Daniel Ziegenberg
be7f6d4834
Prior to this change, all the line endings in the imported HTMLPurifier library were using CRLF (\r\n aka Windows style), but the HTMLPurifier source and also the downloadable artefacts use LF (\n aka Linux style) as line endings. This has been the case since510d190382when with the commit "MDL-38672 import HTML Purifier 4.5.0" all line endings were changed from LF to CRLF. There was no comment in the commit on why this change was done. As the original source uses LF, this commit partly reverts510d190382and goes back to LF as line endings. Signed-off-by: Daniel Ziegenberg <daniel@ziegenberg.at>
91 lines
2.2 KiB
PHP
91 lines
2.2 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Validates a number as defined by the CSS spec.
|
|
*/
|
|
class HTMLPurifier_AttrDef_CSS_Number extends HTMLPurifier_AttrDef
|
|
{
|
|
|
|
/**
|
|
* Indicates whether or not only positive values are allowed.
|
|
* @type bool
|
|
*/
|
|
protected $non_negative = false;
|
|
|
|
/**
|
|
* @param bool $non_negative indicates whether negatives are forbidden
|
|
*/
|
|
public function __construct($non_negative = false)
|
|
{
|
|
$this->non_negative = $non_negative;
|
|
}
|
|
|
|
/**
|
|
* @param string $number
|
|
* @param HTMLPurifier_Config $config
|
|
* @param HTMLPurifier_Context $context
|
|
* @return string|bool
|
|
* @warning Some contexts do not pass $config, $context. These
|
|
* variables should not be used without checking HTMLPurifier_Length
|
|
*/
|
|
public function validate($number, $config, $context)
|
|
{
|
|
$number = $this->parseCDATA($number);
|
|
|
|
if ($number === '') {
|
|
return false;
|
|
}
|
|
if ($number === '0') {
|
|
return '0';
|
|
}
|
|
|
|
$sign = '';
|
|
switch ($number[0]) {
|
|
case '-':
|
|
if ($this->non_negative) {
|
|
return false;
|
|
}
|
|
$sign = '-';
|
|
case '+':
|
|
$number = substr($number, 1);
|
|
}
|
|
|
|
if (ctype_digit($number)) {
|
|
$number = ltrim($number, '0');
|
|
return $number ? $sign . $number : '0';
|
|
}
|
|
|
|
// Period is the only non-numeric character allowed
|
|
if (strpos($number, '.') === false) {
|
|
return false;
|
|
}
|
|
|
|
list($left, $right) = explode('.', $number, 2);
|
|
|
|
if ($left === '' && $right === '') {
|
|
return false;
|
|
}
|
|
if ($left !== '' && !ctype_digit($left)) {
|
|
return false;
|
|
}
|
|
|
|
// Remove leading zeros until positive number or a zero stays left
|
|
if (ltrim($left, '0') != '') {
|
|
$left = ltrim($left, '0');
|
|
} else {
|
|
$left = '0';
|
|
}
|
|
|
|
$right = rtrim($right, '0');
|
|
|
|
if ($right === '') {
|
|
return $left ? $sign . $left : '0';
|
|
} elseif (!ctype_digit($right)) {
|
|
return false;
|
|
}
|
|
return $sign . $left . '.' . $right;
|
|
}
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|