true,
'deny_attribute' => 'class, on*',
'hook_tag' => 'htmlawed_tag_post_processor',
'schemes' => '*:http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto',
// apparent this doesn't work.
// 'style:color,cursor,text-align,font-size,font-weight,font-style,border,margin,padding,float'
);
// add nofollow to all links on output
if (!elgg_in_context('input')) {
$htmlawed_config['anti_link_spam'] = array('/./', '');
}
$htmlawed_config = elgg_trigger_plugin_hook('config', 'htmlawed', null, $htmlawed_config);
if (!is_array($var)) {
$result = htmLawed($var, $htmlawed_config);
} else {
array_walk_recursive($var, 'htmLawedArray', $htmlawed_config);
$result = $var;
}
return $result;
}
/**
* wrapper function for htmlawed for handling arrays
*/
function htmLawedArray(&$v, $k, $htmlawed_config) {
$v = htmLawed($v, $htmlawed_config);
}
/**
* Post processor for tags in htmlawed
*
* This runs after htmlawed has filtered. It runs for each tag and filters out
* style attributes we don't want.
*
* This function triggers the 'allowed_styles', 'htmlawed' plugin hook.
*
* @todo since these styles are created for tinymce, shouldn't they be in the
* tinymce plugin?
*
* @param string $element The tag element name
* @param array $attributes An array of attributes
* @return string
*/
function htmlawed_tag_post_processor($element, $attributes = array()) {
// these are the default styles used by tinymce.
$allowed_styles = array(
'color', 'cursor', 'text-align', 'vertical-align', 'font-size',
'font-weight', 'font-style', 'border', 'border-top', 'background-color',
'border-bottom', 'border-left', 'border-right',
'margin', 'margin-top', 'margin-bottom', 'margin-left',
'margin-right', 'padding', 'float', 'text-decoration'
);
$params = array('tag' => $element);
$allowed_styles = elgg_trigger_plugin_hook('allowed_styles', 'htmlawed', $params, $allowed_styles);
// must return something.
$string = '';
foreach ($attributes as $attr => $value) {
if ($attr == 'style') {
$styles = explode(';', $value);
$style_str = '';
foreach ($styles as $style) {
if (!trim($style)) {
continue;
}
list($style_attr, $style_value) = explode(':', trim($style));
$style_attr = trim($style_attr);
$style_value = trim($style_value);
if (in_array($style_attr, $allowed_styles)) {
$style_str .= "$style_attr: $style_value; ";
}
}
if ($style_str) {
$style_str = trim($style_str);
$string .= " style=\"$style_str\"";
}
} else {
$string .= " $attr=\"$value\"";
}
}
// some things (tinymce) don't like tags like so make sure
// to only add a space if needed.
if ($string = trim($string)) {
$string = " $string";
}
$r = "<$element$string>";
return $r;
}