Iframe Whitelisting by URI instead of hostname.
commitbddd1e033bb8a93b832ef0d540d7bdd6a0f8c2d8
authorBradley M. Froehle <brad.froehle@gmail.com>
Wed, 23 Mar 2011 01:13:21 +0000 (22 18:13 -0700)
committerBradley M. Froehle <brad.froehle@gmail.com>
Wed, 23 Mar 2011 01:17:02 +0000 (22 18:17 -0700)
tree8e08b1cc852656b5acfaee19f52ac3b206aeb65b
parentd1ec84f287bd623ebb05167d8a310a9925fa8842
Iframe Whitelisting by URI instead of hostname.

Replace %URI.IframeHostWhitelist with %URI.IframeWhitelistRegexp
which is an array of PCRE regular expressions. If any match the
iframe src URI, the iframe will be allowed.

As before, %HTML.SafeIframe must also be enabled.

Signed-off-by: Bradley M. Froehle <brad.froehle@gmail.com>
14 files changed:
NEWS
configdoc/usage.xml
docs/dev-config-naming.txt
library/HTMLPurifier.includes.php
library/HTMLPurifier.safe-includes.php
library/HTMLPurifier/ConfigSchema/schema.ser
library/HTMLPurifier/ConfigSchema/schema/HTML.SafeIframe.txt
library/HTMLPurifier/ConfigSchema/schema/URI.IframeHostWhitelist.txt
library/HTMLPurifier/URIDefinition.php
library/HTMLPurifier/URIFilter/IframeHostWhitelist.php [deleted file]
library/HTMLPurifier/URIFilter/IframeWhitelistRegexp.php [new file with mode: 0644]
tests/HTMLPurifier/HTMLT/safe-iframe-googlemaps.htmlt
tests/HTMLPurifier/HTMLT/safe-iframe-youtube.htmlt
tests/HTMLPurifier/HTMLT/safe-iframe.htmlt