FM / HTMLPurifier

/var/www/vhosts/ihelp.ro/httpdocs/vendor/ezyang/htmlpurifier/library/HTMLPurifier/

/var/www/vhosts/ihelp.ro/httpdocs/vendor/ezyang/htmlpurifier/library/HTMLPurifier

Name	Size	Mode	Actions
AttrDef/	-	0755	rm
AttrTransform/	-	0755	rm
ChildDef/	-	0755	rm
ConfigSchema/	-	0755	rm
DefinitionCache/	-	0755	rm
EntityLookup/	-	0755	rm
Filter/	-	0755	rm
HTMLModule/	-	0755	rm
Injector/	-	0755	rm
Language/	-	0755	rm
Lexer/	-	0755	rm
Node/	-	0755	rm
Printer/	-	0755	rm
Strategy/	-	0755	rm
TagTransform/	-	0755	rm
Token/	-	0755	rm
URIFilter/	-	0755	rm
URIScheme/	-	0755	rm
VarParser/	-	0755	rm
Arborize.php	2550	0644	edit dl rm
AttrCollections.php	4862	0644	edit dl rm
AttrDef.php	5195	0644	edit dl rm
AttrTransform.php	1989	0644	edit dl rm
AttrTypes.php	3758	0644	edit dl rm
AttrValidator.php	6572	0644	edit dl rm
Bootstrap.php	4613	0644	edit dl rm
ChildDef.php	1559	0644	edit dl rm
Config.php	31701	0644	edit dl rm
ConfigSchema.php	5903	0644	edit dl rm
ContentSets.php	5640	0644	edit dl rm
Context.php	2634	0644	edit dl rm
CSSDefinition.php	19593	0644	edit dl rm
Definition.php	1361	0644	edit dl rm
DefinitionCache.php	3913	0644	edit dl rm
DefinitionCacheFactory.php	3201	0644	edit dl rm
Doctype.php	1582	0644	edit dl rm
DoctypeRegistry.php	4224	0644	edit dl rm
ElementDef.php	7531	0644	edit dl rm
Encoder.php	25793	0644	edit dl rm
EntityLookup.php	1426	0644	edit dl rm
EntityParser.php	9980	0644	edit dl rm
ErrorCollector.php	7625	0644	edit dl rm
ErrorStruct.php	1893	0644	edit dl rm
Exception.php	177	0644	edit dl rm
Filter.php	1625	0644	edit dl rm
Generator.php	10251	0644	edit dl rm
HTMLDefinition.php	17747	0644	edit dl rm
HTMLModule.php	10195	0644	edit dl rm
HTMLModuleManager.php	15946	0644	edit dl rm
IDAccumulator.php	1647	0644	edit dl rm
Injector.php	9006	0644	edit dl rm
Language.php	6062	0644	edit dl rm
LanguageFactory.php	6618	0644	edit dl rm
Length.php	3892	0644	edit dl rm
Lexer.php	13535	0644	edit dl rm
Node.php	1280	0644	edit dl rm
PercentEncoder.php	3565	0644	edit dl rm
Printer.php	5897	0644	edit dl rm
PropertyList.php	2783	0644	edit dl rm
PropertyListIterator.php	894	0644	edit dl rm
Queue.php	1551	0644	edit dl rm
Strategy.php	762	0644	edit dl rm
StringHash.php	1099	0644	edit dl rm
StringHashParser.php	3641	0644	edit dl rm
TagTransform.php	1098	0644	edit dl rm
Token.php	2225	0644	edit dl rm
TokenFactory.php	3099	0644	edit dl rm
UnitConverter.php	10130	0644	edit dl rm
URI.php	10596	0644	edit dl rm
URIDefinition.php	3430	0644	edit dl rm
URIFilter.php	2365	0644	edit dl rm
URIParser.php	2294	0644	edit dl rm
URIScheme.php	3481	0644	edit dl rm
URISchemeRegistry.php	2409	0644	edit dl rm
VarParser.php	5990	0644	edit dl rm
VarParserException.php	157	0644	edit dl rm
Zipper.php	4442	0644	edit dl rm

Edit: /var/www/vhosts/ihelp.ro/httpdocs/vendor/ezyang/htmlpurifier/library/HTMLPurifier/Generator.php (10251B)

<?php

/**
 * Generates HTML from tokens.
 * @todo Refactor interface so that configuration/context is determined
 *       upon instantiation, no need for messy generateFromTokens() calls
 * @todo Make some of the more internal functions protected, and have
 *       unit tests work around that
 */
class HTMLPurifier_Generator
{

/**
     * Whether or not generator should produce XML output.
     * @type bool
     */
    private $_xhtml = true;

/**
     * :HACK: Whether or not generator should comment the insides of <script> tags.
     * @type bool
     */
    private $_scriptFix = false;

/**
     * Cache of HTMLDefinition during HTML output to determine whether or
     * not attributes should be minimized.
     * @type HTMLPurifier_HTMLDefinition
     */
    private $_def;

/**
     * Cache of %Output.SortAttr.
     * @type bool
     */
    private $_sortAttr;

/**
     * Cache of %Output.FlashCompat.
     * @type bool
     */
    private $_flashCompat;

/**
     * Cache of %Output.FixInnerHTML.
     * @type bool
     */
    private $_innerHTMLFix;

/**
     * Stack for keeping track of object information when outputting IE
     * compatibility code.
     * @type array
     */
    private $_flashStack = array();

/**
     * Configuration for the generator
     * @type HTMLPurifier_Config
     */
    protected $config;

/**
     * @param HTMLPurifier_Config $config
     * @param HTMLPurifier_Context $context
     */
    public function __construct($config, $context)
    {
        $this->config = $config;
        $this->_scriptFix = $config->get('Output.CommentScriptContents');
        $this->_innerHTMLFix = $config->get('Output.FixInnerHTML');
        $this->_sortAttr = $config->get('Output.SortAttr');
        $this->_flashCompat = $config->get('Output.FlashCompat');
        $this->_def = $config->getHTMLDefinition();
        $this->_xhtml = $this->_def->doctype->xml;
    }

/**
     * Generates HTML from an array of tokens.
     * @param HTMLPurifier_Token[] $tokens Array of HTMLPurifier_Token
     * @return string Generated HTML
     */
    public function generateFromTokens($tokens)
    {
        if (!$tokens) {
            return '';
        }

// Basic algorithm
        $html = '';
        for ($i = 0, $size = count($tokens); $i < $size; $i++) {
            if ($this->_scriptFix && $tokens[$i]->name === 'script'
                && $i + 2 < $size && $tokens[$i+2] instanceof HTMLPurifier_Token_End) {
                // script special case
                // the contents of the script block must be ONE token
                // for this to work.
                $html .= $this->generateFromToken($tokens[$i++]);
                $html .= $this->generateScriptFromToken($tokens[$i++]);
            }
            $html .= $this->generateFromToken($tokens[$i]);
        }

// Tidy cleanup
        if (extension_loaded('tidy') && $this->config->get('Output.TidyFormat')) {
            $tidy = new Tidy;
            $tidy->parseString(
                $html,
                array(
                   'indent'=> true,
                   'output-xhtml' => $this->_xhtml,
                   'show-body-only' => true,
                   'indent-spaces' => 2,
                   'wrap' => 68,
                ),
                'utf8'
            );
            $tidy->cleanRepair();
            $html = (string) $tidy; // explicit cast necessary
        }

// Normalize newlines to system defined value
        if ($this->config->get('Core.NormalizeNewlines')) {
            $nl = $this->config->get('Output.Newline');
            if ($nl === null) {
                $nl = PHP_EOL;
            }
            if ($nl !== "\n") {
                $html = str_replace("\n", $nl, $html);
            }
        }
        return $html;
    }

/**
     * Generates HTML from a single token.
     * @param HTMLPurifier_Token $token HTMLPurifier_Token object.
     * @return string Generated HTML
     */
    public function generateFromToken($token)
    {
        if (!$token instanceof HTMLPurifier_Token) {
            trigger_error('Cannot generate HTML from non-HTMLPurifier_Token object', E_USER_WARNING);
            return '';

} elseif ($token instanceof HTMLPurifier_Token_Start) {
            $attr = $this->generateAttributes($token->attr, $token->name);
            if ($this->_flashCompat) {
                if ($token->name == "object") {
                    $flash = new stdClass();
                    $flash->attr = $token->attr;
                    $flash->param = array();
                    $this->_flashStack[] = $flash;
                }
            }
            return '<' . $token->name . ($attr ? ' ' : '') . $attr . '>';

} elseif ($token instanceof HTMLPurifier_Token_End) {
            $_extra = '';
            if ($this->_flashCompat) {
                if ($token->name == "object" && !empty($this->_flashStack)) {
                    // doesn't do anything for now
                }
            }
            return $_extra . '</' . $token->name . '>';

} elseif ($token instanceof HTMLPurifier_Token_Empty) {
            if ($this->_flashCompat && $token->name == "param" && !empty($this->_flashStack)) {
                $this->_flashStack[count($this->_flashStack)-1]->param[$token->attr['name']] = $token->attr['value'];
            }
            $attr = $this->generateAttributes($token->attr, $token->name);
             return '<' . $token->name . ($attr ? ' ' : '') . $attr .
                ( $this->_xhtml ? ' /': '' ) // <br /> v. <br>
                . '>';

} elseif ($token instanceof HTMLPurifier_Token_Text) {
            return $this->escape($token->data, ENT_NOQUOTES);

} elseif ($token instanceof HTMLPurifier_Token_Comment) {
            return '';
        } else {
            return '';

}
    }

/**
     * Special case processor for the contents of script tags
     * @param HTMLPurifier_Token $token HTMLPurifier_Token object.
     * @return string
     * @warning This runs into problems if there's already a literal
     *          --> somewhere inside the script contents.
     */
    public function generateScriptFromToken($token)
    {
        if (!$token instanceof HTMLPurifier_Token_Text) {
            return $this->generateFromToken($token);
        }
        // Thanks <http://lachy.id.au/log/2005/05/script-comments>
        $data = preg_replace('#//\s*$#', '', $token->data);
        return '<![CDATA[//><!]]>';
    }

/**
     * Generates attribute declarations from attribute array.
     * @note This does not include the leading or trailing space.
     * @param array $assoc_array_of_attributes Attribute array
     * @param string $element Name of element attributes are for, used to check
     *        attribute minimization.
     * @return string Generated HTML fragment for insertion.
     */
    public function generateAttributes($assoc_array_of_attributes, $element = '')
    {
        $html = '';
        if ($this->_sortAttr) {
            ksort($assoc_array_of_attributes);
        }
        foreach ($assoc_array_of_attributes as $key => $value) {
            if (!$this->_xhtml) {
                // Remove namespaced attributes
                if (strpos($key, ':') !== false) {
                    continue;
                }
                // Check if we should minimize the attribute: val="val" -> val
                if ($element && !empty($this->_def->info[$element]->attr[$key]->minimized)) {
                    $html .= $key . ' ';
                    continue;
                }
            }
            // Workaround for Internet Explorer innerHTML bug.
            // Essentially, Internet Explorer, when calculating
            // innerHTML, omits quotes if there are no instances of
            // angled brackets, quotes or spaces.  However, when parsing
            // HTML (for example, when you assign to innerHTML), it
            // treats backticks as quotes.  Thus,
            //      <img alt="``" />
            // becomes
            //      <img alt=`` />
            // becomes
            //      <img alt='' />
            // Fortunately, all we need to do is trigger an appropriate
            // quoting style, which we do by adding an extra space.
            // This also is consistent with the W3C spec, which states
            // that user agents may ignore leading or trailing
            // whitespace (in fact, most don't, at least for attributes
            // like alt, but an extra space at the end is barely
            // noticeable).  Still, we have a configuration knob for
            // this, since this transformation is not necesary if you
            // don't process user input with innerHTML or you don't plan
            // on supporting Internet Explorer.
            if ($this->_innerHTMLFix) {
                if (strpos($value, '`') !== false) {
                    // check if correct quoting style would not already be
                    // triggered
                    if (strcspn($value, '"\' <>') === strlen($value)) {
                        // protect!
                        $value .= ' ';
                    }
                }
            }
            $html .= $key.'="'.$this->escape($value).'" ';
        }
        return rtrim($html);
    }

/**
     * Escapes raw text data.
     * @todo This really ought to be protected, but until we have a facility
     *       for properly generating HTML here w/o using tokens, it stays
     *       public.
     * @param string $string String data to escape for HTML.
     * @param int $quote Quoting style, like htmlspecialchars. ENT_NOQUOTES is
     *               permissible for non-attribute output.
     * @return string escaped data.
     */
    public function escape($string, $quote = null)
    {
        // Workaround for APC bug on Mac Leopard reported by sidepodcast
        // http://htmlpurifier.org/phorum/read.php?3,4823,4846
        if ($quote === null) {
            $quote = ENT_COMPAT;
        }
        return htmlspecialchars($string, $quote, 'UTF-8');
    }
}

// vim: et sw=4 sts=4

cmd: