SWAMPy

✎ CARVE FLESH

EDITING: SafeScripting.php

<?php

/**
 * A "safe" script module. No inline JS is allowed, and pointed to JS
 * files must match whitelist.
 */
class HTMLPurifier_HTMLModule_SafeScripting extends HTMLPurifier_HTMLModule
{
    /**
     * @type string
     */
    public $name = 'SafeScripting';

/**
     * @param HTMLPurifier_Config $config
     */
    public function setup($config)
    {
        // These definitions are not intrinsically safe: the attribute transforms
        // are a vital part of ensuring safety.

$allowed = $config->get('HTML.SafeScripting');
        $script = $this->addElement(
            'script',
            'Inline',
            'Optional:', // Not `Empty` to not allow to autoclose the <script /> tag @see https://www.w3.org/TR/html4/interact/scripts.html
            null,
            array(
                // While technically not required by the spec, we're forcing
                // it to this value.
                'type' => 'Enum#text/javascript',
                'src*' => new HTMLPurifier_AttrDef_Enum(array_keys($allowed), /*case sensitive*/ true)
            )
        );
        $script->attr_transform_pre[] =
        $script->attr_transform_post[] = new HTMLPurifier_AttrTransform_ScriptRequired();
    }
}

// vim: et sw=4 sts=4

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 Tidy/	DIR	—	2026-02-11 01:44
📄 Bdo.php	PHP	1 KB	2026-02-11 01:44	EDIT
📄 CommonAttributes.php	PHP	722 B	2026-02-11 01:44	EDIT
📄 Edit.php	PHP	1.4 KB	2026-02-11 01:44	EDIT
📄 Forms.php	PHP	5.7 KB	2026-02-11 01:44	EDIT
📄 Hypertext.php	PHP	996 B	2026-02-11 01:44	EDIT
📄 Iframe.php	PHP	1.3 KB	2026-02-11 01:44	EDIT
📄 Image.php	PHP	1.4 KB	2026-02-11 01:44	EDIT
📄 Legacy.php	PHP	5.7 KB	2026-02-11 01:44	EDIT
📄 List.php	PHP	1.9 KB	2026-02-11 01:44	EDIT
📄 Name.php	PHP	669 B	2026-02-11 01:44	EDIT
📄 Nofollow.php	PHP	507 B	2026-02-11 01:44	EDIT
📄 NonXMLCommonAttributes.php	PHP	354 B	2026-02-11 01:44	EDIT
📄 Object.php	PHP	1.5 KB	2026-02-11 01:44	EDIT
📄 Presentation.php	PHP	1.4 KB	2026-02-11 01:44	EDIT
📄 Proprietary.php	PHP	995 B	2026-02-11 01:44	EDIT
📄 Ruby.php	PHP	1 KB	2026-02-11 01:44	EDIT
📄 SafeEmbed.php	PHP	1.1 KB	2026-02-11 01:44	EDIT
📄 SafeObject.php	PHP	1.9 KB	2026-02-11 01:44	EDIT
📄 SafeScripting.php	PHP	1.2 KB	2026-02-11 01:44	EDIT
📄 Scripting.php	PHP	2.3 KB	2026-02-11 01:44	EDIT
📄 StyleAttribute.php	PHP	780 B	2026-02-11 01:44	EDIT
📄 Tables.php	PHP	2.3 KB	2026-02-11 01:44	EDIT
📄 Target.php	PHP	599 B	2026-02-11 01:44	EDIT
📄 TargetBlank.php	PHP	522 B	2026-02-11 01:44	EDIT
📄 TargetNoopener.php	PHP	516 B	2026-02-11 01:44	EDIT
📄 TargetNoreferrer.php	PHP	526 B	2026-02-11 01:44	EDIT
📄 Text.php	PHP	3.4 KB	2026-02-11 01:44	EDIT
📄 Tidy.php	PHP	7.1 KB	2026-02-11 01:44	EDIT
📄 XMLCommonAttributes.php	PHP	352 B	2026-02-11 01:44	EDIT