mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-04-01 06:56:15 -05:00
2105dc8e57
Closes #1567 The main reason I'm not simply merging Annika's PR is because this way makes it clearer that I'm taking responsibility for all this code, that it's mostly code I wrote, and also because it makes it easier to ensure that none of the files have been changed. (Not that I don't personally trust Annika, but I have something resembling an obligation to users not to expose them to risks based on personal trust.)
46 lines
1.1 KiB
PHP
46 lines
1.1 KiB
PHP
<?php
|
|
|
|
// must be called POST validation
|
|
|
|
/**
|
|
* Adds rel="nofollow" to all outbound links. This transform is
|
|
* only attached if Attr.Nofollow is TRUE.
|
|
*/
|
|
class HTMLPurifier_AttrTransform_Nofollow extends HTMLPurifier_AttrTransform
|
|
{
|
|
private $parser;
|
|
|
|
public function __construct() {
|
|
$this->parser = new HTMLPurifier_URIParser();
|
|
}
|
|
|
|
public function transform($attr, $config, $context) {
|
|
|
|
if (!isset($attr['href'])) {
|
|
return $attr;
|
|
}
|
|
|
|
// XXX Kind of inefficient
|
|
$url = $this->parser->parse($attr['href']);
|
|
$scheme = $url->getSchemeObj($config, $context);
|
|
|
|
if ($scheme->browsable && !$url->isLocal($config, $context)) {
|
|
if (isset($attr['rel'])) {
|
|
$rels = explode(' ', $attr['rel']);
|
|
if (!in_array('nofollow', $rels)) {
|
|
$rels[] = 'nofollow';
|
|
}
|
|
$attr['rel'] = implode(' ', $rels);
|
|
} else {
|
|
$attr['rel'] = 'nofollow';
|
|
}
|
|
}
|
|
|
|
return $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|