xpressengine /
xe-core
| @@ 297-308 (lines=12) @@ | ||
| 294 | $support = "(for information on implementing this, see the ". |
|
| 295 | "support forums) "; |
|
| 296 | $allowed_properties = $config->get('CSS.AllowedProperties'); |
|
| 297 | if ($allowed_properties !== null) { |
|
| 298 | foreach ($this->info as $name => $d) { |
|
| 299 | if(!isset($allowed_properties[$name])) unset($this->info[$name]); |
|
| 300 | unset($allowed_properties[$name]); |
|
| 301 | } |
|
| 302 | // emit errors |
|
| 303 | foreach ($allowed_properties as $name => $d) { |
|
| 304 | // :TODO: Is this htmlspecialchars() call really necessary? |
|
| 305 | $name = htmlspecialchars($name, ENT_COMPAT | ENT_HTML401, 'UTF-8', false); |
|
| 306 | trigger_error("Style attribute '$name' is not supported $support", E_USER_WARNING); |
|
| 307 | } |
|
| 308 | } |
|
| 309 | ||
| 310 | $forbidden_properties = $config->get('CSS.ForbiddenProperties'); |
|
| 311 | if ($forbidden_properties !== null) { |
|
| @@ 257-267 (lines=11) @@ | ||
| 254 | } |
|
| 255 | } |
|
| 256 | ||
| 257 | if (is_array($allowed_elements)) { |
|
| 258 | foreach ($this->info as $name => $d) { |
|
| 259 | if(!isset($allowed_elements[$name])) unset($this->info[$name]); |
|
| 260 | unset($allowed_elements[$name]); |
|
| 261 | } |
|
| 262 | // emit errors |
|
| 263 | foreach ($allowed_elements as $element => $d) { |
|
| 264 | $element = htmlspecialchars($element, ENT_COMPAT | ENT_HTML401, 'UTF-8', false); // PHP doesn't escape errors, be careful! |
|
| 265 | trigger_error("Element '$element' is not supported $support", E_USER_WARNING); |
|
| 266 | } |
|
| 267 | } |
|
| 268 | ||
| 269 | // setup allowed attributes --------------------------------------- |
|
| 270 | ||
