[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  /**
   4   * Validates an integer representation of pixels according to the HTML spec.
   5   */
   6  class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef
   7  {
   8  
   9      /**
  10       * @type int
  11       */
  12      protected $max;
  13  
  14      /**
  15       * @param int $max
  16       */
  17      public function __construct($max = null)
  18      {
  19          $this->max = $max;
  20      }
  21  
  22      /**
  23       * @param string $string
  24       * @param HTMLPurifier_Config $config
  25       * @param HTMLPurifier_Context $context
  26       * @return bool|string
  27       */
  28      public function validate($string, $config, $context)
  29      {
  30          $string = trim($string);
  31          if ($string === '0') {
  32              return $string;
  33          }
  34          if ($string === '') {
  35              return false;
  36          }
  37          $length = strlen($string);
  38          if (substr($string, $length - 2) == 'px') {
  39              $string = substr($string, 0, $length - 2);
  40          }
  41          if (!is_numeric($string)) {
  42              return false;
  43          }
  44          $int = (int)$string;
  45  
  46          if ($int < 0) {
  47              return '0';
  48          }
  49  
  50          // upper-bound value, extremely high values can
  51          // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
  52          // WARNING, above link WILL crash you if you're using Windows
  53  
  54          if ($this->max !== null && $int > $this->max) {
  55              return (string)$this->max;
  56          }
  57          return (string)$int;
  58      }
  59  
  60      /**
  61       * @param string $string
  62       * @return HTMLPurifier_AttrDef
  63       */
  64      public function make($string)
  65      {
  66          if ($string === '') {
  67              $max = null;
  68          } else {
  69              $max = (int)$string;
  70          }
  71          $class = get_class($this);
  72          return new $class($max);
  73      }
  74  }
  75  
  76  // vim: et sw=4 sts=4