HTMLPurifier_AttrDef::expandCSSEscape() - Code Metrics - Hannesalm/EventCalendar - Measure and Improve Code Quality continuously with Scrutinizer

HTMLPurifier_AttrDef::expandCSSEscape() C
last analyzed 2016-06-19 14:11 UTC

↳ Parent: HTMLPurifier_AttrDef

Complexity

Conditions	12
Paths	11

Size

Total Lines	40
Code Lines	25

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

Metric	Value
cc	12
eloc	25
c	1
b	0
f	0
nc	11
nop	1
dl	0
loc	40
rs	5.1612

How to fix Complexity

<?php

/**
 * Base class for all validating attribute definitions.
 *
 * This family of classes forms the core for not only HTML attribute validation,
 * but also any sort of string that needs to be validated or cleaned (which
 * means CSS properties and composite definitions are defined here too).
 * Besides defining (through code) what precisely makes the string valid,
 * subclasses are also responsible for cleaning the code if possible.
 */

abstract class HTMLPurifier_AttrDef
namespace YourVendor;

class YourClass { }
{

    /**
     * Tells us whether or not an HTML attribute is minimized.
     * Has no meaning in other contexts.
     * @type bool
     */
    public $minimized = false;

    /**
     * Tells us whether or not an HTML attribute is required.
     * Has no meaning in other contexts
     * @type bool
     */
    public $required = false;

    /**
     * Validates and cleans passed string according to a definition.
     *
     * @param string $string String to be validated and cleaned.
     * @param HTMLPurifier_Config $config Mandatory HTMLPurifier_Config object.
     * @param HTMLPurifier_Context $context Mandatory HTMLPurifier_Context object.
     */
    abstract public function validate($string, $config, $context);

    /**
     * Convenience method that parses a string as if it were CDATA.
     *
     * This method process a string in the manner specified at
     * <http://www.w3.org/TR/html4/types.html#h-6.2> by removing
     * leading and trailing whitespace, ignoring line feeds, and replacing
     * carriage returns and tabs with spaces.  While most useful for HTML
     * attributes specified as CDATA, it can also be applied to most CSS
     * values.
     *
     * @note This method is not entirely standards compliant, as trim() removes
     *       more types of whitespace than specified in the spec. In practice,
     *       this is rarely a problem, as those extra characters usually have
     *       already been removed by HTMLPurifier_Encoder.
     *
     * @warning This processing is inconsistent with XML's whitespace handling
     *          as specified by section 3.3.3 and referenced XHTML 1.0 section
     *          4.7.  However, note that we are NOT necessarily
     *          parsing XML, thus, this behavior may still be correct. We
     *          assume that newlines have been normalized.
     */
    public function parseCDATA($string)
    {
        $string = trim($string);
        $string = str_replace(array("\n", "\t", "\r"), ' ', $string);
        return $string;
    }

    /**
     * Factory method for creating this class from a string.
     * @param string $string String construction info
     * @return HTMLPurifier_AttrDef Created AttrDef object corresponding to $string
     */
    public function make($string)
    {
        // default implementation, return a flyweight of this object.
        // If $string has an effect on the returned object (i.e. you
        // need to overload this method), it is best
        // to clone or instantiate new copies. (Instantiation is safer.)
        return $this;
    }

    /**
     * Removes spaces from rgb(0, 0, 0) so that shorthand CSS properties work
     * properly. THIS IS A HACK!
     * @param string $string a CSS colour definition
     * @return string
     */
    protected function mungeRgb($string)
    {
        return preg_replace('/rgb\((\d+)\s*,\s*(\d+)\s*,\s*(\d+)\)/', 'rgb(\1,\2,\3)', $string);
    }

    /**
     * Parses a possibly escaped CSS string and returns the "pure"
     * version of it.
     */
    protected function expandCSSEscape($string)
    {
        // flexibly parse it
        $ret = '';
        for ($i = 0, $c = strlen($string); $i < $c; $i++) {

            if ($string[$i] === '\\') {
                $i++;
                if ($i >= $c) {
                    $ret .= '\\';
                    break;
                }
                if (ctype_xdigit($string[$i])) {
                    $code = $string[$i];
                    for ($a = 1, $i++; $i < $c && $a < 6; $i++, $a++) {
                        if (!ctype_xdigit($string[$i])) {
                            break;
                        }
                        $code .= $string[$i];
                    }
                    // We have to be extremely careful when adding
                    // new characters, to make sure we're not breaking
                    // the encoding.
                    $char = HTMLPurifier_Encoder::unichr(hexdec($code));
                    if (HTMLPurifier_Encoder::cleanUTF8($char) === '') {
                        continue;
                    }
                    $ret .= $char;
                    if ($i < $c && trim($string[$i]) !== '') {
                        $i--;
                    }
                    continue;
                }
                if ($string[$i] === "\n") {
                    continue;
                }
            }
            $ret .= $string[$i];
        }
        return $ret;
    }
}

// vim: et sw=4 sts=4


1			<?php
2
3			/**
4			* Base class for all validating attribute definitions.
5			*
6			* This family of classes forms the core for not only HTML attribute validation,
7			* but also any sort of string that needs to be validated or cleaned (which
8			* means CSS properties and composite definitions are defined here too).
9			* Besides defining (through code) what precisely makes the string valid,
10			* subclasses are also responsible for cleaning the code if possible.
11			*/
12
13			abstract class HTMLPurifier_AttrDef
			0 ignored issues – show Coding Style Compatibility introduced 2016-06-19 13:37 UTC by Report Bug Copy Issue Report PSR1 recommends that each class must be in a namespace of at least one level to avoid collisions. You can fix this by adding a namespace to your class: namespace YourVendor; class YourClass { } When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries. Loading history...
14			{
15
16			/**
17			* Tells us whether or not an HTML attribute is minimized.
18			* Has no meaning in other contexts.
19			* @type bool
20			*/
21			public $minimized = false;
22
23			/**
24			* Tells us whether or not an HTML attribute is required.
25			* Has no meaning in other contexts
26			* @type bool
27			*/
28			public $required = false;
29
30			/**
31			* Validates and cleans passed string according to a definition.
32			*
33			* @param string $string String to be validated and cleaned.
34			* @param HTMLPurifier_Config $config Mandatory HTMLPurifier_Config object.
35			* @param HTMLPurifier_Context $context Mandatory HTMLPurifier_Context object.
36			*/
37			abstract public function validate($string, $config, $context);
38
39			/**
40			* Convenience method that parses a string as if it were CDATA.
41			*
42			* This method process a string in the manner specified at
43			* <http://www.w3.org/TR/html4/types.html#h-6.2> by removing
44			* leading and trailing whitespace, ignoring line feeds, and replacing
45			* carriage returns and tabs with spaces. While most useful for HTML
46			* attributes specified as CDATA, it can also be applied to most CSS
47			* values.
48			*
49			* @note This method is not entirely standards compliant, as trim() removes
50			* more types of whitespace than specified in the spec. In practice,
51			* this is rarely a problem, as those extra characters usually have
52			* already been removed by HTMLPurifier_Encoder.
53			*
54			* @warning This processing is inconsistent with XML's whitespace handling
55			* as specified by section 3.3.3 and referenced XHTML 1.0 section
56			* 4.7. However, note that we are NOT necessarily
57			* parsing XML, thus, this behavior may still be correct. We
58			* assume that newlines have been normalized.
59			*/
60			public function parseCDATA($string)
61			{
62			$string = trim($string);
63			$string = str_replace(array("\n", "\t", "\r"), ' ', $string);
64			return $string;
65			}
66
67			/**
68			* Factory method for creating this class from a string.
69			* @param string $string String construction info
70			* @return HTMLPurifier_AttrDef Created AttrDef object corresponding to $string
71			*/
72			public function make($string)
73			{
74			// default implementation, return a flyweight of this object.
75			// If $string has an effect on the returned object (i.e. you
76			// need to overload this method), it is best
77			// to clone or instantiate new copies. (Instantiation is safer.)
78			return $this;
79			}
80
81			/**
82			* Removes spaces from rgb(0, 0, 0) so that shorthand CSS properties work
83			* properly. THIS IS A HACK!
84			* @param string $string a CSS colour definition
85			* @return string
86			*/
87			protected function mungeRgb($string)
88			{
89			return preg_replace('/rgb\((\d+)\s,\s(\d+)\s,\s(\d+)\)/', 'rgb(\1,\2,\3)', $string);
90			}
91
92			/**
93			* Parses a possibly escaped CSS string and returns the "pure"
94			* version of it.
95			*/
96			protected function expandCSSEscape($string)
97			{
98			// flexibly parse it
99			$ret = '';
100			for ($i = 0, $c = strlen($string); $i < $c; $i++) {
			0 ignored issues – show Comprehensibility Bug introduced 2016-06-19 13:37 UTC by Report Bug Copy Issue Report Loop incrementor ($i) jumbling with inner loop Loading history...
101			if ($string[$i] === '\\') {
102			$i++;
103			if ($i >= $c) {
104			$ret .= '\\';
105			break;
106			}
107			if (ctype_xdigit($string[$i])) {
108			$code = $string[$i];
109			for ($a = 1, $i++; $i < $c && $a < 6; $i++, $a++) {
110			if (!ctype_xdigit($string[$i])) {
111			break;
112			}
113			$code .= $string[$i];
114			}
115			// We have to be extremely careful when adding
116			// new characters, to make sure we're not breaking
117			// the encoding.
118			$char = HTMLPurifier_Encoder::unichr(hexdec($code));
119			if (HTMLPurifier_Encoder::cleanUTF8($char) === '') {
120			continue;
121			}
122			$ret .= $char;
123			if ($i < $c && trim($string[$i]) !== '') {
124			$i--;
125			}
126			continue;
127			}
128			if ($string[$i] === "\n") {
129			continue;
130			}
131			}
132			$ret .= $string[$i];
133			}
134			return $ret;
135			}
136			}
137
138			// vim: et sw=4 sts=4
139

GitHub Access Token became invalid

HTMLPurifier_AttrDef::expandCSSEscape() C
last analyzed 2016-06-19 14:11 UTC

Complexity

Size

Duplication

Importance

How to fix Complexity

Long Method

Hannesalm / EventCalendar

GitHub Access Token became invalid

HTMLPurifier_AttrDef::expandCSSEscape() C last analyzed 2016-06-19 14:11 UTC

Complexity

Size

Duplication

Importance

How to fix Complexity

Long Method

Duplication Side-by-Side

Filter issues like

HTMLPurifier_AttrDef::expandCSSEscape() C
last analyzed 2016-06-19 14:11 UTC