Distilleries / Security

src/Distilleries/Security/Helpers/Security.php

Spacing +12 added lines, -12 removed lines

@@ -164,7 +164,7 @@ 
             // do the long opening tags.
             $str = preg_replace('/<\?(php)/i', "&lt;?\\1", $str);
         } else {
-            $str = str_replace(['<?', '?' . '>'], ['&lt;?', '?&gt;'], $str);
+            $str = str_replace(['<?', '?'.'>'], ['&lt;?', '?&gt;'], $str);
         }
 
         /*
@@ -190,12 +190,12 @@ 
             $temp = '';
 
             for ($i = 0, $wordlen = strlen($word); $i < $wordlen; $i++) {
-                $temp .= substr($word, $i, 1) . "\s*";
+                $temp .= substr($word, $i, 1)."\s*";
             }
 
             // We only want to do this when it is followed by a non-word character
             // That way valid stuff like "dealer to" does not become "dealerto"
-            $str = preg_replace_callback('#(' . substr($temp, 0, -3) . ')(\W)#is', [$this, '_compact_exploded_words'],
+            $str = preg_replace_callback('#('.substr($temp, 0, -3).')(\W)#is', [$this, '_compact_exploded_words'],
                 $str);
         }
 
@@ -236,7 +236,7 @@ 
            * Becomes: &lt;blink&gt;
            */
         $naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';
-        $str = preg_replace_callback('#<(/*\s*)(' . $naughty . ')([^><]*)([><]*)#is', [$this, '_sanitize_naughty_html'],
+        $str = preg_replace_callback('#<(/*\s*)('.$naughty.')([^><]*)([><]*)#is', [$this, '_sanitize_naughty_html'],
             $str);
 
         /*
@@ -299,8 +299,8 @@ 
 
         do {
             $str = preg_replace(
-                "#<(/?[^><]+?)([^A-Za-z\-])(" . implode('|',
-                    $evil_attributes) . ")(\s*=\s*)([\"][^>]*?[\"]|[\'][^>]*?[\']|[^>]*?)([\s><])([><]*)#i",
+                "#<(/?[^><]+?)([^A-Za-z\-])(".implode('|',
+                    $evil_attributes).")(\s*=\s*)([\"][^>]*?[\"]|[\'][^>]*?[\']|[^>]*?)([\s><])([><]*)#i",
                 "<$1$6",
                 $str, -1, $count
             );
@@ -335,10 +335,10 @@ 
         }
 
         $str = html_entity_decode($str, ENT_COMPAT, $charset);
-        $str = preg_replace_callback('~&#x(0*[0-9a-f]{2,5})~i', function ($matches) {
+        $str = preg_replace_callback('~&#x(0*[0-9a-f]{2,5})~i', function($matches) {
             return chr(hexdec($matches[1]));
         }, $str);
-        return preg_replace_callback('~&#([0-9]{2,4})~', function ($matches) {
+        return preg_replace_callback('~&#([0-9]{2,4})~', function($matches) {
             return chr($matches[1]);
         }, $str);
     }
@@ -411,7 +411,7 @@ 
      */
     protected function _compact_exploded_words($matches)
     {
-        return preg_replace('/\s+/s', '', $matches[1]) . $matches[2];
+        return preg_replace('/\s+/s', '', $matches[1]).$matches[2];
     }
 
     // --------------------------------------------------------------------
@@ -427,7 +427,7 @@ 
     protected function _sanitize_naughty_html($matches)
     {
         // encode opening brace
-        $str = '&lt;' . $matches[1] . $matches[2] . $matches[3];
+        $str = '&lt;'.$matches[1].$matches[2].$matches[3];
 
         // encode captured opening or closing brace to prevent recursive vectors
         $str .= str_replace(['>', '<'], ['&gt;', '&lt;'],
@@ -559,7 +559,7 @@ 
 
         // 901119URL5918AMP18930PROTECT8198
 
-        $str = preg_replace('|\&([a-z\_0-9\-]+)\=([a-z\_0-9\-]+)|i', $this->xss_hash() . "\\1=\\2", $str);
+        $str = preg_replace('|\&([a-z\_0-9\-]+)\=([a-z\_0-9\-]+)|i', $this->xss_hash()."\\1=\\2", $str);
 
         /*
          * Validate standard character entities
@@ -597,7 +597,7 @@ 
         $str = str_replace(array_keys($this->_never_allowed_str), $this->_never_allowed_str, $str);
 
         foreach ($this->_never_allowed_regex as $regex) {
-            $str = preg_replace('#' . $regex . '#is', '[removed]', $str);
+            $str = preg_replace('#'.$regex.'#is', '[removed]', $str);
         }
 
         return $str;