aboutsummaryrefslogtreecommitdiff
path: root/mod/htmlawed/start.php
blob: 4f53a1259a85d6b026134854e7398adaf5e38d77 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
<?php
	/**
	 * Elgg htmLawed tag filtering.
	 *
	 * @package ElgghtmLawed
	 * @author Curverider Ltd
	 * @author Brett Profitt
	 * @link http://elgg.com/
	 */

	/**
	 * Initialise plugin
	 *
	 */
	function htmlawed_init()
	{
		/** For now declare allowed tags and protocols here, TODO: Make this configurable */
		global $CONFIG;
		$CONFIG->htmlawed_config = array(
			// seems to handle about everything we need.
			'safe' => true,
			'deny_attribute' => 'class',
			'hook_tag' => 'htmlawed_hook',

			'schemes' => '*:http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto'
				// apparent this doesn't work.
				//. 'style:color,cursor,text-align,font-size,font-weight,font-style,border,margin,padding,float'
		);

		register_plugin_hook('validate', 'input', 'htmlawed_filter_tags', 1);
	}

	/**
	 * Hooked for all elements in htmlawed.
	 * Used to filter out style attributes we don't want.
	 *
	 * @param $element
	 * @param $attribute_array
	 * @return unknown_type
	 */
	function htmlawed_hook($element, $attribute_array) {
		// these are the default styles used by tinymce.
		$allowed_styles = array(
			'color', 'cursor', 'text-align', 'vertical-align', 'font-size',
			'font-weight', 'font-style', 'border', 'border-top',
			'border-bottom', 'border-left', 'border-right',
			'margin', 'margin-top', 'margin-bottom', 'margin-left',
			'margin-right',	'padding', 'float', 'text-decoration'
		);

		// must return something.
		//if (array_key_exists('style', $attribute_array)) {
			$string = '';

			foreach ($attribute_array as $attr => $value) {
				if ($attr == 'style') {
					$styles = explode(';', $value);

					$style_str = '';
					foreach ($styles as $style) {
						if (!trim($style)) {
							continue;
						}
						list($style_attr, $style_value) = explode(':', trim($style));
						$style_attr = trim($style_attr);
						$style_value = trim($style_value);

						if (in_array($style_attr, $allowed_styles)) {
							$style_str .= "$style_attr: $style_value; ";
						}
					}

					if ($style_str) {
						$string .= " style = \"$style_str\"";
					}

				} else {
					$string .= " $attr = \"$value\"";
				}
			}

			$string = trim($string);
			return "<$element $string >";
		//}
	}

	/**
	 * htmLawed filtering of tags, called on a plugin hook
	 *
	 * @param mixed $var Variable to filter
	 * @return mixed
	 */
	function htmlawed_filter_tags($hook, $entity_type, $returnvalue, $params)
	{
		$return = $returnvalue;
		$var = $returnvalue;

		if (@include_once(dirname(__FILE__) . "/vendors/htmLawed/htmLawed.php")) {

			global $CONFIG;

			$htmlawed_config = $CONFIG->htmlawed_config;

			if (!is_array($var)) {
				$return = "";
				$return = htmLawed($var, $htmlawed_config);
			} else {
				$return = array();

				foreach($var as $key => $el) {
					$return[$key] = htmLawed($el, $htmlawed_config);
				}
			}
		}

		return $return;
	}


	register_elgg_event_handler('init','system','htmlawed_init');

?>