3 require_once 'common.php';
5 echo '<?xml version="1.0" encoding="UTF-8" ?>';
7 PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
8 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
9 <html xmlns
="http://www.w3.org/1999/xhtml">
11 <title
>HTML Purifier Preserve YouTube Smoketest
</title
>
12 <meta http
-equiv
="Content-Type" content
="text/html; charset=UTF-8" />
15 <h1
>HTML Purifier Preserve YouTube Smoketest
</h1
>
18 $string = '<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/BdU--T8rLns"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/BdU--T8rLns" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
20 <object width="416" height="337"><param name="movie" value="http://www.youtube.com/cp/vjVQa1PpcFNbP_fag8PvopkXZyiXyT0J8U47lw7x5Fc="></param><embed src="http://www.youtube.com/cp/vjVQa1PpcFNbP_fag8PvopkXZyiXyT0J8U47lw7x5Fc=" type="application/x-shockwave-flash" width="416" height="337"></embed></object>
22 <object width="640" height="385"><param name="movie" value="http://www.youtube.com/v/uNxBeJNyAqA&hl=en_US&fs=1&"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/uNxBeJNyAqA&hl=en_US&fs=1&" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="640" height="385"></embed></object>
24 <object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" height="385" width="480"><param name="width" value="480" /><param name="height" value="385" /><param name="src" value="http://www.youtube.com/p/E37ADDDFCA0FD050&hl=en" /><embed height="385" src="http://www.youtube.com/p/E37ADDDFCA0FD050&hl=en" type="application/x-shockwave-flash" width="480"></embed></object>
27 $regular_purifier = new HTMLPurifier();
29 $safeobject_purifier = new HTMLPurifier(array(
30 'HTML.SafeObject' => true,
31 'Output.FlashCompat' => true,
36 <p
><a href
="?break">Click here to see the unpurified
version (breaks validation
).</a
></p
>
38 if (isset($_GET['break'])) echo $string;
41 <h2
>Without YouTube exception
</h2
>
43 echo $regular_purifier->purify($string);
46 <h2
>With SafeObject exception
and flash compatibility
</h2
>
48 echo $safeobject_purifier->purify($string);