\n (($mUcs4 & 0xFFFFF800) == 0xD800) ||\n // Codepoints outside the Unicode range are illegal\n ($mUcs4 > 0x10FFFF)\n ) {\n\n } elseif (0xFEFF != $mUcs4 && // omit BOM\n // check for valid Char unicode codepoints\n (\n 0x9 == $mUcs4 ||\n 0xA == $mUcs4 ||\n 0xD == $mUcs4 ||\n (0x20 <= $mUcs4 && 0x7E >= $mUcs4) ||\n // 7F-9F is not strictly prohibited by XML,\n // but it is non-SGML, and thus we don't allow it\n (0xA0 <= $mUcs4 && 0xD7FF >= $mUcs4) ||\n (0x10000 <= $mUcs4 && 0x10FFFF >= $mUcs4)\n )\n ) {\n $out .= $char;\n }\n // initialize UTF8 cache (reset)\n $mState = 0;\n $mUcs4 = 0;\n $mBytes = 1;\n $char = '';\n }\n } else {\n // ((0xC0 & (*in) != 0x80) && (mState != 0))\n // Incomplete multi-octet sequence.\n // used to result in complete fail, but we'll reset\n $mState = 0;\n $mUcs4 = 0;\n $mBytes = 1;\n $char ='';\n }\n }\n }\n return $out;\n }\n\n /**\n * Translates a Unicode codepoint into its corresponding UTF-8 character.\n * @note Based on Feyd's function at\n * ,\n * which is in public domain.\n * @note While we're going to do code point parsing anyway, a good\n * optimization would be to refuse to translate code points that\n * are non-SGML characters. However, this could lead to duplication.\n * @note This is very similar to the unichr function in\n * maintenance/generate-entity-file.php (although this is superior,\n * due to its sanity checks).\n */\n\n // +----------+----------+----------+----------+\n // | 33222222 | 22221111 | 111111 | |\n // | 10987654 | 32109876 | 54321098 | 76543210 | bit\n // +----------+----------+----------+----------+\n // | | | | 0xxxxxxx | 1 byte 0x00000000..0x0000007F\n // | | | 110yyyyy | 10xxxxxx | 2 byte 0x00000080..0x000007FF\n // | | 1110zzzz | 10yyyyyy | 10xxxxxx | 3 byte 0x00000800..0x0000FFFF\n // | 11110www | 10wwzzzz | 10yyyyyy | 10xxxxxx | 4 byte 0x00010000..0x0010FFFF\n // +----------+----------+----------+----------+\n // | 00000000 | 00011111 | 11111111 | 11111111 | Theoretical upper limit of legal scalars: 2097151 (0x001FFFFF)\n // | 00000000 | 00010000 | 11111111 | 11111111 | Defined upper limit of legal scalar codes\n // +----------+----------+----------+----------+\n\n public static function unichr($code) {\n if($code > 1114111 or $code < 0 or\n ($code >= 55296 and $code <= 57343) ) {\n // bits are set outside the \"valid\" range as defined\n // by UNICODE 4.1.0\n return '';\n }\n\n $x = $y = $z = $w = 0;\n if ($code < 128) {\n // regular ASCII character\n $x = $code;\n } else {\n // set up bits for UTF-8\n $x = ($code & 63) | 128;\n if ($code < 2048) {\n $y = (($code & 2047) >> 6) | 192;\n } else {\n $y = (($code & 4032) >> 6) | 128;\n if($code < 65536) {\n $z = (($code >> 12) & 15) | 224;\n } else {\n $z = (($code >> 12) & 63) | 128;\n $w = (($code >> 18) & 7) | 240;\n }\n }\n }\n // set up the actual character\n $ret = '';\n if($w) $ret .= chr($w);\n if($z) $ret .= chr($z);\n if($y) $ret .= chr($y);\n $ret .= chr($x);\n\n return $ret;\n }\n\n /**\n * Converts a string to UTF-8 based on configuration.\n */\n public static function convertToUTF8($str, $config, $context) {\n $encoding = $config->get('Core.Encoding');\n if ($encoding === 'utf-8') return $str;\n static $iconv = null;\n if ($iconv === null) $iconv = function_exists('iconv');\n set_error_handler(array('HTMLPurifier_Encoder', 'muteErrorHandler'));\n if ($iconv && !$config->get('Test.ForceNoIconv')) {\n $str = iconv($encoding, 'utf-8//IGNORE', $str);\n if ($str === false) {\n // $encoding is not a valid encoding\n restore_error_handler();\n trigger_error('Invalid encoding ' . $encoding, E_USER_ERROR);\n return '';\n }\n // If the string is bjorked by Shift_JIS or a similar encoding\n // that doesn't support all of ASCII, convert the naughty\n // characters to their true byte-wise ASCII/UTF-8 equivalents.\n $str = strtr($str, HTMLPurifier_Encoder::testEncodingSupportsASCII($encoding));\n restore_error_handler();\n return $str;\n } elseif ($encoding === 'iso-8859-1') {\n $str = utf8_encode($str);\n restore_error_handler();\n return $str;\n }\n trigger_error('Encoding not supported, please install iconv', E_USER_ERROR);\n }\n\n /**\n * Converts a string from UTF-8 based on configuration.\n * @note Currently, this is a lossy conversion, with unexpressable\n * characters being omitted.\n */\n public static function convertFromUTF8($str, $config, $context) {\n $encoding = $config->get('Core.Encoding');\n if ($encoding === 'utf-8') return $str;\n static $iconv = null;\n if ($iconv === null) $iconv = function_exists('iconv');\n if ($escape = $config->get('Core.EscapeNonASCIICharacters')) {\n $str = HTMLPurifier_Encoder::convertToASCIIDumbLossless($str);\n }\n set_error_handler(array('HTMLPurifier_Encoder', 'muteErrorHandler'));\n if ($iconv && !$config->get('Test.ForceNoIconv')) {\n // Undo our previous fix in convertToUTF8, otherwise iconv will barf\n $ascii_fix = HTMLPurifier_Encoder::testEncodingSupportsASCII($encoding);\n if (!$escape && !empty($ascii_fix)) {\n $clear_fix = array();\n foreach ($ascii_fix as $utf8 => $native) $clear_fix[$utf8] = '';\n $str = strtr($str, $clear_fix);\n }\n $str = strtr($str, array_flip($ascii_fix));\n // Normal stuff\n $str = iconv('utf-8', $encoding . '//IGNORE', $str);\n restore_error_handler();\n return $str;\n } elseif ($encoding === 'iso-8859-1') {\n $str = utf8_decode($str);\n restore_error_handler();\n return $str;\n }\n trigger_error('Encoding not supported', E_USER_ERROR);\n }\n\n /**\n * Lossless (character-wise) conversion of HTML to ASCII\n * @param $str UTF-8 string to be converted to ASCII\n * @returns ASCII encoded string with non-ASCII character entity-ized\n * @warning Adapted from MediaWiki, claiming fair use: this is a common\n * algorithm. If you disagree with this license fudgery,\n * implement it yourself.\n * @note Uses decimal numeric entities since they are best supported.\n * @note This is a DUMB function: it has no concept of keeping\n * character entities that the projected character encoding\n * can allow. We could possibly implement a smart version\n * but that would require it to also know which Unicode\n * codepoints the charset supported (not an easy task).\n * @note Sort of with cleanUTF8() but it assumes that $str is\n * well-formed UTF-8\n */\n public static function convertToASCIIDumbLossless($str) {\n $bytesleft = 0;\n $result = '';\n $working = 0;\n $len = strlen($str);\n for( $i = 0; $i < $len; $i++ ) {\n $bytevalue = ord( $str[$i] );\n if( $bytevalue <= 0x7F ) { //0xxx xxxx\n $result .= chr( $bytevalue );\n $bytesleft = 0;\n } elseif( $bytevalue <= 0xBF ) { //10xx xxxx\n $working = $working << 6;\n $working += ($bytevalue & 0x3F);\n $bytesleft--;\n if( $bytesleft <= 0 ) {\n $result .= \"&#\" . $working . \";\";\n }\n } elseif( $bytevalue <= 0xDF ) { //110x xxxx\n $working = $bytevalue & 0x1F;\n $bytesleft = 1;\n } elseif( $bytevalue <= 0xEF ) { //1110 xxxx\n $working = $bytevalue & 0x0F;\n $bytesleft = 2;\n } else { //1111 0xxx\n $working = $bytevalue & 0x07;\n $bytesleft = 3;\n }\n }\n return $result;\n }\n\n /**\n * This expensive function tests whether or not a given character\n * encoding supports ASCII. 7/8-bit encodings like Shift_JIS will\n * fail this test, and require special processing. Variable width\n * encodings shouldn't ever fail.\n *\n * @param string $encoding Encoding name to test, as per iconv format\n * @param bool $bypass Whether or not to bypass the precompiled arrays.\n * @return Array of UTF-8 characters to their corresponding ASCII,\n * which can be used to \"undo\" any overzealous iconv action.\n */\n public static function testEncodingSupportsASCII($encoding, $bypass = false) {\n static $encodings = array();\n if (!$bypass) {\n if (isset($encodings[$encoding])) return $encodings[$encoding];\n $lenc = strtolower($encoding);\n switch ($lenc) {\n case 'shift_jis':\n return array(\"\\xC2\\xA5\" => '\\\\', \"\\xE2\\x80\\xBE\" => '~');\n case 'johab':\n return array(\"\\xE2\\x82\\xA9\" => '\\\\');\n }\n if (strpos($lenc, 'iso-8859-') === 0) return array();\n }\n $ret = array();\n set_error_handler(array('HTMLPurifier_Encoder', 'muteErrorHandler'));\n if (iconv('UTF-8', $encoding, 'a') === false) return false;\n for ($i = 0x20; $i <= 0x7E; $i++) { // all printable ASCII chars\n $c = chr($i); // UTF-8 char\n $r = iconv('UTF-8', \"$encoding//IGNORE\", $c); // initial conversion\n if (\n $r === '' ||\n // This line is needed for iconv implementations that do not\n // omit characters that do not exist in the target character set\n ($r === $c && iconv($encoding, 'UTF-8//IGNORE', $r) !== $c)\n ) {\n // Reverse engineer: what's the UTF-8 equiv of this byte\n // sequence? This assumes that there's no variable width\n // encoding that doesn't support ASCII.\n $ret[iconv($encoding, 'UTF-8//IGNORE', $c)] = $c;\n }\n }\n restore_error_handler();\n $encodings[$encoding] = $ret;\n return $ret;\n }\n\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/EntityLookup/entities.ser",
"content": "a:246:{s:4:\"nbsp\";s:2:\" \";s:5:\"iexcl\";s:2:\"¡\";s:4:\"cent\";s:2:\"¢\";s:5:\"pound\";s:2:\"£\";s:6:\"curren\";s:2:\"¤\";s:3:\"yen\";s:2:\"¥\";s:6:\"brvbar\";s:2:\"¦\";s:4:\"sect\";s:2:\"§\";s:3:\"uml\";s:2:\"¨\";s:4:\"copy\";s:2:\"©\";s:4:\"ordf\";s:2:\"ª\";s:5:\"laquo\";s:2:\"«\";s:3:\"not\";s:2:\"¬\";s:3:\"shy\";s:2:\"\";s:3:\"reg\";s:2:\"®\";s:4:\"macr\";s:2:\"¯\";s:3:\"deg\";s:2:\"°\";s:6:\"plusmn\";s:2:\"±\";s:5:\"acute\";s:2:\"´\";s:5:\"micro\";s:2:\"µ\";s:4:\"para\";s:2:\"¶\";s:6:\"middot\";s:2:\"·\";s:5:\"cedil\";s:2:\"¸\";s:4:\"ordm\";s:2:\"º\";s:5:\"raquo\";s:2:\"»\";s:6:\"iquest\";s:2:\"¿\";s:6:\"Agrave\";s:2:\"À\";s:6:\"Aacute\";s:2:\"Á\";s:5:\"Acirc\";s:2:\"Â\";s:6:\"Atilde\";s:2:\"Ã\";s:4:\"Auml\";s:2:\"Ä\";s:5:\"Aring\";s:2:\"Å\";s:5:\"AElig\";s:2:\"Æ\";s:6:\"Ccedil\";s:2:\"Ç\";s:6:\"Egrave\";s:2:\"È\";s:6:\"Eacute\";s:2:\"É\";s:5:\"Ecirc\";s:2:\"Ê\";s:4:\"Euml\";s:2:\"Ë\";s:6:\"Igrave\";s:2:\"Ì\";s:6:\"Iacute\";s:2:\"Í\";s:5:\"Icirc\";s:2:\"Î\";s:4:\"Iuml\";s:2:\"Ï\";s:3:\"ETH\";s:2:\"Ð\";s:6:\"Ntilde\";s:2:\"Ñ\";s:6:\"Ograve\";s:2:\"Ò\";s:6:\"Oacute\";s:2:\"Ó\";s:5:\"Ocirc\";s:2:\"Ô\";s:6:\"Otilde\";s:2:\"Õ\";s:4:\"Ouml\";s:2:\"Ö\";s:5:\"times\";s:2:\"×\";s:6:\"Oslash\";s:2:\"Ø\";s:6:\"Ugrave\";s:2:\"Ù\";s:6:\"Uacute\";s:2:\"Ú\";s:5:\"Ucirc\";s:2:\"Û\";s:4:\"Uuml\";s:2:\"Ü\";s:6:\"Yacute\";s:2:\"Ý\";s:5:\"THORN\";s:2:\"Þ\";s:5:\"szlig\";s:2:\"ß\";s:6:\"agrave\";s:2:\"à\";s:6:\"aacute\";s:2:\"á\";s:5:\"acirc\";s:2:\"â\";s:6:\"atilde\";s:2:\"ã\";s:4:\"auml\";s:2:\"ä\";s:5:\"aring\";s:2:\"å\";s:5:\"aelig\";s:2:\"æ\";s:6:\"ccedil\";s:2:\"ç\";s:6:\"egrave\";s:2:\"è\";s:6:\"eacute\";s:2:\"é\";s:5:\"ecirc\";s:2:\"ê\";s:4:\"euml\";s:2:\"ë\";s:6:\"igrave\";s:2:\"ì\";s:6:\"iacute\";s:2:\"í\";s:5:\"icirc\";s:2:\"î\";s:4:\"iuml\";s:2:\"ï\";s:3:\"eth\";s:2:\"ð\";s:6:\"ntilde\";s:2:\"ñ\";s:6:\"ograve\";s:2:\"ò\";s:6:\"oacute\";s:2:\"ó\";s:5:\"ocirc\";s:2:\"ô\";s:6:\"otilde\";s:2:\"õ\";s:4:\"ouml\";s:2:\"ö\";s:6:\"divide\";s:2:\"÷\";s:6:\"oslash\";s:2:\"ø\";s:6:\"ugrave\";s:2:\"ù\";s:6:\"uacute\";s:2:\"ú\";s:5:\"ucirc\";s:2:\"û\";s:4:\"uuml\";s:2:\"ü\";s:6:\"yacute\";s:2:\"ý\";s:5:\"thorn\";s:2:\"þ\";s:4:\"yuml\";s:2:\"ÿ\";s:4:\"quot\";s:1:\"\"\";s:3:\"amp\";s:1:\"&\";s:2:\"lt\";s:1:\"<\";s:2:\"gt\";s:1:\">\";s:4:\"apos\";s:1:\"'\";s:5:\"OElig\";s:2:\"Œ\";s:5:\"oelig\";s:2:\"œ\";s:6:\"Scaron\";s:2:\"Š\";s:6:\"scaron\";s:2:\"š\";s:4:\"Yuml\";s:2:\"Ÿ\";s:4:\"circ\";s:2:\"ˆ\";s:5:\"tilde\";s:2:\"˜\";s:4:\"ensp\";s:3:\" \";s:4:\"emsp\";s:3:\" \";s:6:\"thinsp\";s:3:\" \";s:4:\"zwnj\";s:3:\"\";s:3:\"zwj\";s:3:\"\";s:3:\"lrm\";s:3:\"\";s:3:\"rlm\";s:3:\"\";s:5:\"ndash\";s:3:\"–\";s:5:\"mdash\";s:3:\"—\";s:5:\"lsquo\";s:3:\"‘\";s:5:\"rsquo\";s:3:\"’\";s:5:\"sbquo\";s:3:\"‚\";s:5:\"ldquo\";s:3:\"“\";s:5:\"rdquo\";s:3:\"”\";s:5:\"bdquo\";s:3:\"„\";s:6:\"dagger\";s:3:\"†\";s:6:\"Dagger\";s:3:\"‡\";s:6:\"permil\";s:3:\"‰\";s:6:\"lsaquo\";s:3:\"‹\";s:6:\"rsaquo\";s:3:\"›\";s:4:\"euro\";s:3:\"€\";s:4:\"fnof\";s:2:\"ƒ\";s:5:\"Alpha\";s:2:\"Α\";s:4:\"Beta\";s:2:\"Β\";s:5:\"Gamma\";s:2:\"Γ\";s:5:\"Delta\";s:2:\"Δ\";s:7:\"Epsilon\";s:2:\"Ε\";s:4:\"Zeta\";s:2:\"Ζ\";s:3:\"Eta\";s:2:\"Η\";s:5:\"Theta\";s:2:\"Θ\";s:4:\"Iota\";s:2:\"Ι\";s:5:\"Kappa\";s:2:\"Κ\";s:6:\"Lambda\";s:2:\"Λ\";s:2:\"Mu\";s:2:\"Μ\";s:2:\"Nu\";s:2:\"Ν\";s:2:\"Xi\";s:2:\"Ξ\";s:7:\"Omicron\";s:2:\"Ο\";s:2:\"Pi\";s:2:\"Π\";s:3:\"Rho\";s:2:\"Ρ\";s:5:\"Sigma\";s:2:\"Σ\";s:3:\"Tau\";s:2:\"Τ\";s:7:\"Upsilon\";s:2:\"Υ\";s:3:\"Phi\";s:2:\"Φ\";s:3:\"Chi\";s:2:\"Χ\";s:3:\"Psi\";s:2:\"Ψ\";s:5:\"Omega\";s:2:\"Ω\";s:5:\"alpha\";s:2:\"α\";s:4:\"beta\";s:2:\"β\";s:5:\"gamma\";s:2:\"γ\";s:5:\"delta\";s:2:\"δ\";s:7:\"epsilon\";s:2:\"ε\";s:4:\"zeta\";s:2:\"ζ\";s:3:\"eta\";s:2:\"η\";s:5:\"theta\";s:2:\"θ\";s:4:\"iota\";s:2:\"ι\";s:5:\"kappa\";s:2:\"κ\";s:6:\"lambda\";s:2:\"λ\";s:2:\"mu\";s:2:\"μ\";s:2:\"nu\";s:2:\"ν\";s:2:\"xi\";s:2:\"ξ\";s:7:\"omicron\";s:2:\"ο\";s:2:\"pi\";s:2:\"π\";s:3:\"rho\";s:2:\"ρ\";s:6:\"sigmaf\";s:2:\"ς\";s:5:\"sigma\";s:2:\"σ\";s:3:\"tau\";s:2:\"τ\";s:7:\"upsilon\";s:2:\"υ\";s:3:\"phi\";s:2:\"φ\";s:3:\"chi\";s:2:\"χ\";s:3:\"psi\";s:2:\"ψ\";s:5:\"omega\";s:2:\"ω\";s:8:\"thetasym\";s:2:\"ϑ\";s:5:\"upsih\";s:2:\"ϒ\";s:3:\"piv\";s:2:\"ϖ\";s:4:\"bull\";s:3:\"•\";s:6:\"hellip\";s:3:\"…\";s:5:\"prime\";s:3:\"′\";s:5:\"Prime\";s:3:\"″\";s:5:\"oline\";s:3:\"‾\";s:5:\"frasl\";s:3:\"⁄\";s:6:\"weierp\";s:3:\"℘\";s:5:\"image\";s:3:\"ℑ\";s:4:\"real\";s:3:\"ℜ\";s:5:\"trade\";s:3:\"™\";s:7:\"alefsym\";s:3:\"ℵ\";s:4:\"larr\";s:3:\"←\";s:4:\"uarr\";s:3:\"↑\";s:4:\"rarr\";s:3:\"→\";s:4:\"darr\";s:3:\"↓\";s:4:\"harr\";s:3:\"↔\";s:5:\"crarr\";s:3:\"↵\";s:4:\"lArr\";s:3:\"⇐\";s:4:\"uArr\";s:3:\"⇑\";s:4:\"rArr\";s:3:\"⇒\";s:4:\"dArr\";s:3:\"⇓\";s:4:\"hArr\";s:3:\"⇔\";s:6:\"forall\";s:3:\"∀\";s:4:\"part\";s:3:\"∂\";s:5:\"exist\";s:3:\"∃\";s:5:\"empty\";s:3:\"∅\";s:5:\"nabla\";s:3:\"∇\";s:4:\"isin\";s:3:\"∈\";s:5:\"notin\";s:3:\"∉\";s:2:\"ni\";s:3:\"∋\";s:4:\"prod\";s:3:\"∏\";s:3:\"sum\";s:3:\"∑\";s:5:\"minus\";s:3:\"−\";s:6:\"lowast\";s:3:\"∗\";s:5:\"radic\";s:3:\"√\";s:4:\"prop\";s:3:\"∝\";s:5:\"infin\";s:3:\"∞\";s:3:\"ang\";s:3:\"∠\";s:3:\"and\";s:3:\"∧\";s:2:\"or\";s:3:\"∨\";s:3:\"cap\";s:3:\"∩\";s:3:\"cup\";s:3:\"∪\";s:3:\"int\";s:3:\"∫\";s:3:\"sim\";s:3:\"∼\";s:4:\"cong\";s:3:\"≅\";s:5:\"asymp\";s:3:\"≈\";s:2:\"ne\";s:3:\"≠\";s:5:\"equiv\";s:3:\"≡\";s:2:\"le\";s:3:\"≤\";s:2:\"ge\";s:3:\"≥\";s:3:\"sub\";s:3:\"⊂\";s:3:\"sup\";s:3:\"⊃\";s:4:\"nsub\";s:3:\"⊄\";s:4:\"sube\";s:3:\"⊆\";s:4:\"supe\";s:3:\"⊇\";s:5:\"oplus\";s:3:\"⊕\";s:6:\"otimes\";s:3:\"⊗\";s:4:\"perp\";s:3:\"⊥\";s:4:\"sdot\";s:3:\"⋅\";s:5:\"lceil\";s:3:\"⌈\";s:5:\"rceil\";s:3:\"⌉\";s:6:\"lfloor\";s:3:\"⌊\";s:6:\"rfloor\";s:3:\"⌋\";s:4:\"lang\";s:3:\"〈\";s:4:\"rang\";s:3:\"〉\";s:3:\"loz\";s:3:\"◊\";s:6:\"spades\";s:3:\"♠\";s:5:\"clubs\";s:3:\"♣\";s:6:\"hearts\";s:3:\"♥\";s:5:\"diams\";s:3:\"♦\";}"
},
{
"path": "libraries/purifier/HTMLPurifier/EntityLookup.php",
"content": "table = unserialize(file_get_contents($file));\n }\n\n /**\n * Retrieves sole instance of the object.\n * @param Optional prototype of custom lookup table to overload with.\n */\n public static function instance($prototype = false) {\n // no references, since PHP doesn't copy unless modified\n static $instance = null;\n if ($prototype) {\n $instance = $prototype;\n } elseif (!$instance) {\n $instance = new HTMLPurifier_EntityLookup();\n $instance->setup();\n }\n return $instance;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/EntityParser.php",
"content": " '\"',\n 38 => '&',\n 39 => \"'\",\n 60 => '<',\n 62 => '>'\n );\n\n /**\n * Stripped entity names to decimal conversion table for special entities.\n */\n protected $_special_ent2dec =\n array(\n 'quot' => 34,\n 'amp' => 38,\n 'lt' => 60,\n 'gt' => 62\n );\n\n /**\n * Substitutes non-special entities with their parsed equivalents. Since\n * running this whenever you have parsed character is t3h 5uck, we run\n * it before everything else.\n *\n * @param $string String to have non-special entities parsed.\n * @returns Parsed string.\n */\n public function substituteNonSpecialEntities($string) {\n // it will try to detect missing semicolons, but don't rely on it\n return preg_replace_callback(\n $this->_substituteEntitiesRegex,\n array($this, 'nonSpecialEntityCallback'),\n $string\n );\n }\n\n /**\n * Callback function for substituteNonSpecialEntities() that does the work.\n *\n * @param $matches PCRE matches array, with 0 the entire match, and\n * either index 1, 2 or 3 set with a hex value, dec value,\n * or string (respectively).\n * @returns Replacement string.\n */\n\n protected function nonSpecialEntityCallback($matches) {\n // replaces all but big five\n $entity = $matches[0];\n $is_num = (@$matches[0][1] === '#');\n if ($is_num) {\n $is_hex = (@$entity[2] === 'x');\n $code = $is_hex ? hexdec($matches[1]) : (int) $matches[2];\n\n // abort for special characters\n if (isset($this->_special_dec2str[$code])) return $entity;\n\n return HTMLPurifier_Encoder::unichr($code);\n } else {\n if (isset($this->_special_ent2dec[$matches[3]])) return $entity;\n if (!$this->_entity_lookup) {\n $this->_entity_lookup = HTMLPurifier_EntityLookup::instance();\n }\n if (isset($this->_entity_lookup->table[$matches[3]])) {\n return $this->_entity_lookup->table[$matches[3]];\n } else {\n return $entity;\n }\n }\n }\n\n /**\n * Substitutes only special entities with their parsed equivalents.\n *\n * @notice We try to avoid calling this function because otherwise, it\n * would have to be called a lot (for every parsed section).\n *\n * @param $string String to have non-special entities parsed.\n * @returns Parsed string.\n */\n public function substituteSpecialEntities($string) {\n return preg_replace_callback(\n $this->_substituteEntitiesRegex,\n array($this, 'specialEntityCallback'),\n $string);\n }\n\n /**\n * Callback function for substituteSpecialEntities() that does the work.\n *\n * This callback has same syntax as nonSpecialEntityCallback().\n *\n * @param $matches PCRE-style matches array, with 0 the entire match, and\n * either index 1, 2 or 3 set with a hex value, dec value,\n * or string (respectively).\n * @returns Replacement string.\n */\n protected function specialEntityCallback($matches) {\n $entity = $matches[0];\n $is_num = (@$matches[0][1] === '#');\n if ($is_num) {\n $is_hex = (@$entity[2] === 'x');\n $int = $is_hex ? hexdec($matches[1]) : (int) $matches[2];\n return isset($this->_special_dec2str[$int]) ?\n $this->_special_dec2str[$int] :\n $entity;\n } else {\n return isset($this->_special_ent2dec[$matches[3]]) ?\n $this->_special_ent2dec[$matches[3]] :\n $entity;\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ErrorCollector.php",
"content": "locale =& $context->get('Locale');\n $this->context = $context;\n $this->_current =& $this->_stacks[0];\n $this->errors =& $this->_stacks[0];\n }\n\n /**\n * Sends an error message to the collector for later use\n * @param $severity int Error severity, PHP error style (don't use E_USER_)\n * @param $msg string Error message text\n * @param $subst1 string First substitution for $msg\n * @param $subst2 string ...\n */\n public function send($severity, $msg) {\n\n $args = array();\n if (func_num_args() > 2) {\n $args = func_get_args();\n array_shift($args);\n unset($args[0]);\n }\n\n $token = $this->context->get('CurrentToken', true);\n $line = $token ? $token->line : $this->context->get('CurrentLine', true);\n $col = $token ? $token->col : $this->context->get('CurrentCol', true);\n $attr = $this->context->get('CurrentAttr', true);\n\n // perform special substitutions, also add custom parameters\n $subst = array();\n if (!is_null($token)) {\n $args['CurrentToken'] = $token;\n }\n if (!is_null($attr)) {\n $subst['$CurrentAttr.Name'] = $attr;\n if (isset($token->attr[$attr])) $subst['$CurrentAttr.Value'] = $token->attr[$attr];\n }\n\n if (empty($args)) {\n $msg = $this->locale->getMessage($msg);\n } else {\n $msg = $this->locale->formatMessage($msg, $args);\n }\n\n if (!empty($subst)) $msg = strtr($msg, $subst);\n\n // (numerically indexed)\n $error = array(\n self::LINENO => $line,\n self::SEVERITY => $severity,\n self::MESSAGE => $msg,\n self::CHILDREN => array()\n );\n $this->_current[] = $error;\n\n\n // NEW CODE BELOW ...\n\n $struct = null;\n // Top-level errors are either:\n // TOKEN type, if $value is set appropriately, or\n // \"syntax\" type, if $value is null\n $new_struct = new HTMLPurifier_ErrorStruct();\n $new_struct->type = HTMLPurifier_ErrorStruct::TOKEN;\n if ($token) $new_struct->value = clone $token;\n if (is_int($line) && is_int($col)) {\n if (isset($this->lines[$line][$col])) {\n $struct = $this->lines[$line][$col];\n } else {\n $struct = $this->lines[$line][$col] = $new_struct;\n }\n // These ksorts may present a performance problem\n ksort($this->lines[$line], SORT_NUMERIC);\n } else {\n if (isset($this->lines[-1])) {\n $struct = $this->lines[-1];\n } else {\n $struct = $this->lines[-1] = $new_struct;\n }\n }\n ksort($this->lines, SORT_NUMERIC);\n\n // Now, check if we need to operate on a lower structure\n if (!empty($attr)) {\n $struct = $struct->getChild(HTMLPurifier_ErrorStruct::ATTR, $attr);\n if (!$struct->value) {\n $struct->value = array($attr, 'PUT VALUE HERE');\n }\n }\n if (!empty($cssprop)) {\n $struct = $struct->getChild(HTMLPurifier_ErrorStruct::CSSPROP, $cssprop);\n if (!$struct->value) {\n // if we tokenize CSS this might be a little more difficult to do\n $struct->value = array($cssprop, 'PUT VALUE HERE');\n }\n }\n\n // Ok, structs are all setup, now time to register the error\n $struct->addError($severity, $msg);\n }\n\n /**\n * Retrieves raw error data for custom formatter to use\n * @param List of arrays in format of array(line of error,\n * error severity, error message,\n * recursive sub-errors array)\n */\n public function getRaw() {\n return $this->errors;\n }\n\n /**\n * Default HTML formatting implementation for error messages\n * @param $config Configuration array, vital for HTML output nature\n * @param $errors Errors array to display; used for recursion.\n */\n public function getHTMLFormatted($config, $errors = null) {\n $ret = array();\n\n $this->generator = new HTMLPurifier_Generator($config, $this->context);\n if ($errors === null) $errors = $this->errors;\n\n // 'At line' message needs to be removed\n\n // generation code for new structure goes here. It needs to be recursive.\n foreach ($this->lines as $line => $col_array) {\n if ($line == -1) continue;\n foreach ($col_array as $col => $struct) {\n $this->_renderStruct($ret, $struct, $line, $col);\n }\n }\n if (isset($this->lines[-1])) {\n $this->_renderStruct($ret, $this->lines[-1]);\n }\n\n if (empty($errors)) {\n return '' . $this->locale->getMessage('ErrorCollector: No errors') . '
';\n } else {\n return '- ' . implode('
- ', $ret) . '
';\n }\n\n }\n\n private function _renderStruct(&$ret, $struct, $line = null, $col = null) {\n $stack = array($struct);\n $context_stack = array(array());\n while ($current = array_pop($stack)) {\n $context = array_pop($context_stack);\n foreach ($current->errors as $error) {\n list($severity, $msg) = $error;\n $string = '';\n $string .= '';\n // W3C uses an icon to indicate the severity of the error.\n $error = $this->locale->getErrorName($severity);\n $string .= \"$error \";\n if (!is_null($line) && !is_null($col)) {\n $string .= \"Line $line, Column $col: \";\n } else {\n $string .= 'End of Document: ';\n }\n $string .= '' . $this->generator->escape($msg) . ' ';\n $string .= '';\n // Here, have a marker for the character on the column appropriate.\n // Be sure to clip extremely long lines.\n //$string .= '';\n //$string .= '';\n //$string .= '
';\n $ret[] = $string;\n }\n foreach ($current->children as $type => $array) {\n $context[] = $current;\n $stack = array_merge($stack, array_reverse($array, true));\n for ($i = count($array); $i > 0; $i--) {\n $context_stack[] = $context;\n }\n }\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/ErrorStruct.php",
"content": "children[$type][$id])) {\n $this->children[$type][$id] = new HTMLPurifier_ErrorStruct();\n $this->children[$type][$id]->type = $type;\n }\n return $this->children[$type][$id];\n }\n\n public function addError($severity, $message) {\n $this->errors[] = array($severity, $message);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Exception.php",
"content": " blocks from input HTML, cleans them up\n * using CSSTidy, and then places them in $purifier->context->get('StyleBlocks')\n * so they can be used elsewhere in the document.\n *\n * @note\n * See tests/HTMLPurifier/Filter/ExtractStyleBlocksTest.php for\n * sample usage.\n *\n * @note\n * This filter can also be used on stylesheets not included in the\n * document--something purists would probably prefer. Just directly\n * call HTMLPurifier_Filter_ExtractStyleBlocks->cleanCSS()\n */\nclass HTMLPurifier_Filter_ExtractStyleBlocks extends HTMLPurifier_Filter\n{\n\n public $name = 'ExtractStyleBlocks';\n private $_styleMatches = array();\n private $_tidy;\n\n public function __construct() {\n $this->_tidy = new csstidy();\n }\n\n /**\n * Save the contents of CSS blocks to style matches\n * @param $matches preg_replace style $matches array\n */\n protected function styleCallback($matches) {\n $this->_styleMatches[] = $matches[1];\n }\n\n /**\n * Removes inline #isU', array($this, 'styleCallback'), $html);\n $style_blocks = $this->_styleMatches;\n $this->_styleMatches = array(); // reset\n $context->register('StyleBlocks', $style_blocks); // $context must not be reused\n if ($this->_tidy) {\n foreach ($style_blocks as &$style) {\n $style = $this->cleanCSS($style, $config, $context);\n }\n }\n return $html;\n }\n\n /**\n * Takes CSS (the stuff found in in a font-family prop).\n if ($config->get('Filter.ExtractStyleBlocks.Escaping')) {\n $css = str_replace(\n array('<', '>', '&'),\n array('\\3C ', '\\3E ', '\\26 '),\n $css\n );\n }\n return $css;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Filter/YouTube.php",
"content": "]+>.+?'.\n 'http://www.youtube.com/v/([A-Za-z0-9\\-_]+).+?#s';\n $pre_replace = '';\n return preg_replace($pre_regex, $pre_replace, $html);\n }\n\n public function postFilter($html, $config, $context) {\n $post_regex = '##';\n return preg_replace_callback($post_regex, array($this, 'postFilterCallback'), $html);\n }\n\n protected function armorUrl($url) {\n return str_replace('--', '--', $url);\n }\n\n protected function postFilterCallback($matches) {\n $url = $this->armorUrl($matches[1]);\n return '';\n\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Filter.php",
"content": "preFilter,\n * 2->preFilter, 3->preFilter, purify, 3->postFilter, 2->postFilter,\n * 1->postFilter.\n *\n * @note Methods are not declared abstract as it is perfectly legitimate\n * for an implementation not to want anything to happen on a step\n */\n\nclass HTMLPurifier_Filter\n{\n\n /**\n * Name of the filter for identification purposes\n */\n public $name;\n\n /**\n * Pre-processor function, handles HTML before HTML Purifier\n */\n public function preFilter($html, $config, $context) {\n return $html;\n }\n\n /**\n * Post-processor function, handles HTML after HTML Purifier\n */\n public function postFilter($html, $config, $context) {\n return $html;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Generator.php",
"content": " tags\n */\n private $_scriptFix = false;\n\n /**\n * Cache of HTMLDefinition during HTML output to determine whether or\n * not attributes should be minimized.\n */\n private $_def;\n\n /**\n * Cache of %Output.SortAttr\n */\n private $_sortAttr;\n\n /**\n * Configuration for the generator\n */\n protected $config;\n\n /**\n * @param $config Instance of HTMLPurifier_Config\n * @param $context Instance of HTMLPurifier_Context\n */\n public function __construct($config, $context) {\n $this->config = $config;\n $this->_scriptFix = $config->get('Output.CommentScriptContents');\n $this->_sortAttr = $config->get('Output.SortAttr');\n $this->_def = $config->getHTMLDefinition();\n $this->_xhtml = $this->_def->doctype->xml;\n }\n\n /**\n * Generates HTML from an array of tokens.\n * @param $tokens Array of HTMLPurifier_Token\n * @param $config HTMLPurifier_Config object\n * @return Generated HTML\n */\n public function generateFromTokens($tokens) {\n if (!$tokens) return '';\n\n // Basic algorithm\n $html = '';\n for ($i = 0, $size = count($tokens); $i < $size; $i++) {\n if ($this->_scriptFix && $tokens[$i]->name === 'script'\n && $i + 2 < $size && $tokens[$i+2] instanceof HTMLPurifier_Token_End) {\n // script special case\n // the contents of the script block must be ONE token\n // for this to work.\n $html .= $this->generateFromToken($tokens[$i++]);\n $html .= $this->generateScriptFromToken($tokens[$i++]);\n }\n $html .= $this->generateFromToken($tokens[$i]);\n }\n\n // Tidy cleanup\n if (extension_loaded('tidy') && $this->config->get('Output.TidyFormat')) {\n $tidy = new Tidy;\n $tidy->parseString($html, array(\n 'indent'=> true,\n 'output-xhtml' => $this->_xhtml,\n 'show-body-only' => true,\n 'indent-spaces' => 2,\n 'wrap' => 68,\n ), 'utf8');\n $tidy->cleanRepair();\n $html = (string) $tidy; // explicit cast necessary\n }\n\n // Normalize newlines to system defined value\n $nl = $this->config->get('Output.Newline');\n if ($nl === null) $nl = PHP_EOL;\n if ($nl !== \"\\n\") $html = str_replace(\"\\n\", $nl, $html);\n return $html;\n }\n\n /**\n * Generates HTML from a single token.\n * @param $token HTMLPurifier_Token object.\n * @return Generated HTML\n */\n public function generateFromToken($token) {\n if (!$token instanceof HTMLPurifier_Token) {\n trigger_error('Cannot generate HTML from non-HTMLPurifier_Token object', E_USER_WARNING);\n return '';\n\n } elseif ($token instanceof HTMLPurifier_Token_Start) {\n $attr = $this->generateAttributes($token->attr, $token->name);\n return '<' . $token->name . ($attr ? ' ' : '') . $attr . '>';\n\n } elseif ($token instanceof HTMLPurifier_Token_End) {\n return 'name . '>';\n\n } elseif ($token instanceof HTMLPurifier_Token_Empty) {\n $attr = $this->generateAttributes($token->attr, $token->name);\n return '<' . $token->name . ($attr ? ' ' : '') . $attr .\n ( $this->_xhtml ? ' /': '' ) //
v.
\n . '>';\n\n } elseif ($token instanceof HTMLPurifier_Token_Text) {\n return $this->escape($token->data, ENT_NOQUOTES);\n\n } elseif ($token instanceof HTMLPurifier_Token_Comment) {\n return '';\n } else {\n return '';\n\n }\n }\n\n /**\n * Special case processor for the contents of script tags\n * @warning This runs into problems if there's already a literal\n * --> somewhere inside the script contents.\n */\n public function generateScriptFromToken($token) {\n if (!$token instanceof HTMLPurifier_Token_Text) return $this->generateFromToken($token);\n // Thanks \n $data = preg_replace('#//\\s*$#', '', $token->data);\n return '';\n }\n\n /**\n * Generates attribute declarations from attribute array.\n * @note This does not include the leading or trailing space.\n * @param $assoc_array_of_attributes Attribute array\n * @param $element Name of element attributes are for, used to check\n * attribute minimization.\n * @return Generate HTML fragment for insertion.\n */\n public function generateAttributes($assoc_array_of_attributes, $element = false) {\n $html = '';\n if ($this->_sortAttr) ksort($assoc_array_of_attributes);\n foreach ($assoc_array_of_attributes as $key => $value) {\n if (!$this->_xhtml) {\n // Remove namespaced attributes\n if (strpos($key, ':') !== false) continue;\n // Check if we should minimize the attribute: val=\"val\" -> val\n if ($element && !empty($this->_def->info[$element]->attr[$key]->minimized)) {\n $html .= $key . ' ';\n continue;\n }\n }\n $html .= $key.'=\"'.$this->escape($value).'\" ';\n }\n return rtrim($html);\n }\n\n /**\n * Escapes raw text data.\n * @todo This really ought to be protected, but until we have a facility\n * for properly generating HTML here w/o using tokens, it stays\n * public.\n * @param $string String data to escape for HTML.\n * @param $quote Quoting style, like htmlspecialchars. ENT_NOQUOTES is\n * permissible for non-attribute output.\n * @return String escaped data.\n */\n public function escape($string, $quote = ENT_COMPAT) {\n return htmlspecialchars($string, $quote, 'UTF-8');\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/HTMLDefinition.php",
"content": "getAnonymousModule();\n if (!isset($module->info[$element_name])) {\n $element = $module->addBlankElement($element_name);\n } else {\n $element = $module->info[$element_name];\n }\n $element->attr[$attr_name] = $def;\n }\n\n /**\n * Adds a custom element to your HTML definition\n * @note See HTMLPurifier_HTMLModule::addElement for detailed\n * parameter and return value descriptions.\n */\n public function addElement($element_name, $type, $contents, $attr_collections, $attributes = array()) {\n $module = $this->getAnonymousModule();\n // assume that if the user is calling this, the element\n // is safe. This may not be a good idea\n $element = $module->addElement($element_name, $type, $contents, $attr_collections, $attributes);\n return $element;\n }\n\n /**\n * Adds a blank element to your HTML definition, for overriding\n * existing behavior\n * @note See HTMLPurifier_HTMLModule::addBlankElement for detailed\n * parameter and return value descriptions.\n */\n public function addBlankElement($element_name) {\n $module = $this->getAnonymousModule();\n $element = $module->addBlankElement($element_name);\n return $element;\n }\n\n /**\n * Retrieves a reference to the anonymous module, so you can\n * bust out advanced features without having to make your own\n * module.\n */\n public function getAnonymousModule() {\n if (!$this->_anonModule) {\n $this->_anonModule = new HTMLPurifier_HTMLModule();\n $this->_anonModule->name = 'Anonymous';\n }\n return $this->_anonModule;\n }\n\n private $_anonModule;\n\n\n // PUBLIC BUT INTERNAL VARIABLES --------------------------------------\n\n public $type = 'HTML';\n public $manager; /**< Instance of HTMLPurifier_HTMLModuleManager */\n\n /**\n * Performs low-cost, preliminary initialization.\n */\n public function __construct() {\n $this->manager = new HTMLPurifier_HTMLModuleManager();\n }\n\n protected function doSetup($config) {\n $this->processModules($config);\n $this->setupConfigStuff($config);\n unset($this->manager);\n\n // cleanup some of the element definitions\n foreach ($this->info as $k => $v) {\n unset($this->info[$k]->content_model);\n unset($this->info[$k]->content_model_type);\n }\n }\n\n /**\n * Extract out the information from the manager\n */\n protected function processModules($config) {\n\n if ($this->_anonModule) {\n // for user specific changes\n // this is late-loaded so we don't have to deal with PHP4\n // reference wonky-ness\n $this->manager->addModule($this->_anonModule);\n unset($this->_anonModule);\n }\n\n $this->manager->setup($config);\n $this->doctype = $this->manager->doctype;\n\n foreach ($this->manager->modules as $module) {\n foreach($module->info_tag_transform as $k => $v) {\n if ($v === false) unset($this->info_tag_transform[$k]);\n else $this->info_tag_transform[$k] = $v;\n }\n foreach($module->info_attr_transform_pre as $k => $v) {\n if ($v === false) unset($this->info_attr_transform_pre[$k]);\n else $this->info_attr_transform_pre[$k] = $v;\n }\n foreach($module->info_attr_transform_post as $k => $v) {\n if ($v === false) unset($this->info_attr_transform_post[$k]);\n else $this->info_attr_transform_post[$k] = $v;\n }\n foreach ($module->info_injector as $k => $v) {\n if ($v === false) unset($this->info_injector[$k]);\n else $this->info_injector[$k] = $v;\n }\n }\n\n $this->info = $this->manager->getElements();\n $this->info_content_sets = $this->manager->contentSets->lookup;\n\n }\n\n /**\n * Sets up stuff based on config. We need a better way of doing this.\n */\n protected function setupConfigStuff($config) {\n\n $block_wrapper = $config->get('HTML.BlockWrapper');\n if (isset($this->info_content_sets['Block'][$block_wrapper])) {\n $this->info_block_wrapper = $block_wrapper;\n } else {\n trigger_error('Cannot use non-block element as block wrapper',\n E_USER_ERROR);\n }\n\n $parent = $config->get('HTML.Parent');\n $def = $this->manager->getElement($parent, true);\n if ($def) {\n $this->info_parent = $parent;\n $this->info_parent_def = $def;\n } else {\n trigger_error('Cannot use unrecognized element as parent',\n E_USER_ERROR);\n $this->info_parent_def = $this->manager->getElement($this->info_parent, true);\n }\n\n // support template text\n $support = \"(for information on implementing this, see the \".\n \"support forums) \";\n\n // setup allowed elements -----------------------------------------\n\n $allowed_elements = $config->get('HTML.AllowedElements');\n $allowed_attributes = $config->get('HTML.AllowedAttributes'); // retrieve early\n\n if (!is_array($allowed_elements) && !is_array($allowed_attributes)) {\n $allowed = $config->get('HTML.Allowed');\n if (is_string($allowed)) {\n list($allowed_elements, $allowed_attributes) = $this->parseTinyMCEAllowedList($allowed);\n }\n }\n\n if (is_array($allowed_elements)) {\n foreach ($this->info as $name => $d) {\n if(!isset($allowed_elements[$name])) unset($this->info[$name]);\n unset($allowed_elements[$name]);\n }\n // emit errors\n foreach ($allowed_elements as $element => $d) {\n $element = htmlspecialchars($element); // PHP doesn't escape errors, be careful!\n trigger_error(\"Element '$element' is not supported $support\", E_USER_WARNING);\n }\n }\n\n // setup allowed attributes ---------------------------------------\n\n $allowed_attributes_mutable = $allowed_attributes; // by copy!\n if (is_array($allowed_attributes)) {\n\n // This actually doesn't do anything, since we went away from\n // global attributes. It's possible that userland code uses\n // it, but HTMLModuleManager doesn't!\n foreach ($this->info_global_attr as $attr => $x) {\n $keys = array($attr, \"*@$attr\", \"*.$attr\");\n $delete = true;\n foreach ($keys as $key) {\n if ($delete && isset($allowed_attributes[$key])) {\n $delete = false;\n }\n if (isset($allowed_attributes_mutable[$key])) {\n unset($allowed_attributes_mutable[$key]);\n }\n }\n if ($delete) unset($this->info_global_attr[$attr]);\n }\n\n foreach ($this->info as $tag => $info) {\n foreach ($info->attr as $attr => $x) {\n $keys = array(\"$tag@$attr\", $attr, \"*@$attr\", \"$tag.$attr\", \"*.$attr\");\n $delete = true;\n foreach ($keys as $key) {\n if ($delete && isset($allowed_attributes[$key])) {\n $delete = false;\n }\n if (isset($allowed_attributes_mutable[$key])) {\n unset($allowed_attributes_mutable[$key]);\n }\n }\n if ($delete) unset($this->info[$tag]->attr[$attr]);\n }\n }\n // emit errors\n foreach ($allowed_attributes_mutable as $elattr => $d) {\n $bits = preg_split('/[.@]/', $elattr, 2);\n $c = count($bits);\n switch ($c) {\n case 2:\n if ($bits[0] !== '*') {\n $element = htmlspecialchars($bits[0]);\n $attribute = htmlspecialchars($bits[1]);\n if (!isset($this->info[$element])) {\n trigger_error(\"Cannot allow attribute '$attribute' if element '$element' is not allowed/supported $support\");\n } else {\n trigger_error(\"Attribute '$attribute' in element '$element' not supported $support\",\n E_USER_WARNING);\n }\n break;\n }\n // otherwise fall through\n case 1:\n $attribute = htmlspecialchars($bits[0]);\n trigger_error(\"Global attribute '$attribute' is not \".\n \"supported in any elements $support\",\n E_USER_WARNING);\n break;\n }\n }\n\n }\n\n // setup forbidden elements ---------------------------------------\n\n $forbidden_elements = $config->get('HTML.ForbiddenElements');\n $forbidden_attributes = $config->get('HTML.ForbiddenAttributes');\n\n foreach ($this->info as $tag => $info) {\n if (isset($forbidden_elements[$tag])) {\n unset($this->info[$tag]);\n continue;\n }\n foreach ($info->attr as $attr => $x) {\n if (\n isset($forbidden_attributes[\"$tag@$attr\"]) ||\n isset($forbidden_attributes[\"*@$attr\"]) ||\n isset($forbidden_attributes[$attr])\n ) {\n unset($this->info[$tag]->attr[$attr]);\n continue;\n } // this segment might get removed eventually\n elseif (isset($forbidden_attributes[\"$tag.$attr\"])) {\n // $tag.$attr are not user supplied, so no worries!\n trigger_error(\"Error with $tag.$attr: tag.attr syntax not supported for HTML.ForbiddenAttributes; use tag@attr instead\", E_USER_WARNING);\n }\n }\n }\n foreach ($forbidden_attributes as $key => $v) {\n if (strlen($key) < 2) continue;\n if ($key[0] != '*') continue;\n if ($key[1] == '.') {\n trigger_error(\"Error with $key: *.attr syntax not supported for HTML.ForbiddenAttributes; use attr instead\", E_USER_WARNING);\n }\n }\n\n // setup injectors -----------------------------------------------------\n foreach ($this->info_injector as $i => $injector) {\n if ($injector->checkNeeded($config) !== false) {\n // remove injector that does not have it's required\n // elements/attributes present, and is thus not needed.\n unset($this->info_injector[$i]);\n }\n }\n }\n\n /**\n * Parses a TinyMCE-flavored Allowed Elements and Attributes list into\n * separate lists for processing. Format is element[attr1|attr2],element2...\n * @warning Although it's largely drawn from TinyMCE's implementation,\n * it is different, and you'll probably have to modify your lists\n * @param $list String list to parse\n * @param array($allowed_elements, $allowed_attributes)\n * @todo Give this its own class, probably static interface\n */\n public function parseTinyMCEAllowedList($list) {\n\n $list = str_replace(array(' ', \"\\t\"), '', $list);\n\n $elements = array();\n $attributes = array();\n\n $chunks = preg_split('/(,|[\\n\\r]+)/', $list);\n foreach ($chunks as $chunk) {\n if (empty($chunk)) continue;\n // remove TinyMCE element control characters\n if (!strpos($chunk, '[')) {\n $element = $chunk;\n $attr = false;\n } else {\n list($element, $attr) = explode('[', $chunk);\n }\n if ($element !== '*') $elements[$element] = true;\n if (!$attr) continue;\n $attr = substr($attr, 0, strlen($attr) - 1); // remove trailing ]\n $attr = explode('|', $attr);\n foreach ($attr as $key) {\n $attributes[\"$element.$key\"] = true;\n }\n }\n\n return array($elements, $attributes);\n\n }\n\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/HTMLModule/Bdo.php",
"content": " array('dir' => false)\n );\n\n public function setup($config) {\n $bdo = $this->addElement(\n 'bdo', 'Inline', 'Inline', array('Core', 'Lang'),\n array(\n 'dir' => 'Enum#ltr,rtl', // required\n // The Abstract Module specification has the attribute\n // inclusions wrong for bdo: bdo allows Lang\n )\n );\n $bdo->attr_transform_post['required-dir'] = new HTMLPurifier_AttrTransform_BdoDir();\n\n $this->attr_collections['I18N']['dir'] = 'Enum#ltr,rtl';\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/HTMLModule/CommonAttributes.php",
"content": " array(\n 0 => array('Style'),\n // 'xml:space' => false,\n 'class' => 'Class',\n 'id' => 'ID',\n 'title' => 'CDATA',\n ),\n 'Lang' => array(),\n 'I18N' => array(\n 0 => array('Lang'), // proprietary, for xml:lang/lang\n ),\n 'Common' => array(\n 0 => array('Core', 'I18N')\n )\n );\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/HTMLModule/Edit.php",
"content": " 'URI',\n // 'datetime' => 'Datetime', // not implemented\n );\n $this->addElement('del', 'Inline', $contents, 'Common', $attr);\n $this->addElement('ins', 'Inline', $contents, 'Common', $attr);\n }\n\n // HTML 4.01 specifies that ins/del must not contain block\n // elements when used in an inline context, chameleon is\n // a complicated workaround to acheive this effect\n\n // Inline context ! Block context (exclamation mark is\n // separator, see getChildDef for parsing)\n\n public $defines_child_def = true;\n public function getChildDef($def) {\n if ($def->content_model_type != 'chameleon') return false;\n $value = explode('!', $def->content_model);\n return new HTMLPurifier_ChildDef_Chameleon($value[0], $value[1]);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/HTMLModule/Forms.php",
"content": " 'Form',\n 'Inline' => 'Formctrl',\n );\n\n public function setup($config) {\n $form = $this->addElement('form', 'Form',\n 'Required: Heading | List | Block | fieldset', 'Common', array(\n 'accept' => 'ContentTypes',\n 'accept-charset' => 'Charsets',\n 'action*' => 'URI',\n 'method' => 'Enum#get,post',\n // really ContentType, but these two are the only ones used today\n 'enctype' => 'Enum#application/x-www-form-urlencoded,multipart/form-data',\n ));\n $form->excludes = array('form' => true);\n\n $input = $this->addElement('input', 'Formctrl', 'Empty', 'Common', array(\n 'accept' => 'ContentTypes',\n 'accesskey' => 'Character',\n 'alt' => 'Text',\n 'checked' => 'Bool#checked',\n 'disabled' => 'Bool#disabled',\n 'maxlength' => 'Number',\n 'name' => 'CDATA',\n 'readonly' => 'Bool#readonly',\n 'size' => 'Number',\n 'src' => 'URI#embeds',\n 'tabindex' => 'Number',\n 'type' => 'Enum#text,password,checkbox,button,radio,submit,reset,file,hidden,image',\n 'value' => 'CDATA',\n ));\n $input->attr_transform_post[] = new HTMLPurifier_AttrTransform_Input();\n\n $this->addElement('select', 'Formctrl', 'Required: optgroup | option', 'Common', array(\n 'disabled' => 'Bool#disabled',\n 'multiple' => 'Bool#multiple',\n 'name' => 'CDATA',\n 'size' => 'Number',\n 'tabindex' => 'Number',\n ));\n\n $this->addElement('option', false, 'Optional: #PCDATA', 'Common', array(\n 'disabled' => 'Bool#disabled',\n 'label' => 'Text',\n 'selected' => 'Bool#selected',\n 'value' => 'CDATA',\n ));\n // It's illegal for there to be more than one selected, but not\n // be multiple. Also, no selected means undefined behavior. This might\n // be difficult to implement; perhaps an injector, or a context variable.\n\n $textarea = $this->addElement('textarea', 'Formctrl', 'Optional: #PCDATA', 'Common', array(\n 'accesskey' => 'Character',\n 'cols*' => 'Number',\n 'disabled' => 'Bool#disabled',\n 'name' => 'CDATA',\n 'readonly' => 'Bool#readonly',\n 'rows*' => 'Number',\n 'tabindex' => 'Number',\n ));\n $textarea->attr_transform_pre[] = new HTMLPurifier_AttrTransform_Textarea();\n\n $button = $this->addElement('button', 'Formctrl', 'Optional: #PCDATA | Heading | List | Block | Inline', 'Common', array(\n 'accesskey' => 'Character',\n 'disabled' => 'Bool#disabled',\n 'name' => 'CDATA',\n 'tabindex' => 'Number',\n 'type' => 'Enum#button,submit,reset',\n 'value' => 'CDATA',\n ));\n\n // For exclusions, ideally we'd specify content sets, not literal elements\n $button->excludes = $this->makeLookup(\n 'form', 'fieldset', // Form\n 'input', 'select', 'textarea', 'label', 'button', // Formctrl\n 'a' // as per HTML 4.01 spec, this is omitted by modularization\n );\n\n // Extra exclusion: img usemap=\"\" is not permitted within this element.\n // We'll omit this for now, since we don't have any good way of\n // indicating it yet.\n\n // This is HIGHLY user-unfriendly; we need a custom child-def for this\n $this->addElement('fieldset', 'Form', 'Custom: (#WS?,legend,(Flow|#PCDATA)*)', 'Common');\n\n $label = $this->addElement('label', 'Formctrl', 'Optional: #PCDATA | Inline', 'Common', array(\n 'accesskey' => 'Character',\n // 'for' => 'IDREF', // IDREF not implemented, cannot allow\n ));\n $label->excludes = array('label' => true);\n\n $this->addElement('legend', false, 'Optional: #PCDATA | Inline', 'Common', array(\n 'accesskey' => 'Character',\n ));\n\n $this->addElement('optgroup', false, 'Required: option', 'Common', array(\n 'disabled' => 'Bool#disabled',\n 'label*' => 'Text',\n ));\n\n // Don't forget an injector for tags?\n if ($this->allowsElement('p')) {\n if (empty($this->currentNesting) || strpos($text, \"\\n\\n\") !== false) {\n // Note that we have differing behavior when dealing with text\n // in the anonymous root node, or a node inside the document.\n // If the text as a double-newline, the treatment is the same;\n // if it doesn't, see the next if-block if you're in the document.\n\n $i = $nesting = null;\n if (!$this->forwardUntilEndToken($i, $current, $nesting) && $token->is_whitespace) {\n // State 1.1: ... ^ (whitespace, then document end)\n // ----\n // This is a degenerate case\n } else {\n // State 1.2: PAR1\n // ----\n\n // State 1.3: PAR1\\n\\nPAR2\n // ------------\n\n // State 1.4:
PAR1\\n\\nPAR2 (see State 2)\n // ------------\n $token = array($this->_pStart());\n $this->_splitText($text, $token);\n }\n } else {\n // State 2: PAR1... (similar to 1.4)\n // ----\n\n // We're in an element that allows paragraph tags, but we're not\n // sure if we're going to need them.\n if ($this->_pLookAhead()) {\n // State 2.1: PAR1PAR1\\n\\nPAR2\n // ----\n // Note: This will always be the first child, since any\n // previous inline element would have triggered this very\n // same routine, and found the double newline. One possible\n // exception would be a comment.\n $token = array($this->_pStart(), $token);\n } else {\n // State 2.2.1: PAR1\n // ----\n\n // State 2.2.2: PAR1PAR1\n // ----\n }\n }\n // Is the current parent a tag?\n } elseif (\n !empty($this->currentNesting) &&\n $this->currentNesting[count($this->currentNesting)-1]->name == 'p'\n ) {\n // State 3.1: ...
PAR1\n // ----\n\n // State 3.2: ...
PAR1\\n\\nPAR2\n // ------------\n $token = array();\n $this->_splitText($text, $token);\n // Abort!\n } else {\n // State 4.1: ...PAR1\n // ----\n\n // State 4.2: ...PAR1\\n\\nPAR2\n // ------------\n }\n }\n\n public function handleElement(&$token) {\n // We don't have to check if we're already in a
tag for block\n // tokens, because the tag would have been autoclosed by MakeWellFormed.\n if ($this->allowsElement('p')) {\n if (!empty($this->currentNesting)) {\n if ($this->_isInline($token)) {\n // State 1:
...\n // ---\n\n // Check if this token is adjacent to the parent token\n // (seek backwards until token isn't whitespace)\n $i = null;\n $this->backward($i, $prev);\n\n if (!$prev instanceof HTMLPurifier_Token_Start) {\n // Token wasn't adjacent\n\n if (\n $prev instanceof HTMLPurifier_Token_Text &&\n substr($prev->data, -2) === \"\\n\\n\"\n ) {\n // State 1.1.4: PAR1
\\n\\n\n // ---\n\n // Quite frankly, this should be handled by splitText\n $token = array($this->_pStart(), $token);\n } else {\n // State 1.1.1: PAR1
\n // ---\n\n // State 1.1.2:
\n // ---\n\n // State 1.1.3: PAR\n // ---\n }\n\n } else {\n // State 1.2.1: \n // ---\n\n // Lookahead to see if is needed.\n if ($this->_pLookAhead()) {\n // State 1.3.1:
PAR1\\n\\nPAR2\n // ---\n $token = array($this->_pStart(), $token);\n } else {\n // State 1.3.2: PAR1\n // ---\n\n // State 1.3.3: PAR1\\n\\n\n // ---\n }\n }\n } else {\n // State 2.3: ...\n // -----\n }\n } else {\n if ($this->_isInline($token)) {\n // State 3.1: \n // ---\n // This is where the {p} tag is inserted, not reflected in\n // inputTokens yet, however.\n $token = array($this->_pStart(), $token);\n } else {\n // State 3.2: \n // -----\n }\n\n $i = null;\n if ($this->backward($i, $prev)) {\n if (\n !$prev instanceof HTMLPurifier_Token_Text\n ) {\n // State 3.1.1: ...{p}\n // ---\n\n // State 3.2.1: ...\n // -----\n\n if (!is_array($token)) $token = array($token);\n array_unshift($token, new HTMLPurifier_Token_Text(\"\\n\\n\"));\n } else {\n // State 3.1.2: ...\\n\\n{p}\n // ---\n\n // State 3.2.2: ...\\n\\n\n // -----\n\n // Note: PAR cannot occur because PAR would have been\n // wrapped in tags.\n }\n }\n }\n } else {\n // State 2.2:
- \n // ----\n\n // State 2.4:
\n // ---\n }\n }\n\n /**\n * Splits up a text in paragraph tokens and appends them\n * to the result stream that will replace the original\n * @param $data String text data that will be processed\n * into paragraphs\n * @param $result Reference to array of tokens that the\n * tags will be appended onto\n * @param $config Instance of HTMLPurifier_Config\n * @param $context Instance of HTMLPurifier_Context\n */\n private function _splitText($data, &$result) {\n $raw_paragraphs = explode(\"\\n\\n\", $data);\n $paragraphs = array(); // without empty paragraphs\n $needs_start = false;\n $needs_end = false;\n\n $c = count($raw_paragraphs);\n if ($c == 1) {\n // There were no double-newlines, abort quickly. In theory this\n // should never happen.\n $result[] = new HTMLPurifier_Token_Text($data);\n return;\n }\n for ($i = 0; $i < $c; $i++) {\n $par = $raw_paragraphs[$i];\n if (trim($par) !== '') {\n $paragraphs[] = $par;\n } else {\n if ($i == 0) {\n // Double newline at the front\n if (empty($result)) {\n // The empty result indicates that the AutoParagraph\n // injector did not add any start paragraph tokens.\n // This means that we have been in a paragraph for\n // a while, and the newline means we should start a new one.\n $result[] = new HTMLPurifier_Token_End('p');\n $result[] = new HTMLPurifier_Token_Text(\"\\n\\n\");\n // However, the start token should only be added if\n // there is more processing to be done (i.e. there are\n // real paragraphs in here). If there are none, the\n // next start paragraph tag will be handled by the\n // next call to the injector\n $needs_start = true;\n } else {\n // We just started a new paragraph!\n // Reinstate a double-newline for presentation's sake, since\n // it was in the source code.\n array_unshift($result, new HTMLPurifier_Token_Text(\"\\n\\n\"));\n }\n } elseif ($i + 1 == $c) {\n // Double newline at the end\n // There should be a trailing
when we're finally done.\n $needs_end = true;\n }\n }\n }\n\n // Check if this was just a giant blob of whitespace. Move this earlier,\n // perhaps?\n if (empty($paragraphs)) {\n return;\n }\n\n // Add the start tag indicated by \\n\\n at the beginning of $data\n if ($needs_start) {\n $result[] = $this->_pStart();\n }\n\n // Append the paragraphs onto the result\n foreach ($paragraphs as $par) {\n $result[] = new HTMLPurifier_Token_Text($par);\n $result[] = new HTMLPurifier_Token_End('p');\n $result[] = new HTMLPurifier_Token_Text(\"\\n\\n\");\n $result[] = $this->_pStart();\n }\n\n // Remove trailing start token; Injector will handle this later if\n // it was indeed needed. This prevents from needing to do a lookahead,\n // at the cost of a lookbehind later.\n array_pop($result);\n\n // If there is no need for an end tag, remove all of it and let\n // MakeWellFormed close it later.\n if (!$needs_end) {\n array_pop($result); // removes \\n\\n\n array_pop($result); // removes \n }\n\n }\n\n /**\n * Returns true if passed token is inline (and, ergo, allowed in\n * paragraph tags)\n */\n private function _isInline($token) {\n return isset($this->htmlDefinition->info['p']->child->elements[$token->name]);\n }\n\n /**\n * Looks ahead in the token list and determines whether or not we need\n * to insert a tag.\n */\n private function _pLookAhead() {\n $this->current($i, $current);\n if ($current instanceof HTMLPurifier_Token_Start) $nesting = 1;\n else $nesting = 0;\n $ok = false;\n while ($this->forwardUntilEndToken($i, $current, $nesting)) {\n $result = $this->_checkNeedsP($current);\n if ($result !== null) {\n $ok = $result;\n break;\n }\n }\n return $ok;\n }\n\n /**\n * Determines if a particular token requires an earlier inline token\n * to get a paragraph. This should be used with _forwardUntilEndToken\n */\n private function _checkNeedsP($current) {\n if ($current instanceof HTMLPurifier_Token_Start){\n if (!$this->_isInline($current)) {\n //
PAR1\n // ----\n // Terminate early, since we hit a block element\n return false;\n }\n } elseif ($current instanceof HTMLPurifier_Token_Text) {\n if (strpos($current->data, \"\\n\\n\") !== false) {\n // PAR1PAR1\\n\\nPAR2\n // ----\n return true;\n } else {\n // PAR1PAR1...\n // ----\n }\n }\n return null;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector/DisplayLinkURI.php",
"content": "start->attr['href'])){\n $url = $token->start->attr['href'];\n unset($token->start->attr['href']);\n $token = array($token, new HTMLPurifier_Token_Text(\" ($url)\"));\n } else {\n // nothing to display\n }\n }\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector/Linkify.php",
"content": " array('href'));\n\n public function handleText(&$token) {\n if (!$this->allowsElement('a')) return;\n\n if (strpos($token->data, '://') === false) {\n // our really quick heuristic failed, abort\n // this may not work so well if we want to match things like\n // \"google.com\", but then again, most people don't\n return;\n }\n\n // there is/are URL(s). Let's split the string:\n // Note: this regex is extremely permissive\n $bits = preg_split('#((?:https?|ftp)://[^\\s\\'\"<>()]+)#S', $token->data, -1, PREG_SPLIT_DELIM_CAPTURE);\n\n $token = array();\n\n // $i = index\n // $c = count\n // $l = is link\n for ($i = 0, $c = count($bits), $l = false; $i < $c; $i++, $l = !$l) {\n if (!$l) {\n if ($bits[$i] === '') continue;\n $token[] = new HTMLPurifier_Token_Text($bits[$i]);\n } else {\n $token[] = new HTMLPurifier_Token_Start('a', array('href' => $bits[$i]));\n $token[] = new HTMLPurifier_Token_Text($bits[$i]);\n $token[] = new HTMLPurifier_Token_End('a');\n }\n }\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector/PurifierLinkify.php",
"content": " array('href'));\n\n public function prepare($config, $context) {\n $this->docURL = $config->get('AutoFormat.PurifierLinkify.DocURL');\n return parent::prepare($config, $context);\n }\n\n public function handleText(&$token) {\n if (!$this->allowsElement('a')) return;\n if (strpos($token->data, '%') === false) return;\n\n $bits = preg_split('#%([a-z0-9]+\\.[a-z0-9]+)#Si', $token->data, -1, PREG_SPLIT_DELIM_CAPTURE);\n $token = array();\n\n // $i = index\n // $c = count\n // $l = is link\n for ($i = 0, $c = count($bits), $l = false; $i < $c; $i++, $l = !$l) {\n if (!$l) {\n if ($bits[$i] === '') continue;\n $token[] = new HTMLPurifier_Token_Text($bits[$i]);\n } else {\n $token[] = new HTMLPurifier_Token_Start('a',\n array('href' => str_replace('%s', $bits[$i], $this->docURL)));\n $token[] = new HTMLPurifier_Token_Text('%' . $bits[$i]);\n $token[] = new HTMLPurifier_Token_End('a');\n }\n }\n\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector/RemoveEmpty.php",
"content": "config = $config;\n $this->context = $context;\n $this->removeNbsp = $config->get('AutoFormat.RemoveEmpty.RemoveNbsp');\n $this->removeNbspExceptions = $config->get('AutoFormat.RemoveEmpty.RemoveNbsp.Exceptions');\n $this->attrValidator = new HTMLPurifier_AttrValidator();\n }\n\n public function handleElement(&$token) {\n if (!$token instanceof HTMLPurifier_Token_Start) return;\n $next = false;\n for ($i = $this->inputIndex + 1, $c = count($this->inputTokens); $i < $c; $i++) {\n $next = $this->inputTokens[$i];\n if ($next instanceof HTMLPurifier_Token_Text) {\n if ($next->is_whitespace) continue;\n if ($this->removeNbsp && !isset($this->removeNbspExceptions[$token->name])) {\n $plain = str_replace(\"\\xC2\\xA0\", \"\", $next->data);\n $isWsOrNbsp = $plain === '' || ctype_space($plain);\n if ($isWsOrNbsp) continue;\n }\n }\n break;\n }\n if (!$next || ($next instanceof HTMLPurifier_Token_End && $next->name == $token->name)) {\n if ($token->name == 'colgroup') return;\n $this->attrValidator->validateToken($token, $this->config, $this->context);\n $token->armor['ValidateAttributes'] = true;\n if (isset($token->attr['id']) || isset($token->attr['name'])) return;\n $token = $i - $this->inputIndex + 1;\n for ($b = $this->inputIndex - 1; $b > 0; $b--) {\n $prev = $this->inputTokens[$b];\n if ($prev instanceof HTMLPurifier_Token_Text && $prev->is_whitespace) continue;\n break;\n }\n // This is safe because we removed the token that triggered this.\n $this->rewind($b - 1);\n return;\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector/SafeObject.php",
"content": " 'never',\n 'allowNetworking' => 'internal',\n );\n protected $allowedParam = array(\n 'wmode' => true,\n 'movie' => true,\n );\n\n public function prepare($config, $context) {\n parent::prepare($config, $context);\n }\n\n public function handleElement(&$token) {\n if ($token->name == 'object') {\n $this->objectStack[] = $token;\n $this->paramStack[] = array();\n $new = array($token);\n foreach ($this->addParam as $name => $value) {\n $new[] = new HTMLPurifier_Token_Empty('param', array('name' => $name, 'value' => $value));\n }\n $token = $new;\n } elseif ($token->name == 'param') {\n $nest = count($this->currentNesting) - 1;\n if ($nest >= 0 && $this->currentNesting[$nest]->name === 'object') {\n $i = count($this->objectStack) - 1;\n if (!isset($token->attr['name'])) {\n $token = false;\n return;\n }\n $n = $token->attr['name'];\n // We need this fix because YouTube doesn't supply a data\n // attribute, which we need if a type is specified. This is\n // *very* Flash specific.\n if (!isset($this->objectStack[$i]->attr['data']) && $token->attr['name'] == 'movie') {\n $this->objectStack[$i]->attr['data'] = $token->attr['value'];\n }\n // Check if the parameter is the correct value but has not\n // already been added\n if (\n !isset($this->paramStack[$i][$n]) &&\n isset($this->addParam[$n]) &&\n $token->attr['name'] === $this->addParam[$n]\n ) {\n // keep token, and add to param stack\n $this->paramStack[$i][$n] = true;\n } elseif (isset($this->allowedParam[$n])) {\n // keep token, don't do anything to it\n // (could possibly check for duplicates here)\n } else {\n $token = false;\n }\n } else {\n // not directly inside an object, DENY!\n $token = false;\n }\n }\n }\n\n public function handleEnd(&$token) {\n // This is the WRONG way of handling the object and param stacks;\n // we should be inserting them directly on the relevant object tokens\n // so that the global stack handling handles it.\n if ($token->name == 'object') {\n array_pop($this->objectStack);\n array_pop($this->paramStack);\n }\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Injector.php",
"content": "processToken()\n * documentation.\n *\n * @todo Allow injectors to request a re-run on their output. This\n * would help if an operation is recursive.\n */\nabstract class HTMLPurifier_Injector\n{\n\n /**\n * Advisory name of injector, this is for friendly error messages\n */\n public $name;\n\n /**\n * Instance of HTMLPurifier_HTMLDefinition\n */\n protected $htmlDefinition;\n\n /**\n * Reference to CurrentNesting variable in Context. This is an array\n * list of tokens that we are currently \"inside\"\n */\n protected $currentNesting;\n\n /**\n * Reference to InputTokens variable in Context. This is an array\n * list of the input tokens that are being processed.\n */\n protected $inputTokens;\n\n /**\n * Reference to InputIndex variable in Context. This is an integer\n * array index for $this->inputTokens that indicates what token\n * is currently being processed.\n */\n protected $inputIndex;\n\n /**\n * Array of elements and attributes this injector creates and therefore\n * need to be allowed by the definition. Takes form of\n * array('element' => array('attr', 'attr2'), 'element2')\n */\n public $needed = array();\n\n /**\n * Index of inputTokens to rewind to.\n */\n protected $rewind = false;\n\n /**\n * Rewind to a spot to re-perform processing. This is useful if you\n * deleted a node, and now need to see if this change affected any\n * earlier nodes. Rewinding does not affect other injectors, and can\n * result in infinite loops if not used carefully.\n * @warning HTML Purifier will prevent you from fast-forwarding with this\n * function.\n */\n public function rewind($index) {\n $this->rewind = $index;\n }\n\n /**\n * Retrieves rewind, and then unsets it.\n */\n public function getRewind() {\n $r = $this->rewind;\n $this->rewind = false;\n return $r;\n }\n\n /**\n * Prepares the injector by giving it the config and context objects:\n * this allows references to important variables to be made within\n * the injector. This function also checks if the HTML environment\n * will work with the Injector (see checkNeeded()).\n * @param $config Instance of HTMLPurifier_Config\n * @param $context Instance of HTMLPurifier_Context\n * @return Boolean false if success, string of missing needed element/attribute if failure\n */\n public function prepare($config, $context) {\n $this->htmlDefinition = $config->getHTMLDefinition();\n // Even though this might fail, some unit tests ignore this and\n // still test checkNeeded, so be careful. Maybe get rid of that\n // dependency.\n $result = $this->checkNeeded($config);\n if ($result !== false) return $result;\n $this->currentNesting =& $context->get('CurrentNesting');\n $this->inputTokens =& $context->get('InputTokens');\n $this->inputIndex =& $context->get('InputIndex');\n return false;\n }\n\n /**\n * This function checks if the HTML environment\n * will work with the Injector: if p tags are not allowed, the\n * Auto-Paragraphing injector should not be enabled.\n * @param $config Instance of HTMLPurifier_Config\n * @param $context Instance of HTMLPurifier_Context\n * @return Boolean false if success, string of missing needed element/attribute if failure\n */\n public function checkNeeded($config) {\n $def = $config->getHTMLDefinition();\n foreach ($this->needed as $element => $attributes) {\n if (is_int($element)) $element = $attributes;\n if (!isset($def->info[$element])) return $element;\n if (!is_array($attributes)) continue;\n foreach ($attributes as $name) {\n if (!isset($def->info[$element]->attr[$name])) return \"$element.$name\";\n }\n }\n return false;\n }\n\n /**\n * Tests if the context node allows a certain element\n * @param $name Name of element to test for\n * @return True if element is allowed, false if it is not\n */\n public function allowsElement($name) {\n if (!empty($this->currentNesting)) {\n $parent_token = array_pop($this->currentNesting);\n $this->currentNesting[] = $parent_token;\n $parent = $this->htmlDefinition->info[$parent_token->name];\n } else {\n $parent = $this->htmlDefinition->info_parent_def;\n }\n if (!isset($parent->child->elements[$name]) || isset($parent->excludes[$name])) {\n return false;\n }\n // check for exclusion\n for ($i = count($this->currentNesting) - 2; $i >= 0; $i--) {\n $node = $this->currentNesting[$i];\n $def = $this->htmlDefinition->info[$node->name];\n if (isset($def->excludes[$name])) return false;\n }\n return true;\n }\n\n /**\n * Iterator function, which starts with the next token and continues until\n * you reach the end of the input tokens.\n * @warning Please prevent previous references from interfering with this\n * functions by setting $i = null beforehand!\n * @param &$i Current integer index variable for inputTokens\n * @param &$current Current token variable. Do NOT use $token, as that variable is also a reference\n */\n protected function forward(&$i, &$current) {\n if ($i === null) $i = $this->inputIndex + 1;\n else $i++;\n if (!isset($this->inputTokens[$i])) return false;\n $current = $this->inputTokens[$i];\n return true;\n }\n\n /**\n * Similar to _forward, but accepts a third parameter $nesting (which\n * should be initialized at 0) and stops when we hit the end tag\n * for the node $this->inputIndex starts in.\n */\n protected function forwardUntilEndToken(&$i, &$current, &$nesting) {\n $result = $this->forward($i, $current);\n if (!$result) return false;\n if ($nesting === null) $nesting = 0;\n if ($current instanceof HTMLPurifier_Token_Start) $nesting++;\n elseif ($current instanceof HTMLPurifier_Token_End) {\n if ($nesting <= 0) return false;\n $nesting--;\n }\n return true;\n }\n\n /**\n * Iterator function, starts with the previous token and continues until\n * you reach the beginning of input tokens.\n * @warning Please prevent previous references from interfering with this\n * functions by setting $i = null beforehand!\n * @param &$i Current integer index variable for inputTokens\n * @param &$current Current token variable. Do NOT use $token, as that variable is also a reference\n */\n protected function backward(&$i, &$current) {\n if ($i === null) $i = $this->inputIndex - 1;\n else $i--;\n if ($i < 0) return false;\n $current = $this->inputTokens[$i];\n return true;\n }\n\n /**\n * Initializes the iterator at the current position. Use in a do {} while;\n * loop to force the _forward and _backward functions to start at the\n * current location.\n * @warning Please prevent previous references from interfering with this\n * functions by setting $i = null beforehand!\n * @param &$i Current integer index variable for inputTokens\n * @param &$current Current token variable. Do NOT use $token, as that variable is also a reference\n */\n protected function current(&$i, &$current) {\n if ($i === null) $i = $this->inputIndex;\n $current = $this->inputTokens[$i];\n }\n\n /**\n * Handler that is called when a text token is processed\n */\n public function handleText(&$token) {}\n\n /**\n * Handler that is called when a start or empty token is processed\n */\n public function handleElement(&$token) {}\n\n /**\n * Handler that is called when an end token is processed\n */\n public function handleEnd(&$token) {\n $this->notifyEnd($token);\n }\n\n /**\n * Notifier that is called when an end token is processed\n * @note This differs from handlers in that the token is read-only\n * @deprecated\n */\n public function notifyEnd($token) {}\n\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Language/classes/en-x-test.php",
"content": " 'HTML Purifier X'\n);\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Language/messages/en-x-testmini.php",
"content": " 'HTML Purifier XNone'\n);\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Language/messages/en.php",
"content": " 'HTML Purifier',\n\n// for unit testing purposes\n'LanguageFactoryTest: Pizza' => 'Pizza',\n'LanguageTest: List' => '$1',\n'LanguageTest: Hash' => '$1.Keys; $1.Values',\n\n'Item separator' => ', ',\n'Item separator last' => ' and ', // non-Harvard style\n\n'ErrorCollector: No errors' => 'No errors detected. However, because error reporting is still incomplete, there may have been errors that the error collector was not notified of; please inspect the output HTML carefully.',\n'ErrorCollector: At line' => ' at line $line',\n'ErrorCollector: Incidental errors' => 'Incidental errors',\n\n'Lexer: Unclosed comment' => 'Unclosed comment',\n'Lexer: Unescaped lt' => 'Unescaped less-than sign (<) should be <',\n'Lexer: Missing gt' => 'Missing greater-than sign (>), previous less-than sign (<) should be escaped',\n'Lexer: Missing attribute key' => 'Attribute declaration has no key',\n'Lexer: Missing end quote' => 'Attribute declaration has no end quote',\n\n'Strategy_RemoveForeignElements: Tag transform' => '<$1> element transformed into $CurrentToken.Serialized',\n'Strategy_RemoveForeignElements: Missing required attribute' => '$CurrentToken.Compact element missing required attribute $1',\n'Strategy_RemoveForeignElements: Foreign element to text' => 'Unrecognized $CurrentToken.Serialized tag converted to text',\n'Strategy_RemoveForeignElements: Foreign element removed' => 'Unrecognized $CurrentToken.Serialized tag removed',\n'Strategy_RemoveForeignElements: Comment removed' => 'Comment containing \"$CurrentToken.Data\" removed',\n'Strategy_RemoveForeignElements: Foreign meta element removed' => 'Unrecognized $CurrentToken.Serialized meta tag and all descendants removed',\n'Strategy_RemoveForeignElements: Token removed to end' => 'Tags and text starting from $1 element where removed to end',\n'Strategy_RemoveForeignElements: Trailing hyphen in comment removed' => 'Trailing hyphen(s) in comment removed',\n'Strategy_RemoveForeignElements: Hyphens in comment collapsed' => 'Double hyphens in comments are not allowed, and were collapsed into single hyphens',\n\n'Strategy_MakeWellFormed: Unnecessary end tag removed' => 'Unnecessary $CurrentToken.Serialized tag removed',\n'Strategy_MakeWellFormed: Unnecessary end tag to text' => 'Unnecessary $CurrentToken.Serialized tag converted to text',\n'Strategy_MakeWellFormed: Tag auto closed' => '$1.Compact started on line $1.Line auto-closed by $CurrentToken.Compact',\n'Strategy_MakeWellFormed: Tag carryover' => '$1.Compact started on line $1.Line auto-continued into $CurrentToken.Compact',\n'Strategy_MakeWellFormed: Stray end tag removed' => 'Stray $CurrentToken.Serialized tag removed',\n'Strategy_MakeWellFormed: Stray end tag to text' => 'Stray $CurrentToken.Serialized tag converted to text',\n'Strategy_MakeWellFormed: Tag closed by element end' => '$1.Compact tag started on line $1.Line closed by end of $CurrentToken.Serialized',\n'Strategy_MakeWellFormed: Tag closed by document end' => '$1.Compact tag started on line $1.Line closed by end of document',\n\n'Strategy_FixNesting: Node removed' => '$CurrentToken.Compact node removed',\n'Strategy_FixNesting: Node excluded' => '$CurrentToken.Compact node removed due to descendant exclusion by ancestor element',\n'Strategy_FixNesting: Node reorganized' => 'Contents of $CurrentToken.Compact node reorganized to enforce its content model',\n'Strategy_FixNesting: Node contents removed' => 'Contents of $CurrentToken.Compact node removed',\n\n'AttrValidator: Attributes transformed' => 'Attributes on $CurrentToken.Compact transformed from $1.Keys to $2.Keys',\n'AttrValidator: Attribute removed' => '$CurrentAttr.Name attribute on $CurrentToken.Compact removed',\n\n);\n\n$errorNames = array(\n E_ERROR => 'Error',\n E_WARNING => 'Warning',\n E_NOTICE => 'Notice'\n);\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Language.php",
"content": "config = $config;\n $this->context = $context;\n }\n\n /**\n * Loads language object with necessary info from factory cache\n * @note This is a lazy loader\n */\n public function load() {\n if ($this->_loaded) return;\n $factory = HTMLPurifier_LanguageFactory::instance();\n $factory->loadLanguage($this->code);\n foreach ($factory->keys as $key) {\n $this->$key = $factory->cache[$this->code][$key];\n }\n $this->_loaded = true;\n }\n\n /**\n * Retrieves a localised message.\n * @param $key string identifier of message\n * @return string localised message\n */\n public function getMessage($key) {\n if (!$this->_loaded) $this->load();\n if (!isset($this->messages[$key])) return \"[$key]\";\n return $this->messages[$key];\n }\n\n /**\n * Retrieves a localised error name.\n * @param $int integer error number, corresponding to PHP's error\n * reporting\n * @return string localised message\n */\n public function getErrorName($int) {\n if (!$this->_loaded) $this->load();\n if (!isset($this->errorNames[$int])) return \"[Error: $int]\";\n return $this->errorNames[$int];\n }\n\n /**\n * Converts an array list into a string readable representation\n */\n public function listify($array) {\n $sep = $this->getMessage('Item separator');\n $sep_last = $this->getMessage('Item separator last');\n $ret = '';\n for ($i = 0, $c = count($array); $i < $c; $i++) {\n if ($i == 0) {\n } elseif ($i + 1 < $c) {\n $ret .= $sep;\n } else {\n $ret .= $sep_last;\n }\n $ret .= $array[$i];\n }\n return $ret;\n }\n\n /**\n * Formats a localised message with passed parameters\n * @param $key string identifier of message\n * @param $args Parameters to substitute in\n * @return string localised message\n * @todo Implement conditionals? Right now, some messages make\n * reference to line numbers, but those aren't always available\n */\n public function formatMessage($key, $args = array()) {\n if (!$this->_loaded) $this->load();\n if (!isset($this->messages[$key])) return \"[$key]\";\n $raw = $this->messages[$key];\n $subst = array();\n $generator = false;\n foreach ($args as $i => $value) {\n if (is_object($value)) {\n if ($value instanceof HTMLPurifier_Token) {\n // factor this out some time\n if (!$generator) $generator = $this->context->get('Generator');\n if (isset($value->name)) $subst['$'.$i.'.Name'] = $value->name;\n if (isset($value->data)) $subst['$'.$i.'.Data'] = $value->data;\n $subst['$'.$i.'.Compact'] =\n $subst['$'.$i.'.Serialized'] = $generator->generateFromToken($value);\n // a more complex algorithm for compact representation\n // could be introduced for all types of tokens. This\n // may need to be factored out into a dedicated class\n if (!empty($value->attr)) {\n $stripped_token = clone $value;\n $stripped_token->attr = array();\n $subst['$'.$i.'.Compact'] = $generator->generateFromToken($stripped_token);\n }\n $subst['$'.$i.'.Line'] = $value->line ? $value->line : 'unknown';\n }\n continue;\n } elseif (is_array($value)) {\n $keys = array_keys($value);\n if (array_keys($keys) === $keys) {\n // list\n $subst['$'.$i] = $this->listify($value);\n } else {\n // associative array\n // no $i implementation yet, sorry\n $subst['$'.$i.'.Keys'] = $this->listify($keys);\n $subst['$'.$i.'.Values'] = $this->listify(array_values($value));\n }\n continue;\n }\n $subst['$' . $i] = $value;\n }\n return strtr($raw, $subst);\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/LanguageFactory.php",
"content": "cache[$language_code][$key] = $value\n * @value array map\n */\n public $cache;\n\n /**\n * Valid keys in the HTMLPurifier_Language object. Designates which\n * variables to slurp out of a message file.\n * @value array list\n */\n public $keys = array('fallback', 'messages', 'errorNames');\n\n /**\n * Instance of HTMLPurifier_AttrDef_Lang to validate language codes\n * @value object HTMLPurifier_AttrDef_Lang\n */\n protected $validator;\n\n /**\n * Cached copy of dirname(__FILE__), directory of current file without\n * trailing slash\n * @value string filename\n */\n protected $dir;\n\n /**\n * Keys whose contents are a hash map and can be merged\n * @value array lookup\n */\n protected $mergeable_keys_map = array('messages' => true, 'errorNames' => true);\n\n /**\n * Keys whose contents are a list and can be merged\n * @value array lookup\n */\n protected $mergeable_keys_list = array();\n\n /**\n * Retrieve sole instance of the factory.\n * @param $prototype Optional prototype to overload sole instance with,\n * or bool true to reset to default factory.\n */\n public static function instance($prototype = null) {\n static $instance = null;\n if ($prototype !== null) {\n $instance = $prototype;\n } elseif ($instance === null || $prototype == true) {\n $instance = new HTMLPurifier_LanguageFactory();\n $instance->setup();\n }\n return $instance;\n }\n\n /**\n * Sets up the singleton, much like a constructor\n * @note Prevents people from getting this outside of the singleton\n */\n public function setup() {\n $this->validator = new HTMLPurifier_AttrDef_Lang();\n $this->dir = HTMLPURIFIER_PREFIX . '/HTMLPurifier';\n }\n\n /**\n * Creates a language object, handles class fallbacks\n * @param $config Instance of HTMLPurifier_Config\n * @param $context Instance of HTMLPurifier_Context\n * @param $code Code to override configuration with. Private parameter.\n */\n public function create($config, $context, $code = false) {\n\n // validate language code\n if ($code === false) {\n $code = $this->validator->validate(\n $config->get('Core.Language'), $config, $context\n );\n } else {\n $code = $this->validator->validate($code, $config, $context);\n }\n if ($code === false) $code = 'en'; // malformed code becomes English\n\n $pcode = str_replace('-', '_', $code); // make valid PHP classname\n static $depth = 0; // recursion protection\n\n if ($code == 'en') {\n $lang = new HTMLPurifier_Language($config, $context);\n } else {\n $class = 'HTMLPurifier_Language_' . $pcode;\n $file = $this->dir . '/Language/classes/' . $code . '.php';\n if (file_exists($file) || class_exists($class, false)) {\n $lang = new $class($config, $context);\n } else {\n // Go fallback\n $raw_fallback = $this->getFallbackFor($code);\n $fallback = $raw_fallback ? $raw_fallback : 'en';\n $depth++;\n $lang = $this->create($config, $context, $fallback);\n if (!$raw_fallback) {\n $lang->error = true;\n }\n $depth--;\n }\n }\n\n $lang->code = $code;\n\n return $lang;\n\n }\n\n /**\n * Returns the fallback language for language\n * @note Loads the original language into cache\n * @param $code string language code\n */\n public function getFallbackFor($code) {\n $this->loadLanguage($code);\n return $this->cache[$code]['fallback'];\n }\n\n /**\n * Loads language into the cache, handles message file and fallbacks\n * @param $code string language code\n */\n public function loadLanguage($code) {\n static $languages_seen = array(); // recursion guard\n\n // abort if we've already loaded it\n if (isset($this->cache[$code])) return;\n\n // generate filename\n $filename = $this->dir . '/Language/messages/' . $code . '.php';\n\n // default fallback : may be overwritten by the ensuing include\n $fallback = ($code != 'en') ? 'en' : false;\n\n // load primary localisation\n if (!file_exists($filename)) {\n // skip the include: will rely solely on fallback\n $filename = $this->dir . '/Language/messages/en.php';\n $cache = array();\n } else {\n include $filename;\n $cache = compact($this->keys);\n }\n\n // load fallback localisation\n if (!empty($fallback)) {\n\n // infinite recursion guard\n if (isset($languages_seen[$code])) {\n trigger_error('Circular fallback reference in language ' .\n $code, E_USER_ERROR);\n $fallback = 'en';\n }\n $language_seen[$code] = true;\n\n // load the fallback recursively\n $this->loadLanguage($fallback);\n $fallback_cache = $this->cache[$fallback];\n\n // merge fallback with current language\n foreach ( $this->keys as $key ) {\n if (isset($cache[$key]) && isset($fallback_cache[$key])) {\n if (isset($this->mergeable_keys_map[$key])) {\n $cache[$key] = $cache[$key] + $fallback_cache[$key];\n } elseif (isset($this->mergeable_keys_list[$key])) {\n $cache[$key] = array_merge( $fallback_cache[$key], $cache[$key] );\n }\n } else {\n $cache[$key] = $fallback_cache[$key];\n }\n }\n\n }\n\n // save to cache for later retrieval\n $this->cache[$code] = $cache;\n\n return;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Length.php",
"content": " true, 'ex' => true, 'px' => true, 'in' => true,\n 'cm' => true, 'mm' => true, 'pt' => true, 'pc' => true\n );\n\n /**\n * @param number $n Magnitude\n * @param string $u Unit\n */\n public function __construct($n = '0', $u = false) {\n $this->n = (string) $n;\n $this->unit = $u !== false ? (string) $u : false;\n }\n\n /**\n * @param string $s Unit string, like '2em' or '3.4in'\n * @warning Does not perform validation.\n */\n static public function make($s) {\n if ($s instanceof HTMLPurifier_Length) return $s;\n $n_length = strspn($s, '1234567890.+-');\n $n = substr($s, 0, $n_length);\n $unit = substr($s, $n_length);\n if ($unit === '') $unit = false;\n return new HTMLPurifier_Length($n, $unit);\n }\n\n /**\n * Validates the number and unit.\n */\n protected function validate() {\n // Special case:\n if ($this->n === '+0' || $this->n === '-0') $this->n = '0';\n if ($this->n === '0' && $this->unit === false) return true;\n if (!ctype_lower($this->unit)) $this->unit = strtolower($this->unit);\n if (!isset(HTMLPurifier_Length::$allowedUnits[$this->unit])) return false;\n // Hack:\n $def = new HTMLPurifier_AttrDef_CSS_Number();\n $result = $def->validate($this->n, false, false);\n if ($result === false) return false;\n $this->n = $result;\n return true;\n }\n\n /**\n * Returns string representation of number.\n */\n public function toString() {\n if (!$this->isValid()) return false;\n return $this->n . $this->unit;\n }\n\n /**\n * Retrieves string numeric magnitude.\n */\n public function getN() {return $this->n;}\n\n /**\n * Retrieves string unit.\n */\n public function getUnit() {return $this->unit;}\n\n /**\n * Returns true if this length unit is valid.\n */\n public function isValid() {\n if ($this->isValid === null) $this->isValid = $this->validate();\n return $this->isValid;\n }\n\n /**\n * Compares two lengths, and returns 1 if greater, -1 if less and 0 if equal.\n * @warning If both values are too large or small, this calculation will\n * not work properly\n */\n public function compareTo($l) {\n if ($l === false) return false;\n if ($l->unit !== $this->unit) {\n $converter = new HTMLPurifier_UnitConverter();\n $l = $converter->convert($l, $this->unit);\n if ($l === false) return false;\n }\n return $this->n - $l->n;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Lexer/DOMLex.php",
"content": "factory = new HTMLPurifier_TokenFactory();\n }\n\n public function tokenizeHTML($html, $config, $context) {\n\n $html = $this->normalize($html, $config, $context);\n\n // attempt to armor stray angled brackets that cannot possibly\n // form tags and thus are probably being used as emoticons\n if ($config->get('Core.AggressivelyFixLt')) {\n $char = '[^a-z!\\/]';\n $comment = \"/|\\z)/is\";\n $html = preg_replace_callback($comment, array($this, 'callbackArmorCommentEntities'), $html);\n do {\n $old = $html;\n $html = preg_replace(\"/<($char)/i\", '<\\\\1', $html);\n } while ($html !== $old);\n $html = preg_replace_callback($comment, array($this, 'callbackUndoCommentSubst'), $html); // fix comments\n }\n\n // preprocess html, essential for UTF-8\n $html = $this->wrapHTML($html, $config, $context);\n\n $doc = new DOMDocument();\n $doc->encoding = 'UTF-8'; // theoretically, the above has this covered\n\n set_error_handler(array($this, 'muteErrorHandler'));\n $doc->loadHTML($html);\n restore_error_handler();\n\n $tokens = array();\n $this->tokenizeDOM(\n $doc->getElementsByTagName('html')->item(0)-> // \n getElementsByTagName('body')->item(0)-> // \n getElementsByTagName('div')->item(0) // \n , $tokens);\n return $tokens;\n }\n\n /**\n * Recursive function that tokenizes a node, putting it into an accumulator.\n *\n * @param $node DOMNode to be tokenized.\n * @param $tokens Array-list of already tokenized tokens.\n * @param $collect Says whether or start and close are collected, set to\n * false at first recursion because it's the implicit DIV\n * tag you're dealing with.\n * @returns Tokens of node appended to previously passed tokens.\n */\n protected function tokenizeDOM($node, &$tokens, $collect = false) {\n\n // intercept non element nodes. WE MUST catch all of them,\n // but we're not getting the character reference nodes because\n // those should have been preprocessed\n if ($node->nodeType === XML_TEXT_NODE) {\n $tokens[] = $this->factory->createText($node->data);\n return;\n } elseif ($node->nodeType === XML_CDATA_SECTION_NODE) {\n // undo libxml's special treatment of )#si',\n array($this, 'scriptCallback'), $html);\n }\n\n $html = $this->normalize($html, $config, $context);\n\n $cursor = 0; // our location in the text\n $inside_tag = false; // whether or not we're parsing the inside of a tag\n $array = array(); // result array\n\n // This is also treated to mean maintain *column* numbers too\n $maintain_line_numbers = $config->get('Core.MaintainLineNumbers');\n\n if ($maintain_line_numbers === null) {\n // automatically determine line numbering by checking\n // if error collection is on\n $maintain_line_numbers = $config->get('Core.CollectErrors');\n }\n\n if ($maintain_line_numbers) {\n $current_line = 1;\n $current_col = 0;\n $length = strlen($html);\n } else {\n $current_line = false;\n $current_col = false;\n $length = false;\n }\n $context->register('CurrentLine', $current_line);\n $context->register('CurrentCol', $current_col);\n $nl = \"\\n\";\n // how often to manually recalculate. This will ALWAYS be right,\n // but it's pretty wasteful. Set to 0 to turn off\n $synchronize_interval = $config->get('Core.DirectLexLineNumberSyncInterval');\n\n $e = false;\n if ($config->get('Core.CollectErrors')) {\n $e =& $context->get('ErrorCollector');\n }\n\n // for testing synchronization\n $loops = 0;\n\n while(++$loops) {\n\n // $cursor is either at the start of a token, or inside of\n // a tag (i.e. there was a < immediately before it), as indicated\n // by $inside_tag\n\n if ($maintain_line_numbers) {\n\n // $rcursor, however, is always at the start of a token.\n $rcursor = $cursor - (int) $inside_tag;\n\n // Column number is cheap, so we calculate it every round.\n // We're interested at the *end* of the newline string, so\n // we need to add strlen($nl) == 1 to $nl_pos before subtracting it\n // from our \"rcursor\" position.\n $nl_pos = strrpos($html, $nl, $rcursor - $length);\n $current_col = $rcursor - (is_bool($nl_pos) ? 0 : $nl_pos + 1);\n\n // recalculate lines\n if (\n $synchronize_interval && // synchronization is on\n $cursor > 0 && // cursor is further than zero\n $loops % $synchronize_interval === 0 // time to synchronize!\n ) {\n $current_line = 1 + $this->substrCount($html, $nl, 0, $cursor);\n }\n\n }\n\n $position_next_lt = strpos($html, '<', $cursor);\n $position_next_gt = strpos($html, '>', $cursor);\n\n // triggers on \"asdf\" but not \"asdf \"\n // special case to set up context\n if ($position_next_lt === $cursor) {\n $inside_tag = true;\n $cursor++;\n }\n\n if (!$inside_tag && $position_next_lt !== false) {\n // We are not inside tag and there still is another tag to parse\n $token = new\n HTMLPurifier_Token_Text(\n $this->parseData(\n substr(\n $html, $cursor, $position_next_lt - $cursor\n )\n )\n );\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $position_next_lt - $cursor);\n }\n $array[] = $token;\n $cursor = $position_next_lt + 1;\n $inside_tag = true;\n continue;\n } elseif (!$inside_tag) {\n // We are not inside tag but there are no more tags\n // If we're already at the end, break\n if ($cursor === strlen($html)) break;\n // Create Text of rest of string\n $token = new\n HTMLPurifier_Token_Text(\n $this->parseData(\n substr(\n $html, $cursor\n )\n )\n );\n if ($maintain_line_numbers) $token->rawPosition($current_line, $current_col);\n $array[] = $token;\n break;\n } elseif ($inside_tag && $position_next_gt !== false) {\n // We are in tag and it is well formed\n // Grab the internals of the tag\n $strlen_segment = $position_next_gt - $cursor;\n\n if ($strlen_segment < 1) {\n // there's nothing to process!\n $token = new HTMLPurifier_Token_Text('<');\n $cursor++;\n continue;\n }\n\n $segment = substr($html, $cursor, $strlen_segment);\n\n if ($segment === false) {\n // somehow, we attempted to access beyond the end of\n // the string, defense-in-depth, reported by Nate Abele\n break;\n }\n\n // Check if it's a comment\n if (\n substr($segment, 0, 3) === '!--'\n ) {\n // re-determine segment length, looking for -->\n $position_comment_end = strpos($html, '-->', $cursor);\n if ($position_comment_end === false) {\n // uh oh, we have a comment that extends to\n // infinity. Can't be helped: set comment\n // end position to end of string\n if ($e) $e->send(E_WARNING, 'Lexer: Unclosed comment');\n $position_comment_end = strlen($html);\n $end = true;\n } else {\n $end = false;\n }\n $strlen_segment = $position_comment_end - $cursor;\n $segment = substr($html, $cursor, $strlen_segment);\n $token = new\n HTMLPurifier_Token_Comment(\n substr(\n $segment, 3, $strlen_segment - 3\n )\n );\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $strlen_segment);\n }\n $array[] = $token;\n $cursor = $end ? $position_comment_end : $position_comment_end + 3;\n $inside_tag = false;\n continue;\n }\n\n // Check if it's an end tag\n $is_end_tag = (strpos($segment,'/') === 0);\n if ($is_end_tag) {\n $type = substr($segment, 1);\n $token = new HTMLPurifier_Token_End($type);\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $position_next_gt - $cursor);\n }\n $array[] = $token;\n $inside_tag = false;\n $cursor = $position_next_gt + 1;\n continue;\n }\n\n // Check leading character is alnum, if not, we may\n // have accidently grabbed an emoticon. Translate into\n // text and go our merry way\n if (!ctype_alpha($segment[0])) {\n // XML: $segment[0] !== '_' && $segment[0] !== ':'\n if ($e) $e->send(E_NOTICE, 'Lexer: Unescaped lt');\n $token = new HTMLPurifier_Token_Text('<');\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $position_next_gt - $cursor);\n }\n $array[] = $token;\n $inside_tag = false;\n continue;\n }\n\n // Check if it is explicitly self closing, if so, remove\n // trailing slash. Remember, we could have a tag like
, so\n // any later token processing scripts must convert improperly\n // classified EmptyTags from StartTags.\n $is_self_closing = (strrpos($segment,'/') === $strlen_segment-1);\n if ($is_self_closing) {\n $strlen_segment--;\n $segment = substr($segment, 0, $strlen_segment);\n }\n\n // Check if there are any attributes\n $position_first_space = strcspn($segment, $this->_whitespace);\n\n if ($position_first_space >= $strlen_segment) {\n if ($is_self_closing) {\n $token = new HTMLPurifier_Token_Empty($segment);\n } else {\n $token = new HTMLPurifier_Token_Start($segment);\n }\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $position_next_gt - $cursor);\n }\n $array[] = $token;\n $inside_tag = false;\n $cursor = $position_next_gt + 1;\n continue;\n }\n\n // Grab out all the data\n $type = substr($segment, 0, $position_first_space);\n $attribute_string =\n trim(\n substr(\n $segment, $position_first_space\n )\n );\n if ($attribute_string) {\n $attr = $this->parseAttributeString(\n $attribute_string\n , $config, $context\n );\n } else {\n $attr = array();\n }\n\n if ($is_self_closing) {\n $token = new HTMLPurifier_Token_Empty($type, $attr);\n } else {\n $token = new HTMLPurifier_Token_Start($type, $attr);\n }\n if ($maintain_line_numbers) {\n $token->rawPosition($current_line, $current_col);\n $current_line += $this->substrCount($html, $nl, $cursor, $position_next_gt - $cursor);\n }\n $array[] = $token;\n $cursor = $position_next_gt + 1;\n $inside_tag = false;\n continue;\n } else {\n // inside tag, but there's no ending > sign\n if ($e) $e->send(E_WARNING, 'Lexer: Missing gt');\n $token = new\n HTMLPurifier_Token_Text(\n '<' .\n $this->parseData(\n substr($html, $cursor)\n )\n );\n if ($maintain_line_numbers) $token->rawPosition($current_line, $current_col);\n // no cursor scroll? Hmm...\n $array[] = $token;\n break;\n }\n break;\n }\n\n $context->destroy('CurrentLine');\n $context->destroy('CurrentCol');\n return $array;\n }\n\n /**\n * PHP 5.0.x compatible substr_count that implements offset and length\n */\n protected function substrCount($haystack, $needle, $offset, $length) {\n static $oldVersion;\n if ($oldVersion === null) {\n $oldVersion = version_compare(PHP_VERSION, '5.1', '<');\n }\n if ($oldVersion) {\n $haystack = substr($haystack, $offset, $length);\n return substr_count($haystack, $needle);\n } else {\n return substr_count($haystack, $needle, $offset, $length);\n }\n }\n\n /**\n * Takes the inside of an HTML tag and makes an assoc array of attributes.\n *\n * @param $string Inside of tag excluding name.\n * @returns Assoc array of attributes.\n */\n public function parseAttributeString($string, $config, $context) {\n $string = (string) $string; // quick typecast\n\n if ($string == '') return array(); // no attributes\n\n $e = false;\n if ($config->get('Core.CollectErrors')) {\n $e =& $context->get('ErrorCollector');\n }\n\n // let's see if we can abort as quickly as possible\n // one equal sign, no spaces => one attribute\n $num_equal = substr_count($string, '=');\n $has_space = strpos($string, ' ');\n if ($num_equal === 0 && !$has_space) {\n // bool attribute\n return array($string => $string);\n } elseif ($num_equal === 1 && !$has_space) {\n // only one attribute\n list($key, $quoted_value) = explode('=', $string);\n $quoted_value = trim($quoted_value);\n if (!$key) {\n if ($e) $e->send(E_ERROR, 'Lexer: Missing attribute key');\n return array();\n }\n if (!$quoted_value) return array($key => '');\n $first_char = @$quoted_value[0];\n $last_char = @$quoted_value[strlen($quoted_value)-1];\n\n $same_quote = ($first_char == $last_char);\n $open_quote = ($first_char == '\"' || $first_char == \"'\");\n\n if ( $same_quote && $open_quote) {\n // well behaved\n $value = substr($quoted_value, 1, strlen($quoted_value) - 2);\n } else {\n // not well behaved\n if ($open_quote) {\n if ($e) $e->send(E_ERROR, 'Lexer: Missing end quote');\n $value = substr($quoted_value, 1);\n } else {\n $value = $quoted_value;\n }\n }\n if ($value === false) $value = '';\n return array($key => $value);\n }\n\n // setup loop environment\n $array = array(); // return assoc array of attributes\n $cursor = 0; // current position in string (moves forward)\n $size = strlen($string); // size of the string (stays the same)\n\n // if we have unquoted attributes, the parser expects a terminating\n // space, so let's guarantee that there's always a terminating space.\n $string .= ' ';\n\n while(true) {\n\n if ($cursor >= $size) {\n break;\n }\n\n $cursor += ($value = strspn($string, $this->_whitespace, $cursor));\n // grab the key\n\n $key_begin = $cursor; //we're currently at the start of the key\n\n // scroll past all characters that are the key (not whitespace or =)\n $cursor += strcspn($string, $this->_whitespace . '=', $cursor);\n\n $key_end = $cursor; // now at the end of the key\n\n $key = substr($string, $key_begin, $key_end - $key_begin);\n\n if (!$key) {\n if ($e) $e->send(E_ERROR, 'Lexer: Missing attribute key');\n $cursor += strcspn($string, $this->_whitespace, $cursor + 1); // prevent infinite loop\n continue; // empty key\n }\n\n // scroll past all whitespace\n $cursor += strspn($string, $this->_whitespace, $cursor);\n\n if ($cursor >= $size) {\n $array[$key] = $key;\n break;\n }\n\n // if the next character is an equal sign, we've got a regular\n // pair, otherwise, it's a bool attribute\n $first_char = @$string[$cursor];\n\n if ($first_char == '=') {\n // key=\"value\"\n\n $cursor++;\n $cursor += strspn($string, $this->_whitespace, $cursor);\n\n if ($cursor === false) {\n $array[$key] = '';\n break;\n }\n\n // we might be in front of a quote right now\n\n $char = @$string[$cursor];\n\n if ($char == '\"' || $char == \"'\") {\n // it's quoted, end bound is $char\n $cursor++;\n $value_begin = $cursor;\n $cursor = strpos($string, $char, $cursor);\n $value_end = $cursor;\n } else {\n // it's not quoted, end bound is whitespace\n $value_begin = $cursor;\n $cursor += strcspn($string, $this->_whitespace, $cursor);\n $value_end = $cursor;\n }\n\n // we reached a premature end\n if ($cursor === false) {\n $cursor = $size;\n $value_end = $cursor;\n }\n\n $value = substr($string, $value_begin, $value_end - $value_begin);\n if ($value === false) $value = '';\n $array[$key] = $this->parseData($value);\n $cursor++;\n\n } else {\n // boolattr\n if ($key !== '') {\n $array[$key] = $key;\n } else {\n // purely theoretical\n if ($e) $e->send(E_ERROR, 'Lexer: Missing attribute key');\n }\n\n }\n }\n return $array;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Lexer/PEARSax3.php",
"content": "tokens = array();\n\n $string = $this->normalize($string, $config, $context);\n\n $parser = new XML_HTMLSax3();\n $parser->set_object($this);\n $parser->set_element_handler('openHandler','closeHandler');\n $parser->set_data_handler('dataHandler');\n $parser->set_escape_handler('escapeHandler');\n\n // doesn't seem to work correctly for attributes\n $parser->set_option('XML_OPTION_ENTITIES_PARSED', 1);\n\n $parser->parse($string);\n\n return $this->tokens;\n\n }\n\n /**\n * Open tag event handler, interface is defined by PEAR package.\n */\n public function openHandler(&$parser, $name, $attrs, $closed) {\n // entities are not resolved in attrs\n foreach ($attrs as $key => $attr) {\n $attrs[$key] = $this->parseData($attr);\n }\n if ($closed) {\n $this->tokens[] = new HTMLPurifier_Token_Empty($name, $attrs);\n } else {\n $this->tokens[] = new HTMLPurifier_Token_Start($name, $attrs);\n }\n return true;\n }\n\n /**\n * Close tag event handler, interface is defined by PEAR package.\n */\n public function closeHandler(&$parser, $name) {\n // HTMLSax3 seems to always send empty tags an extra close tag\n // check and ignore if you see it:\n // [TESTME] to make sure it doesn't overreach\n if ($this->tokens[count($this->tokens)-1] instanceof HTMLPurifier_Token_Empty) {\n return true;\n }\n $this->tokens[] = new HTMLPurifier_Token_End($name);\n return true;\n }\n\n /**\n * Data event handler, interface is defined by PEAR package.\n */\n public function dataHandler(&$parser, $data) {\n $this->tokens[] = new HTMLPurifier_Token_Text($data);\n return true;\n }\n\n /**\n * Escaped text handler, interface is defined by PEAR package.\n */\n public function escapeHandler(&$parser, $data) {\n if (strpos($data, '--') === 0) {\n $this->tokens[] = new HTMLPurifier_Token_Comment($data);\n }\n // CDATA is handled elsewhere, but if it was handled here:\n //if (strpos($data, '[CDATA[') === 0) {\n // $this->tokens[] = new HTMLPurifier_Token_Text(\n // substr($data, 7, strlen($data) - 9) );\n //}\n return true;\n }\n\n}\n\n// vim: et sw=4 sts=4\n"
},
{
"path": "libraries/purifier/HTMLPurifier/Lexer/PH5P.php",
"content": "normalize($html, $config, $context);\n $new_html = $this->wrapHTML($new_html, $config, $context);\n try {\n $parser = new HTML5($new_html);\n $doc = $parser->save();\n } catch (DOMException $e) {\n // Uh oh, it failed. Punt to DirectLex.\n $lexer = new HTMLPurifier_Lexer_DirectLex();\n $context->register('PH5PError', $e); // save the error, so we can detect it\n return $lexer->tokenizeHTML($html, $config, $context); // use original HTML\n }\n $tokens = array();\n $this->tokenizeDOM(\n $doc->getElementsByTagName('html')->item(0)-> // \n getElementsByTagName('body')->item(0)-> // \n getElementsByTagName('div')->item(0) // \n , $tokens);\n return $tokens;\n }\n \n}\n\n/*\n\nCopyright 2007 Jeroen van der Meer Questions
\n\n\n\n\n\n\n\n QUESTIONS_PER_PAGE && $nopagination != 1):?>\n\n\n\n\n \n\n\n\n\n\n\n\n\n\n\n\">\n\n \n\n\n cmts | votes\n\n\n\n ans | votes\n\n\n\n \n\n\">\n\n\n\n\n- /questions?tag=\">
\n\n
\n\n\n\n\n\n\n\n\n QUESTIONS_PER_PAGE):?>\n\n\n\n\n\n \n\n\nSorry, we could not find what you were looking for. You may want to have a look at \n/tags\">tags.
Or /questions/ask\">ask questions.
"
},
{
"path": "views/questions/view.php",
"content": "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n\">\n\n\n\n\n\n\n\n\n
/questions/cache/\" target=\"_blank\">(view cache)
\n\n\n\n\n\n- /questions?tag=\">
\n\n
\n\n\n\n\">\n\n\n\n - /users//\">\n\n\">\n\n 0) { echo \"voteselected\"; }?>\" id=\"commentfave_\">♥\n\n\n\n\n\n\" class=\"commentsadd\">\n')\">Add comment\n\n')\">\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ANSWERS_PER_PAGE):?>\n\n\n\n\n\n\n\n Comments Answers
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nAccepted Answer\n\n\n\n\n\n\n\">\n\n\n\n\n\n\">\n\n\n\n\n\n\n\n\n\" class=\"commentsadd\">\n\n')\">Add comment\n')\">\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ANSWERS_PER_PAGE):?>\n\n\n\n\n\n\nNo comments on this article as yet.No answers as yet. Be the first to write an answer.
\n\n\n\n\n\n"
},
{
"path": "views/tags/index.php",
"content": " Tags
\n\n\n\n"
},
{
"path": "views/users/edit.php",
"content": "\n\n\n"
},
{
"path": "views/users/index.php",
"content": " Users
\n\n\n\n"
},
{
"path": "views/users/login.php",
"content": ""
},
{
"path": "views/users/logout.php",
"content": "You have successfully logged out
\n"
},
{
"path": "views/users/register.php",
"content": "\n\n\n"
},
{
"path": "views/users/view.php",
"content": "\n\nPoints:
\n"
},
{
"path": "web.config",
"content": "\n\n \n \n \n \n \n \n \n \n \n \n \n"
}
]