| 1: | <?php | 
| 2: | |
| 3: | class HTMLPurifier_AttrTransform_SafeEmbed extends HTMLPurifier_AttrTransform | 
| 4: | { | 
| 5: | /** | 
| 6: | * @type string | 
| 7: | */ | 
| 8: | public $name = "SafeEmbed"; | 
| 9: | |
| 10: | /** | 
| 11: | * @param array $attr | 
| 12: | * @param HTMLPurifier_Config $config | 
| 13: | * @param HTMLPurifier_Context $context | 
| 14: | * @return array | 
| 15: | */ | 
| 16: | public function transform($attr, $config, $context) | 
| 17: | { | 
| 18: | $attr['allowscriptaccess'] = 'never'; | 
| 19: | $attr['allownetworking'] = 'internal'; | 
| 20: | $attr['type'] = 'application/x-shockwave-flash'; | 
| 21: | return $attr; | 
| 22: | } | 
| 23: | } | 
| 24: | |
| 25: | // vim: et sw=4 sts=4 | 
| 26: |