mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-03-22 01:55:56 -05:00
2105dc8e57
Closes #1567 The main reason I'm not simply merging Annika's PR is because this way makes it clearer that I'm taking responsibility for all this code, that it's mostly code I wrote, and also because it makes it easier to ensure that none of the files have been changed. (Not that I don't personally trust Annika, but I have something resembling an obligation to users not to expose them to risks based on personal trust.)
31 lines
955 B
PHP
31 lines
955 B
PHP
<?php
|
|
|
|
/**
|
|
* @file
|
|
* Emulation layer for code that used kses(), substituting in HTML Purifier.
|
|
*/
|
|
|
|
require_once dirname(__FILE__) . '/HTMLPurifier.auto.php';
|
|
|
|
function kses($string, $allowed_html, $allowed_protocols = null) {
|
|
$config = HTMLPurifier_Config::createDefault();
|
|
$allowed_elements = array();
|
|
$allowed_attributes = array();
|
|
foreach ($allowed_html as $element => $attributes) {
|
|
$allowed_elements[$element] = true;
|
|
foreach ($attributes as $attribute => $x) {
|
|
$allowed_attributes["$element.$attribute"] = true;
|
|
}
|
|
}
|
|
$config->set('HTML.AllowedElements', $allowed_elements);
|
|
$config->set('HTML.AllowedAttributes', $allowed_attributes);
|
|
$allowed_schemes = array();
|
|
if ($allowed_protocols !== null) {
|
|
$config->set('URI.AllowedSchemes', $allowed_protocols);
|
|
}
|
|
$purifier = new HTMLPurifier($config);
|
|
return $purifier->purify($string);
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|