library/HTMLPurifier/AttrDef/HTML/Pixels.php

   1 <?php
   2
   3 /**
   4  * Validates an integer representation of pixels according to the HTML spec.
   5  */
   6 class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef
   7 {
   8
   9     /**
  10      * @type int
  11      */
  12     protected $max;
  13
  14     /**
  15      * @param int $max
  16      */
  17     public function __construct($max = null)
  18     {
  19         $this->max = $max;
  20     }
  21
  22     /**
  23      * @param string $string
  24      * @param HTMLPurifier_Config $config
  25      * @param HTMLPurifier_Context $context
  26      * @return bool|string
  27      */
  28     public function validate($string, $config, $context)
  29     {
  30         $string = trim($string);
  31         if ($string === '0') {
  32             return $string;
  33         }
  34         if ($string === '') {
  35             return false;
  36         }
  37         $length = strlen($string);
  38         if (substr($string, $length - 2) == 'px') {
  39             $string = substr($string, 0, $length - 2);
  40         }
  41         if (!is_numeric($string)) {
  42             return false;
  43         }
  44         $int = (int)$string;
  45
  46         if ($int < 0) {
  47             return '0';
  48         }
  49
  50         // upper-bound value, extremely high values can
  51         // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
  52         // WARNING, above link WILL crash you if you're using Windows
  53
  54         if ($this->max !== null && $int > $this->max) {
  55             return (string)$this->max;
  56         }
  57         return (string)$int;
  58     }
  59
  60     /**
  61      * @param string $string
  62      * @return HTMLPurifier_AttrDef
  63      */
  64     public function make($string)
  65     {
  66         if ($string === '') {
  67             $max = null;
  68         } else {
  69             $max = (int)$string;
  70         }
  71         $class = get_class($this);
  72         return new $class($max);
  73     }
  74 }
  75
  76 // vim: et sw=4 sts=4