File oops_lib/Xoops/Core/Text/Sanitizer/Extensions/TextFilter.php

  1: <?php
  2: /*
  3:  You may not change or alter any portion of this comment or credits
  4:  of supporting developers from this source code or any supporting source code
  5:  which is considered copyrighted (c) material of the original comment or credit authors.
  6: 
  7:  This program is distributed in the hope that it will be useful,
  8:  but WITHOUT ANY WARRANTY; without even the implied warranty of
  9:  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 10: */
 11: 
 12: namespace Xoops\Core\Text\Sanitizer\Extensions;
 13: 
 14: use Xoops\Core\Text\Sanitizer;
 15: use Xoops\Core\Text\Sanitizer\FilterAbstract;
 16: 
 17: /**
 18:  * TextSanitizer filter - clean up HTML text
 19:  *
 20:  * @category  Sanitizer
 21:  * @package   Xoops\Core\Text
 22:  * @author    Taiwen Jiang <phppp@users.sourceforge.net>
 23:  * @copyright 2000-2015 XOOPS Project (http://xoops.org)
 24:  * @license   GNU GPL 2 (http://www.gnu.org/licenses/gpl-2.0.html)
 25:  * @link      http://xoops.org
 26:  */
 27: class TextFilter extends FilterAbstract
 28: {
 29:     /**
 30:      * @var array default configuration values
 31:      */
 32:     protected static $defaultConfiguration = [
 33:         'enabled' => false,
 34:         'tags' => array(),      // Tags to be filtered out
 35:         'patterns' => [         // patterns to be used for filtering
 36:             'search' => '',
 37:             'replace' => '',
 38:         ],
 39:     ];
 40: 
 41:     /**
 42:      * Apply HTML cleanup to text
 43:      *
 44:      * @param string $text  text to filter
 45:      * @param bool   $force true to force filtering even if user is an admin
 46:      *
 47:      * @return mixed
 48:      */
 49:     public function applyFilter($text, $force = true)
 50:     {
 51:         $xoops = \Xoops::getInstance();
 52:         if (!$force && $xoops->userIsAdmin) {
 53:             return $text;
 54:         }
 55: 
 56:         if (class_exists('\HTMLPurifier')) {
 57:             $config = \HTMLPurifier_Config::createDefault();
 58:             $purifier = new \HTMLPurifier($config);
 59:             $text = $purifier->purify($text);
 60:             return $text;
 61:         }
 62: 
 63:         $tags = array();
 64:         $search = array();
 65:         $replace = array();
 66:         $config = $this->config;
 67:         if (!empty($config["patterns"])) {
 68:             foreach ($config["patterns"] as $pattern) {
 69:                 if (empty($pattern['search'])) {
 70:                     continue;
 71:                 }
 72:                 $search[] = $pattern['search'];
 73:                 $replace[] = $pattern['replace'];
 74:             }
 75:         }
 76:         if (!empty($config["tags"])) {
 77:             $tags = array_map("trim", $config["tags"]);
 78:         }
 79: 
 80:         // Set embedded tags
 81:         $tags[] = "SCRIPT";
 82:         $tags[] = "VBSCRIPT";
 83:         $tags[] = "JAVASCRIPT";
 84:         foreach ($tags as $tag) {
 85:             $search[] = "/<" . $tag . "[^>]*?>.*?<\/" . $tag . ">/si";
 86:             $replace[] = " [!" . strtoupper($tag) . " FILTERED!] ";
 87:         }
 88:         // Set meta refresh tag
 89:         $search[] = "/<META[^>\/]*HTTP-EQUIV=(['\"])?REFRESH(\\1)[^>\/]*?\/>/si";
 90:         $replace[] = "";
 91:         // Sanitizing scripts in IMG tag
 92:         //$search[]= "/(<IMG[\s]+[^>\/]*SOURCE=)(['\"])?(.*)(\\2)([^>\/]*?\/>)/si";
 93:         //$replace[]="";
 94:         // Set iframe tag
 95:         $search[] = "/<IFRAME[^>\/]*SRC=(['\"])?([^>\/]*)(\\1)[^>\/]*?\/>/si";
 96:         $replace[] = " [!IFRAME FILTERED! \\2] ";
 97:         $search[] = "/<IFRAME[^>]*?>([^<]*)<\/IFRAME>/si";
 98:         $replace[] = " [!IFRAME FILTERED! \\1] ";
 99:         // action
100:         $text = preg_replace($search, $replace, $text);
101:         return $text;
102:     }
103: }
104:
Namespaces

Classes

Interfaces

Exceptions

Functions
