mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-03-23 10:35:57 -05:00
2105dc8e57
Closes #1567 The main reason I'm not simply merging Annika's PR is because this way makes it clearer that I'm taking responsibility for all this code, that it's mostly code I wrote, and also because it makes it easier to ensure that none of the files have been changed. (Not that I don't personally trust Annika, but I have something resembling an obligation to users not to expose them to risks based on personal trust.)
39 lines
887 B
PHP
39 lines
887 B
PHP
<?php
|
|
|
|
// must be called POST validation
|
|
|
|
/**
|
|
* Adds target="blank" to all outbound links. This transform is
|
|
* only attached if Attr.TargetBlank is TRUE. This works regardless
|
|
* of whether or not Attr.AllowedFrameTargets
|
|
*/
|
|
class HTMLPurifier_AttrTransform_TargetBlank extends HTMLPurifier_AttrTransform
|
|
{
|
|
private $parser;
|
|
|
|
public function __construct() {
|
|
$this->parser = new HTMLPurifier_URIParser();
|
|
}
|
|
|
|
public function transform($attr, $config, $context) {
|
|
|
|
if (!isset($attr['href'])) {
|
|
return $attr;
|
|
}
|
|
|
|
// XXX Kind of inefficient
|
|
$url = $this->parser->parse($attr['href']);
|
|
$scheme = $url->getSchemeObj($config, $context);
|
|
|
|
if ($scheme->browsable && !$url->isBenign($config, $context)) {
|
|
$attr['target'] = '_blank';
|
|
}
|
|
|
|
return $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// vim: et sw=4 sts=4
|