voku\helper\AntiXSS::_remove_disallowed_javascript()

Complexity

Conditions	8
Paths	64

Size

Total Lines	68
Code Lines	42

Duplication

Lines	40
Ratio	58.82 %

Importance

Changes

0

<?php
  private function _remove_disallowed_javascript($str)
  {
    do {
      $original = $str;

      if (stripos($str, '<a') !== false) {
        $str = preg_replace_callback(
            '#<a[^a-z0-9>]+([^>]*?)(?:>|$)#i',
            array(
                $this,
                '_js_link_removal_callback',
            ),
            $str
        );
      }

      if (stripos($str, '<img') !== false) {
        $str = preg_replace_callback(
            '#<img[^a-z0-9]+([^>]*?)(?:\s?/?>|$)#i',
            array(
                $this,
                '_js_src_removal_callback',
            ),
            $str
        );
      }

      if (stripos($str, '<audio') !== false) {
        $str = preg_replace_callback(
            '#<audio[^a-z0-9]+([^>]*?)(?:\s?/?>|$)#i',
            array(
                $this,
                '_js_src_removal_callback',
            ),
            $str
        );
      }

      if (stripos($str, '<video') !== false) {
        $str = preg_replace_callback(
            '#<video[^a-z0-9]+([^>]*?)(?:\s?/?>|$)#i',
            array(
                $this,
                '_js_src_removal_callback',
            ),
            $str
        );
      }

      if (stripos($str, '<source') !== false) {
        $str = preg_replace_callback(
            '#<source[^a-z0-9]+([^>]*?)(?:\s?/?>|$)#i',
            array(
                $this,
                '_js_src_removal_callback',
            ),
            $str
        );
      }

      if (stripos($str, 'script') !== false) {
        // US-ASCII: ¼ === <
        $str = preg_replace('#(?:¼|<)/*(?:script).*(?:¾|>)#isuU', $this->_replacement, $str);
      }
    } while ($original !== $str);

    return (string)$str;
  }

}