libs\TexyConfigurator.php

  1: <?php
  2: 
  3: /**
  4:  * Texy! - human-readable text to HTML converter.
  5:  *
  6:  * @copyright  Copyright (c) 2004, 2010 David Grudl
  7:  * @license    GNU GENERAL PUBLIC LICENSE version 2 or 3
  8:  * @link       http://texy.info
  9:  * @package    Texy
 10:  */
 11: 
 12: 
 13: 
 14: /**
 15:  * Texy basic configurators.
 16:  *
 17:  * <code>
 18:  *     $texy = new Texy();
 19:  *     TexyConfigurator::safeMode($texy);
 20:  * </code>
 21:  *
 22:  * @copyright  Copyright (c) 2004, 2010 David Grudl
 23:  * @package    Texy
 24:  */
 25: class TexyConfigurator
 26: {
 27:     public static $safeTags = array(
 28:         'a'         => array('href', 'title'),
 29:         'acronym'   => array('title'),
 30:         'b'         => array(),
 31:         'br'        => array(),
 32:         'cite'      => array(),
 33:         'code'      => array(),
 34:         'em'        => array(),
 35:         'i'         => array(),
 36:         'strong'    => array(),
 37:         'sub'       => array(),
 38:         'sup'       => array(),
 39:         'q'         => array(),
 40:         'small'     => array(),
 41:     );
 42: 
 43: 
 44: 
 45:     /**
 46:      * static class.
 47:      */
 48:     final public function __construct()
 49:     {
 50:         throw new LogicException("Cannot instantiate static class " . get_class($this));
 51:     }
 52: 
 53: 
 54: 
 55:     /**
 56:      * Configure Texy! for web comments and other usages, where input text may insert attacker.
 57:      *
 58:      * @param  Texy  object to configure
 59:      * @return void
 60:      */
 61:     public static function safeMode(Texy $texy)
 62:     {
 63:         $texy->allowedClasses = Texy::NONE;                 // no class or ID are allowed
 64:         $texy->allowedStyles  = Texy::NONE;                 // style modifiers are disabled
 65:         $texy->allowedTags = self::$safeTags;               // only some "safe" HTML tags and attributes are allowed
 66:         $texy->urlSchemeFilters[Texy::FILTER_ANCHOR] = '#https?:|ftp:|mailto:#A';
 67:         $texy->urlSchemeFilters[Texy::FILTER_IMAGE] = '#https?:#A';
 68:         $texy->allowed['image'] = FALSE;                    // disable images
 69:         $texy->allowed['link/definition'] = FALSE;          // disable [ref]: URL  reference definitions
 70:         $texy->allowed['html/comment'] = FALSE;             // disable HTML comments
 71:         $texy->linkModule->forceNoFollow = TRUE;            // force rel="nofollow"
 72:     }
 73: 
 74: 
 75: 
 76:     /**
 77:      * Disable all links.
 78:      *
 79:      * @param  Texy  object to configure
 80:      * @return void
 81:      */
 82:     public static function disableLinks(Texy $texy)
 83:     {
 84:         $texy->allowed['link/reference'] = FALSE;
 85:         $texy->allowed['link/email'] = FALSE;
 86:         $texy->allowed['link/url'] = FALSE;
 87:         $texy->allowed['link/definition'] = FALSE;
 88:         $texy->phraseModule->linksAllowed = FALSE;
 89: 
 90:         if (is_array($texy->allowedTags)) {
 91:             unset($texy->allowedTags['a']);
 92:         } // TODO: else...
 93:     }
 94: 
 95: 
 96: 
 97:     /**
 98:      * Disable all images.
 99:      *
100:      * @param  Texy  object to configure
101:      * @return void
102:      */
103:     public static function disableImages(Texy $texy)
104:     {
105:         $texy->allowed['image'] = FALSE;
106:         $texy->allowed['figure'] = FALSE;
107:         $texy->allowed['image/definition'] = FALSE;
108: 
109:         if (is_array($texy->allowedTags)) {
110:             unset($texy->allowedTags['img'], $texy->allowedTags['object'], $texy->allowedTags['embed'], $texy->allowedTags['applet']);
111:         } // TODO: else...
112:     }
113: 
114: }
115:
Namespaces

Classes

Interfaces
