49 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			49 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| /**
 | |
|  * Validates an integer representation of pixels according to the HTML spec.
 | |
|  */
 | |
| class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef
 | |
| {
 | |
| 
 | |
|     protected $max;
 | |
| 
 | |
|     public function __construct($max = null) {
 | |
|         $this->max = $max;
 | |
|     }
 | |
| 
 | |
|     public function validate($string, $config, $context) {
 | |
| 
 | |
|         $string = trim($string);
 | |
|         if ($string === '0') return $string;
 | |
|         if ($string === '')  return false;
 | |
|         $length = strlen($string);
 | |
|         if (substr($string, $length - 2) == 'px') {
 | |
|             $string = substr($string, 0, $length - 2);
 | |
|         }
 | |
|         if (!is_numeric($string)) return false;
 | |
|         $int = (int) $string;
 | |
| 
 | |
|         if ($int < 0) return '0';
 | |
| 
 | |
|         // upper-bound value, extremely high values can
 | |
|         // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
 | |
|         // WARNING, above link WILL crash you if you're using Windows
 | |
| 
 | |
|         if ($this->max !== null && $int > $this->max) return (string) $this->max;
 | |
| 
 | |
|         return (string) $int;
 | |
| 
 | |
|     }
 | |
| 
 | |
|     public function make($string) {
 | |
|         if ($string === '') $max = null;
 | |
|         else $max = (int) $string;
 | |
|         $class = get_class($this);
 | |
|         return new $class($max);
 | |
|     }
 | |
| 
 | |
| }
 | |
| 
 | |
| // vim: et sw=4 sts=4
 |