Edit File by line

{

[500] Fix | Delete

$attributes = array($attributes);

[501] Fix | Delete

}

[502] Fix | Delete

[503] Fix | Delete

if (!is_array($this->strip_htmltags) || !in_array($tag, $this->strip_htmltags))

[504] Fix | Delete

{

[505] Fix | Delete

$elements = $document->getElementsByTagName($tag);

[506] Fix | Delete

foreach ($elements as $element)

[507] Fix | Delete

{

[508] Fix | Delete

foreach ($attributes as $attribute)

[509] Fix | Delete

{

[510] Fix | Delete

if ($element->hasAttribute($attribute))

[511] Fix | Delete

{

[512] Fix | Delete

$value = $this->registry->call('Misc', 'absolutize_url', array($element->getAttribute($attribute), $this->base));

[513] Fix | Delete

if ($value !== false)

[514] Fix | Delete

{

[515] Fix | Delete

$value = $this->https_url($value);

[516] Fix | Delete

$element->setAttribute($attribute, $value);

[517] Fix | Delete

}

[518] Fix | Delete

}

[519] Fix | Delete

}

[520] Fix | Delete

}

[521] Fix | Delete

}

[522] Fix | Delete

}

[523] Fix | Delete

[524] Fix | Delete

public function do_strip_htmltags($match)

[525] Fix | Delete

{

[526] Fix | Delete

if ($this->encode_instead_of_strip)

[527] Fix | Delete

{

[528] Fix | Delete

if (isset($match[4]) && !in_array(strtolower($match[1]), array('script', 'style')))

[529] Fix | Delete

{

[530] Fix | Delete

$match[1] = htmlspecialchars($match[1], ENT_COMPAT, 'UTF-8');

[531] Fix | Delete

$match[2] = htmlspecialchars($match[2], ENT_COMPAT, 'UTF-8');

[532] Fix | Delete

return "<$match[1]$match[2]>$match[3]</$match[1]>";

[533] Fix | Delete

}

[534] Fix | Delete

else

[535] Fix | Delete

{

[536] Fix | Delete

return htmlspecialchars($match[0], ENT_COMPAT, 'UTF-8');

[537] Fix | Delete

}

[538] Fix | Delete

}

[539] Fix | Delete

elseif (isset($match[4]) && !in_array(strtolower($match[1]), array('script', 'style')))

[540] Fix | Delete

{

[541] Fix | Delete

return $match[4];

[542] Fix | Delete

}

[543] Fix | Delete

else

[544] Fix | Delete

{

[545] Fix | Delete

return '';

[546] Fix | Delete

}

[547] Fix | Delete

}

[548] Fix | Delete

[549] Fix | Delete

protected function strip_tag($tag, $document, $xpath, $type)

[550] Fix | Delete

{

[551] Fix | Delete

$elements = $xpath->query('body//' . $tag);

[552] Fix | Delete

if ($this->encode_instead_of_strip)

[553] Fix | Delete

{

[554] Fix | Delete

foreach ($elements as $element)

[555] Fix | Delete

{

[556] Fix | Delete

$fragment = $document->createDocumentFragment();

[557] Fix | Delete

[558] Fix | Delete

// For elements which aren't script or style, include the tag itself

[559] Fix | Delete

if (!in_array($tag, array('script', 'style')))

[560] Fix | Delete

{

[561] Fix | Delete

$text = '<' . $tag;

[562] Fix | Delete

if ($element->hasAttributes())

[563] Fix | Delete

{

[564] Fix | Delete

$attrs = array();

[565] Fix | Delete

foreach ($element->attributes as $name => $attr)

[566] Fix | Delete

{

[567] Fix | Delete

$value = $attr->value;

[568] Fix | Delete

[569] Fix | Delete

// In XHTML, empty values should never exist, so we repeat the value

[570] Fix | Delete

if (empty($value) && ($type & SIMPLEPIE_CONSTRUCT_XHTML))

[571] Fix | Delete

{

[572] Fix | Delete

$value = $name;

[573] Fix | Delete

}

[574] Fix | Delete

// For HTML, empty is fine

[575] Fix | Delete

elseif (empty($value) && ($type & SIMPLEPIE_CONSTRUCT_HTML))

[576] Fix | Delete

{

[577] Fix | Delete

$attrs[] = $name;

[578] Fix | Delete

continue;

[579] Fix | Delete

}

[580] Fix | Delete

[581] Fix | Delete

// Standard attribute text

[582] Fix | Delete

$attrs[] = $name . '="' . $attr->value . '"';

[583] Fix | Delete

}

[584] Fix | Delete

$text .= ' ' . implode(' ', $attrs);

[585] Fix | Delete

}

[586] Fix | Delete

$text .= '>';

[587] Fix | Delete

$fragment->appendChild(new DOMText($text));

[588] Fix | Delete

}

[589] Fix | Delete

[590] Fix | Delete

$number = $element->childNodes->length;

[591] Fix | Delete

for ($i = $number; $i > 0; $i--)

[592] Fix | Delete

{

[593] Fix | Delete

$child = $element->childNodes->item(0);

[594] Fix | Delete

$fragment->appendChild($child);

[595] Fix | Delete

}

[596] Fix | Delete

[597] Fix | Delete

if (!in_array($tag, array('script', 'style')))

[598] Fix | Delete

{

[599] Fix | Delete

$fragment->appendChild(new DOMText('</' . $tag . '>'));

[600] Fix | Delete

}

[601] Fix | Delete

[602] Fix | Delete

$element->parentNode->replaceChild($fragment, $element);

[603] Fix | Delete

}

[604] Fix | Delete

[605] Fix | Delete

return;

[606] Fix | Delete

}

[607] Fix | Delete

elseif (in_array($tag, array('script', 'style')))

[608] Fix | Delete

{

[609] Fix | Delete

foreach ($elements as $element)

[610] Fix | Delete

{

[611] Fix | Delete

$element->parentNode->removeChild($element);

[612] Fix | Delete

}

[613] Fix | Delete

[614] Fix | Delete

return;

[615] Fix | Delete

}

[616] Fix | Delete

else

[617] Fix | Delete

{

[618] Fix | Delete

foreach ($elements as $element)

[619] Fix | Delete

{

[620] Fix | Delete

$fragment = $document->createDocumentFragment();

[621] Fix | Delete

$number = $element->childNodes->length;

[622] Fix | Delete

for ($i = $number; $i > 0; $i--)

[623] Fix | Delete

{

[624] Fix | Delete

$child = $element->childNodes->item(0);

[625] Fix | Delete

$fragment->appendChild($child);

[626] Fix | Delete

}

[627] Fix | Delete

[628] Fix | Delete

$element->parentNode->replaceChild($fragment, $element);

[629] Fix | Delete

}

[630] Fix | Delete

}

[631] Fix | Delete

}

[632] Fix | Delete

[633] Fix | Delete

protected function strip_attr($attrib, $xpath)

[634] Fix | Delete

{

[635] Fix | Delete

$elements = $xpath->query('//*[@' . $attrib . ']');

[636] Fix | Delete

[637] Fix | Delete

foreach ($elements as $element)

[638] Fix | Delete

{

[639] Fix | Delete

$element->removeAttribute($attrib);

[640] Fix | Delete

}

[641] Fix | Delete

}

[642] Fix | Delete

[643] Fix | Delete

protected function add_attr($tag, $valuePairs, $document)

[644] Fix | Delete

{

[645] Fix | Delete

$elements = $document->getElementsByTagName($tag);

[646] Fix | Delete

foreach ($elements as $element)

[647] Fix | Delete

{

[648] Fix | Delete

foreach ($valuePairs as $attrib => $value)

[649] Fix | Delete

{

[650] Fix | Delete

$element->setAttribute($attrib, $value);

[651] Fix | Delete

}

[652] Fix | Delete

}

[653] Fix | Delete

}

[654] Fix | Delete

}

[655] Fix | Delete

[656] Fix | Delete