xpressengine / xe-core

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Bdo.php

Indentation +16 added lines, -16 removed lines

@@ -7,24 +7,24 @@
 class HTMLPurifier_HTMLModule_Bdo extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Bdo';
-    public $attr_collections = array(
-        'I18N' => array('dir' => false)
-    );
+	public $name = 'Bdo';
+	public $attr_collections = array(
+		'I18N' => array('dir' => false)
+	);
 
-    public function setup($config) {
-        $bdo = $this->addElement(
-            'bdo', 'Inline', 'Inline', array('Core', 'Lang'),
-            array(
-                'dir' => 'Enum#ltr,rtl', // required
-                // The Abstract Module specification has the attribute
-                // inclusions wrong for bdo: bdo allows Lang
-            )
-        );
-        $bdo->attr_transform_post['required-dir'] = new HTMLPurifier_AttrTransform_BdoDir();
+	public function setup($config) {
+		$bdo = $this->addElement(
+			'bdo', 'Inline', 'Inline', array('Core', 'Lang'),
+			array(
+				'dir' => 'Enum#ltr,rtl', // required
+				// The Abstract Module specification has the attribute
+				// inclusions wrong for bdo: bdo allows Lang
+			)
+		);
+		$bdo->attr_transform_post['required-dir'] = new HTMLPurifier_AttrTransform_BdoDir();
 
-        $this->attr_collections['I18N']['dir'] = 'Enum#ltr,rtl';
-    }
+		$this->attr_collections['I18N']['dir'] = 'Enum#ltr,rtl';
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/CommonAttributes.php

Indentation +17 added lines, -17 removed lines

@@ -2,24 +2,24 @@
 
 class HTMLPurifier_HTMLModule_CommonAttributes extends HTMLPurifier_HTMLModule
 {
-    public $name = 'CommonAttributes';
+	public $name = 'CommonAttributes';
 
-    public $attr_collections = array(
-        'Core' => array(
-            0 => array('Style'),
-            // 'xml:space' => false,
-            'class' => 'Class',
-            'id' => 'ID',
-            'title' => 'CDATA',
-        ),
-        'Lang' => array(),
-        'I18N' => array(
-            0 => array('Lang'), // proprietary, for xml:lang/lang
-        ),
-        'Common' => array(
-            0 => array('Core', 'I18N')
-        )
-    );
+	public $attr_collections = array(
+		'Core' => array(
+			0 => array('Style'),
+			// 'xml:space' => false,
+			'class' => 'Class',
+			'id' => 'ID',
+			'title' => 'CDATA',
+		),
+		'Lang' => array(),
+		'I18N' => array(
+			0 => array('Lang'), // proprietary, for xml:lang/lang
+		),
+		'Common' => array(
+			0 => array('Core', 'I18N')
+		)
+	);
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Edit.php

Indentation +25 added lines, -25 removed lines

@@ -7,31 +7,31 @@
 class HTMLPurifier_HTMLModule_Edit extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Edit';
-
-    public function setup($config) {
-        $contents = 'Chameleon: #PCDATA | Inline ! #PCDATA | Flow';
-        $attr = array(
-            'cite' => 'URI',
-            // 'datetime' => 'Datetime', // not implemented
-        );
-        $this->addElement('del', 'Inline', $contents, 'Common', $attr);
-        $this->addElement('ins', 'Inline', $contents, 'Common', $attr);
-    }
-
-    // HTML 4.01 specifies that ins/del must not contain block
-    // elements when used in an inline context, chameleon is
-    // a complicated workaround to acheive this effect
-
-    // Inline context ! Block context (exclamation mark is
-    // separator, see getChildDef for parsing)
-
-    public $defines_child_def = true;
-    public function getChildDef($def) {
-        if ($def->content_model_type != 'chameleon') return false;
-        $value = explode('!', $def->content_model);
-        return new HTMLPurifier_ChildDef_Chameleon($value[0], $value[1]);
-    }
+	public $name = 'Edit';
+
+	public function setup($config) {
+		$contents = 'Chameleon: #PCDATA | Inline ! #PCDATA | Flow';
+		$attr = array(
+			'cite' => 'URI',
+			// 'datetime' => 'Datetime', // not implemented
+		);
+		$this->addElement('del', 'Inline', $contents, 'Common', $attr);
+		$this->addElement('ins', 'Inline', $contents, 'Common', $attr);
+	}
+
+	// HTML 4.01 specifies that ins/del must not contain block
+	// elements when used in an inline context, chameleon is
+	// a complicated workaround to acheive this effect
+
+	// Inline context ! Block context (exclamation mark is
+	// separator, see getChildDef for parsing)
+
+	public $defines_child_def = true;
+	public function getChildDef($def) {
+		if ($def->content_model_type != 'chameleon') return false;
+		$value = explode('!', $def->content_model);
+		return new HTMLPurifier_ChildDef_Chameleon($value[0], $value[1]);
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -28,7 +28,9 @@
 
     public $defines_child_def = true;
     public function getChildDef($def) {
-        if ($def->content_model_type != 'chameleon') return false;
+        if ($def->content_model_type != 'chameleon') {
+        	return false;
+        }
         $value = explode('!', $def->content_model);
         return new HTMLPurifier_ChildDef_Chameleon($value[0], $value[1]);
     }

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Forms.php

Indentation +109 added lines, -109 removed lines

@@ -5,115 +5,115 @@
  */
 class HTMLPurifier_HTMLModule_Forms extends HTMLPurifier_HTMLModule
 {
-    public $name = 'Forms';
-    public $safe = false;
-
-    public $content_sets = array(
-        'Block' => 'Form',
-        'Inline' => 'Formctrl',
-    );
-
-    public function setup($config) {
-        $form = $this->addElement('form', 'Form',
-          'Required: Heading | List | Block | fieldset', 'Common', array(
-            'accept' => 'ContentTypes',
-            'accept-charset' => 'Charsets',
-            'action*' => 'URI',
-            'method' => 'Enum#get,post',
-            // really ContentType, but these two are the only ones used today
-            'enctype' => 'Enum#application/x-www-form-urlencoded,multipart/form-data',
-        ));
-        $form->excludes = array('form' => true);
-
-        $input = $this->addElement('input', 'Formctrl', 'Empty', 'Common', array(
-            'accept' => 'ContentTypes',
-            'accesskey' => 'Character',
-            'alt' => 'Text',
-            'checked' => 'Bool#checked',
-            'disabled' => 'Bool#disabled',
-            'maxlength' => 'Number',
-            'name' => 'CDATA',
-            'readonly' => 'Bool#readonly',
-            'size' => 'Number',
-            'src' => 'URI#embedded',
-            'tabindex' => 'Number',
-            'type' => 'Enum#text,password,checkbox,button,radio,submit,reset,file,hidden,image',
-            'value' => 'CDATA',
-        ));
-        $input->attr_transform_post[] = new HTMLPurifier_AttrTransform_Input();
-
-        $this->addElement('select', 'Formctrl', 'Required: optgroup | option', 'Common', array(
-            'disabled' => 'Bool#disabled',
-            'multiple' => 'Bool#multiple',
-            'name' => 'CDATA',
-            'size' => 'Number',
-            'tabindex' => 'Number',
-        ));
-
-        $this->addElement('option', false, 'Optional: #PCDATA', 'Common', array(
-            'disabled' => 'Bool#disabled',
-            'label' => 'Text',
-            'selected' => 'Bool#selected',
-            'value' => 'CDATA',
-        ));
-        // It's illegal for there to be more than one selected, but not
-        // be multiple. Also, no selected means undefined behavior. This might
-        // be difficult to implement; perhaps an injector, or a context variable.
-
-        $textarea = $this->addElement('textarea', 'Formctrl', 'Optional: #PCDATA', 'Common', array(
-            'accesskey' => 'Character',
-            'cols*' => 'Number',
-            'disabled' => 'Bool#disabled',
-            'name' => 'CDATA',
-            'readonly' => 'Bool#readonly',
-            'rows*' => 'Number',
-            'tabindex' => 'Number',
-        ));
-        $textarea->attr_transform_pre[] = new HTMLPurifier_AttrTransform_Textarea();
-
-        $button = $this->addElement('button', 'Formctrl', 'Optional: #PCDATA | Heading | List | Block | Inline', 'Common', array(
-            'accesskey' => 'Character',
-            'disabled' => 'Bool#disabled',
-            'name' => 'CDATA',
-            'tabindex' => 'Number',
-            'type' => 'Enum#button,submit,reset',
-            'value' => 'CDATA',
-        ));
-
-        // For exclusions, ideally we'd specify content sets, not literal elements
-        $button->excludes = $this->makeLookup(
-            'form', 'fieldset', // Form
-            'input', 'select', 'textarea', 'label', 'button', // Formctrl
-            'a', // as per HTML 4.01 spec, this is omitted by modularization
-            'isindex', 'iframe' // legacy items
-        );
-
-        // Extra exclusion: img usemap="" is not permitted within this element.
-        // We'll omit this for now, since we don't have any good way of
-        // indicating it yet.
-
-        // This is HIGHLY user-unfriendly; we need a custom child-def for this
-        $this->addElement('fieldset', 'Form', 'Custom: (#WS?,legend,(Flow|#PCDATA)*)', 'Common');
-
-        $label = $this->addElement('label', 'Formctrl', 'Optional: #PCDATA | Inline', 'Common', array(
-            'accesskey' => 'Character',
-            // 'for' => 'IDREF', // IDREF not implemented, cannot allow
-        ));
-        $label->excludes = array('label' => true);
-
-        $this->addElement('legend', false, 'Optional: #PCDATA | Inline', 'Common', array(
-            'accesskey' => 'Character',
-        ));
-
-        $this->addElement('optgroup', false, 'Required: option', 'Common', array(
-            'disabled' => 'Bool#disabled',
-            'label*' => 'Text',
-        ));
-
-        // Don't forget an injector for <isindex>. This one's a little complex
-        // because it maps to multiple elements.
-
-    }
+	public $name = 'Forms';
+	public $safe = false;
+
+	public $content_sets = array(
+		'Block' => 'Form',
+		'Inline' => 'Formctrl',
+	);
+
+	public function setup($config) {
+		$form = $this->addElement('form', 'Form',
+		  'Required: Heading | List | Block | fieldset', 'Common', array(
+			'accept' => 'ContentTypes',
+			'accept-charset' => 'Charsets',
+			'action*' => 'URI',
+			'method' => 'Enum#get,post',
+			// really ContentType, but these two are the only ones used today
+			'enctype' => 'Enum#application/x-www-form-urlencoded,multipart/form-data',
+		));
+		$form->excludes = array('form' => true);
+
+		$input = $this->addElement('input', 'Formctrl', 'Empty', 'Common', array(
+			'accept' => 'ContentTypes',
+			'accesskey' => 'Character',
+			'alt' => 'Text',
+			'checked' => 'Bool#checked',
+			'disabled' => 'Bool#disabled',
+			'maxlength' => 'Number',
+			'name' => 'CDATA',
+			'readonly' => 'Bool#readonly',
+			'size' => 'Number',
+			'src' => 'URI#embedded',
+			'tabindex' => 'Number',
+			'type' => 'Enum#text,password,checkbox,button,radio,submit,reset,file,hidden,image',
+			'value' => 'CDATA',
+		));
+		$input->attr_transform_post[] = new HTMLPurifier_AttrTransform_Input();
+
+		$this->addElement('select', 'Formctrl', 'Required: optgroup | option', 'Common', array(
+			'disabled' => 'Bool#disabled',
+			'multiple' => 'Bool#multiple',
+			'name' => 'CDATA',
+			'size' => 'Number',
+			'tabindex' => 'Number',
+		));
+
+		$this->addElement('option', false, 'Optional: #PCDATA', 'Common', array(
+			'disabled' => 'Bool#disabled',
+			'label' => 'Text',
+			'selected' => 'Bool#selected',
+			'value' => 'CDATA',
+		));
+		// It's illegal for there to be more than one selected, but not
+		// be multiple. Also, no selected means undefined behavior. This might
+		// be difficult to implement; perhaps an injector, or a context variable.
+
+		$textarea = $this->addElement('textarea', 'Formctrl', 'Optional: #PCDATA', 'Common', array(
+			'accesskey' => 'Character',
+			'cols*' => 'Number',
+			'disabled' => 'Bool#disabled',
+			'name' => 'CDATA',
+			'readonly' => 'Bool#readonly',
+			'rows*' => 'Number',
+			'tabindex' => 'Number',
+		));
+		$textarea->attr_transform_pre[] = new HTMLPurifier_AttrTransform_Textarea();
+
+		$button = $this->addElement('button', 'Formctrl', 'Optional: #PCDATA | Heading | List | Block | Inline', 'Common', array(
+			'accesskey' => 'Character',
+			'disabled' => 'Bool#disabled',
+			'name' => 'CDATA',
+			'tabindex' => 'Number',
+			'type' => 'Enum#button,submit,reset',
+			'value' => 'CDATA',
+		));
+
+		// For exclusions, ideally we'd specify content sets, not literal elements
+		$button->excludes = $this->makeLookup(
+			'form', 'fieldset', // Form
+			'input', 'select', 'textarea', 'label', 'button', // Formctrl
+			'a', // as per HTML 4.01 spec, this is omitted by modularization
+			'isindex', 'iframe' // legacy items
+		);
+
+		// Extra exclusion: img usemap="" is not permitted within this element.
+		// We'll omit this for now, since we don't have any good way of
+		// indicating it yet.
+
+		// This is HIGHLY user-unfriendly; we need a custom child-def for this
+		$this->addElement('fieldset', 'Form', 'Custom: (#WS?,legend,(Flow|#PCDATA)*)', 'Common');
+
+		$label = $this->addElement('label', 'Formctrl', 'Optional: #PCDATA | Inline', 'Common', array(
+			'accesskey' => 'Character',
+			// 'for' => 'IDREF', // IDREF not implemented, cannot allow
+		));
+		$label->excludes = array('label' => true);
+
+		$this->addElement('legend', false, 'Optional: #PCDATA | Inline', 'Common', array(
+			'accesskey' => 'Character',
+		));
+
+		$this->addElement('optgroup', false, 'Required: option', 'Common', array(
+			'disabled' => 'Bool#disabled',
+			'label*' => 'Text',
+		));
+
+		// Don't forget an injector for <isindex>. This one's a little complex
+		// because it maps to multiple elements.
+
+	}
 }
 
 // vim: et sw=4 sts=4

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Hypertext.php

Indentation +18 added lines, -18 removed lines

@@ -6,25 +6,25 @@
 class HTMLPurifier_HTMLModule_Hypertext extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Hypertext';
+	public $name = 'Hypertext';
 
-    public function setup($config) {
-        $a = $this->addElement(
-            'a', 'Inline', 'Inline', 'Common',
-            array(
-                // 'accesskey' => 'Character',
-                // 'charset' => 'Charset',
-                'href' => 'URI',
-                // 'hreflang' => 'LanguageCode',
-                'rel' => new HTMLPurifier_AttrDef_HTML_LinkTypes('rel'),
-                'rev' => new HTMLPurifier_AttrDef_HTML_LinkTypes('rev'),
-                // 'tabindex' => 'Number',
-                // 'type' => 'ContentType',
-            )
-        );
-        $a->formatting = true;
-        $a->excludes = array('a' => true);
-    }
+	public function setup($config) {
+		$a = $this->addElement(
+			'a', 'Inline', 'Inline', 'Common',
+			array(
+				// 'accesskey' => 'Character',
+				// 'charset' => 'Charset',
+				'href' => 'URI',
+				// 'hreflang' => 'LanguageCode',
+				'rel' => new HTMLPurifier_AttrDef_HTML_LinkTypes('rel'),
+				'rev' => new HTMLPurifier_AttrDef_HTML_LinkTypes('rev'),
+				// 'tabindex' => 'Number',
+				// 'type' => 'ContentType',
+			)
+		);
+		$a->formatting = true;
+		$a->excludes = array('a' => true);
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Iframe.php

Indentation +21 added lines, -21 removed lines

@@ -10,28 +10,28 @@
 class HTMLPurifier_HTMLModule_Iframe extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Iframe';
-    public $safe = false;
+	public $name = 'Iframe';
+	public $safe = false;
 
-    public function setup($config) {
-        if ($config->get('HTML.SafeIframe')) {
-            $this->safe = true;
-        }
-        $this->addElement(
-            'iframe', 'Inline', 'Flow', 'Common',
-            array(
-                'src' => 'URI#embedded',
-                'width' => 'Length',
-                'height' => 'Length',
-                'name' => 'ID',
-                'scrolling' => 'Enum#yes,no,auto',
-                'frameborder' => 'Enum#0,1',
-                'longdesc' => 'URI',
-                'marginheight' => 'Pixels',
-                'marginwidth' => 'Pixels',
-            )
-        );
-    }
+	public function setup($config) {
+		if ($config->get('HTML.SafeIframe')) {
+			$this->safe = true;
+		}
+		$this->addElement(
+			'iframe', 'Inline', 'Flow', 'Common',
+			array(
+				'src' => 'URI#embedded',
+				'width' => 'Length',
+				'height' => 'Length',
+				'name' => 'ID',
+				'scrolling' => 'Enum#yes,no,auto',
+				'frameborder' => 'Enum#0,1',
+				'longdesc' => 'URI',
+				'marginheight' => 'Pixels',
+				'marginwidth' => 'Pixels',
+			)
+		);
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Image.php

Indentation +24 added lines, -24 removed lines

@@ -8,32 +8,32 @@
 class HTMLPurifier_HTMLModule_Image extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Image';
+	public $name = 'Image';
 
-    public function setup($config) {
-        $max = $config->get('HTML.MaxImgLength');
-        $img = $this->addElement(
-            'img', 'Inline', 'Empty', 'Common',
-            array(
-                'alt*' => 'Text',
-                // According to the spec, it's Length, but percents can
-                // be abused, so we allow only Pixels.
-                'height' => 'Pixels#' . $max,
-                'width'  => 'Pixels#' . $max,
-                'longdesc' => 'URI',
-                'src*' => new HTMLPurifier_AttrDef_URI(true), // embedded
-            )
-        );
-        if ($max === null || $config->get('HTML.Trusted')) {
-            $img->attr['height'] =
-            $img->attr['width'] = 'Length';
-        }
+	public function setup($config) {
+		$max = $config->get('HTML.MaxImgLength');
+		$img = $this->addElement(
+			'img', 'Inline', 'Empty', 'Common',
+			array(
+				'alt*' => 'Text',
+				// According to the spec, it's Length, but percents can
+				// be abused, so we allow only Pixels.
+				'height' => 'Pixels#' . $max,
+				'width'  => 'Pixels#' . $max,
+				'longdesc' => 'URI',
+				'src*' => new HTMLPurifier_AttrDef_URI(true), // embedded
+			)
+		);
+		if ($max === null || $config->get('HTML.Trusted')) {
+			$img->attr['height'] =
+			$img->attr['width'] = 'Length';
+		}
 
-        // kind of strange, but splitting things up would be inefficient
-        $img->attr_transform_pre[] =
-        $img->attr_transform_post[] =
-            new HTMLPurifier_AttrTransform_ImgRequired();
-    }
+		// kind of strange, but splitting things up would be inefficient
+		$img->attr_transform_pre[] =
+		$img->attr_transform_post[] =
+			new HTMLPurifier_AttrTransform_ImgRequired();
+	}
 
 }
 

Spacing +2 added lines, -2 removed lines

@@ -18,8 +18,8 @@
                 'alt*' => 'Text',
                 // According to the spec, it's Length, but percents can
                 // be abused, so we allow only Pixels.
-                'height' => 'Pixels#' . $max,
-                'width'  => 'Pixels#' . $max,
+                'height' => 'Pixels#'.$max,
+                'width'  => 'Pixels#'.$max,
                 'longdesc' => 'URI',
                 'src*' => new HTMLPurifier_AttrDef_URI(true), // embedded
             )

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/Legacy.php

Indentation +127 added lines, -127 removed lines

@@ -19,140 +19,140 @@
 class HTMLPurifier_HTMLModule_Legacy extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'Legacy';
+	public $name = 'Legacy';
 
-    public function setup($config) {
-
-        $this->addElement('basefont', 'Inline', 'Empty', false, array(
-            'color' => 'Color',
-            'face' => 'Text', // extremely broad, we should
-            'size' => 'Text', // tighten it
-            'id' => 'ID'
-        ));
-        $this->addElement('center', 'Block', 'Flow', 'Common');
-        $this->addElement('dir', 'Block', 'Required: li', 'Common', array(
-            'compact' => 'Bool#compact'
-        ));
-        $this->addElement('font', 'Inline', 'Inline', array('Core', 'I18N'), array(
-            'color' => 'Color',
-            'face' => 'Text', // extremely broad, we should
-            'size' => 'Text', // tighten it
-        ));
-        $this->addElement('menu', 'Block', 'Required: li', 'Common', array(
-            'compact' => 'Bool#compact'
-        ));
-
-        $s = $this->addElement('s', 'Inline', 'Inline', 'Common');
-        $s->formatting = true;
-
-        $strike = $this->addElement('strike', 'Inline', 'Inline', 'Common');
-        $strike->formatting = true;
-
-        $u = $this->addElement('u', 'Inline', 'Inline', 'Common');
-        $u->formatting = true;
-
-        // setup modifications to old elements
-
-        $align = 'Enum#left,right,center,justify';
-
-        $address = $this->addBlankElement('address');
-        $address->content_model = 'Inline | #PCDATA | p';
-        $address->content_model_type = 'optional';
-        $address->child = false;
-
-        $blockquote = $this->addBlankElement('blockquote');
-        $blockquote->content_model = 'Flow | #PCDATA';
-        $blockquote->content_model_type = 'optional';
-        $blockquote->child = false;
-
-        $br = $this->addBlankElement('br');
-        $br->attr['clear'] = 'Enum#left,all,right,none';
-
-        $caption = $this->addBlankElement('caption');
-        $caption->attr['align'] = 'Enum#top,bottom,left,right';
-
-        $div = $this->addBlankElement('div');
-        $div->attr['align'] = $align;
-
-        $dl = $this->addBlankElement('dl');
-        $dl->attr['compact'] = 'Bool#compact';
-
-        for ($i = 1; $i <= 6; $i++) {
-            $h = $this->addBlankElement("h$i");
-            $h->attr['align'] = $align;
-        }
-
-        $hr = $this->addBlankElement('hr');
-        $hr->attr['align'] = $align;
-        $hr->attr['noshade'] = 'Bool#noshade';
-        $hr->attr['size'] = 'Pixels';
-        $hr->attr['width'] = 'Length';
-
-        $img = $this->addBlankElement('img');
-        $img->attr['align'] = 'IAlign';
-        $img->attr['border'] = 'Pixels';
-        $img->attr['hspace'] = 'Pixels';
-        $img->attr['vspace'] = 'Pixels';
-
-        // figure out this integer business
-
-        $li = $this->addBlankElement('li');
-        $li->attr['value'] = new HTMLPurifier_AttrDef_Integer();
-        $li->attr['type']  = 'Enum#s:1,i,I,a,A,disc,square,circle';
-
-        $ol = $this->addBlankElement('ol');
-        $ol->attr['compact'] = 'Bool#compact';
-        $ol->attr['start'] = new HTMLPurifier_AttrDef_Integer();
-        $ol->attr['type'] = 'Enum#s:1,i,I,a,A';
-
-        $p = $this->addBlankElement('p');
-        $p->attr['align'] = $align;
-
-        $pre = $this->addBlankElement('pre');
-        $pre->attr['width'] = 'Number';
-
-        // script omitted
-
-        $table = $this->addBlankElement('table');
-        $table->attr['align'] = 'Enum#left,center,right';
-        $table->attr['bgcolor'] = 'Color';
-
-        $tr = $this->addBlankElement('tr');
-        $tr->attr['bgcolor'] = 'Color';
-
-        $th = $this->addBlankElement('th');
-        $th->attr['bgcolor'] = 'Color';
-        $th->attr['height'] = 'Length';
-        $th->attr['nowrap'] = 'Bool#nowrap';
-        $th->attr['width'] = 'Length';
-
-        $td = $this->addBlankElement('td');
-        $td->attr['bgcolor'] = 'Color';
-        $td->attr['height'] = 'Length';
-        $td->attr['nowrap'] = 'Bool#nowrap';
-        $td->attr['width'] = 'Length';
+	public function setup($config) {
+
+		$this->addElement('basefont', 'Inline', 'Empty', false, array(
+			'color' => 'Color',
+			'face' => 'Text', // extremely broad, we should
+			'size' => 'Text', // tighten it
+			'id' => 'ID'
+		));
+		$this->addElement('center', 'Block', 'Flow', 'Common');
+		$this->addElement('dir', 'Block', 'Required: li', 'Common', array(
+			'compact' => 'Bool#compact'
+		));
+		$this->addElement('font', 'Inline', 'Inline', array('Core', 'I18N'), array(
+			'color' => 'Color',
+			'face' => 'Text', // extremely broad, we should
+			'size' => 'Text', // tighten it
+		));
+		$this->addElement('menu', 'Block', 'Required: li', 'Common', array(
+			'compact' => 'Bool#compact'
+		));
+
+		$s = $this->addElement('s', 'Inline', 'Inline', 'Common');
+		$s->formatting = true;
+
+		$strike = $this->addElement('strike', 'Inline', 'Inline', 'Common');
+		$strike->formatting = true;
+
+		$u = $this->addElement('u', 'Inline', 'Inline', 'Common');
+		$u->formatting = true;
+
+		// setup modifications to old elements
+
+		$align = 'Enum#left,right,center,justify';
+
+		$address = $this->addBlankElement('address');
+		$address->content_model = 'Inline | #PCDATA | p';
+		$address->content_model_type = 'optional';
+		$address->child = false;
+
+		$blockquote = $this->addBlankElement('blockquote');
+		$blockquote->content_model = 'Flow | #PCDATA';
+		$blockquote->content_model_type = 'optional';
+		$blockquote->child = false;
+
+		$br = $this->addBlankElement('br');
+		$br->attr['clear'] = 'Enum#left,all,right,none';
+
+		$caption = $this->addBlankElement('caption');
+		$caption->attr['align'] = 'Enum#top,bottom,left,right';
+
+		$div = $this->addBlankElement('div');
+		$div->attr['align'] = $align;
+
+		$dl = $this->addBlankElement('dl');
+		$dl->attr['compact'] = 'Bool#compact';
+
+		for ($i = 1; $i <= 6; $i++) {
+			$h = $this->addBlankElement("h$i");
+			$h->attr['align'] = $align;
+		}
+
+		$hr = $this->addBlankElement('hr');
+		$hr->attr['align'] = $align;
+		$hr->attr['noshade'] = 'Bool#noshade';
+		$hr->attr['size'] = 'Pixels';
+		$hr->attr['width'] = 'Length';
+
+		$img = $this->addBlankElement('img');
+		$img->attr['align'] = 'IAlign';
+		$img->attr['border'] = 'Pixels';
+		$img->attr['hspace'] = 'Pixels';
+		$img->attr['vspace'] = 'Pixels';
+
+		// figure out this integer business
+
+		$li = $this->addBlankElement('li');
+		$li->attr['value'] = new HTMLPurifier_AttrDef_Integer();
+		$li->attr['type']  = 'Enum#s:1,i,I,a,A,disc,square,circle';
+
+		$ol = $this->addBlankElement('ol');
+		$ol->attr['compact'] = 'Bool#compact';
+		$ol->attr['start'] = new HTMLPurifier_AttrDef_Integer();
+		$ol->attr['type'] = 'Enum#s:1,i,I,a,A';
+
+		$p = $this->addBlankElement('p');
+		$p->attr['align'] = $align;
+
+		$pre = $this->addBlankElement('pre');
+		$pre->attr['width'] = 'Number';
+
+		// script omitted
+
+		$table = $this->addBlankElement('table');
+		$table->attr['align'] = 'Enum#left,center,right';
+		$table->attr['bgcolor'] = 'Color';
+
+		$tr = $this->addBlankElement('tr');
+		$tr->attr['bgcolor'] = 'Color';
+
+		$th = $this->addBlankElement('th');
+		$th->attr['bgcolor'] = 'Color';
+		$th->attr['height'] = 'Length';
+		$th->attr['nowrap'] = 'Bool#nowrap';
+		$th->attr['width'] = 'Length';
+
+		$td = $this->addBlankElement('td');
+		$td->attr['bgcolor'] = 'Color';
+		$td->attr['height'] = 'Length';
+		$td->attr['nowrap'] = 'Bool#nowrap';
+		$td->attr['width'] = 'Length';
 
-        $ul = $this->addBlankElement('ul');
-        $ul->attr['compact'] = 'Bool#compact';
-        $ul->attr['type'] = 'Enum#square,disc,circle';
+		$ul = $this->addBlankElement('ul');
+		$ul->attr['compact'] = 'Bool#compact';
+		$ul->attr['type'] = 'Enum#square,disc,circle';
 
-        // "safe" modifications to "unsafe" elements
-        // WARNING: If you want to add support for an unsafe, legacy
-        // attribute, make a new TrustedLegacy module with the trusted
-        // bit set appropriately
+		// "safe" modifications to "unsafe" elements
+		// WARNING: If you want to add support for an unsafe, legacy
+		// attribute, make a new TrustedLegacy module with the trusted
+		// bit set appropriately
 
-        $form = $this->addBlankElement('form');
-        $form->content_model = 'Flow | #PCDATA';
-        $form->content_model_type = 'optional';
-        $form->attr['target'] = 'FrameTarget';
+		$form = $this->addBlankElement('form');
+		$form->content_model = 'Flow | #PCDATA';
+		$form->content_model_type = 'optional';
+		$form->attr['target'] = 'FrameTarget';
 
-        $input = $this->addBlankElement('input');
-        $input->attr['align'] = 'IAlign';
+		$input = $this->addBlankElement('input');
+		$input->attr['align'] = 'IAlign';
 
-        $legend = $this->addBlankElement('legend');
-        $legend->attr['align'] = 'LAlign';
+		$legend = $this->addBlankElement('legend');
+		$legend->attr['align'] = 'LAlign';
 
-    }
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/HTMLModule/List.php

Indentation +31 added lines, -31 removed lines

@@ -6,37 +6,37 @@
 class HTMLPurifier_HTMLModule_List extends HTMLPurifier_HTMLModule
 {
 
-    public $name = 'List';
-
-    // According to the abstract schema, the List content set is a fully formed
-    // one or more expr, but it invariably occurs in an optional declaration
-    // so we're not going to do that subtlety. It might cause trouble
-    // if a user defines "List" and expects that multiple lists are
-    // allowed to be specified, but then again, that's not very intuitive.
-    // Furthermore, the actual XML Schema may disagree. Regardless,
-    // we don't have support for such nested expressions without using
-    // the incredibly inefficient and draconic Custom ChildDef.
-
-    public $content_sets = array('Flow' => 'List');
-
-    public function setup($config) {
-        $ol = $this->addElement('ol', 'List', new HTMLPurifier_ChildDef_List(), 'Common');
-        $ul = $this->addElement('ul', 'List', new HTMLPurifier_ChildDef_List(), 'Common');
-        // XXX The wrap attribute is handled by MakeWellFormed.  This is all
-        // quite unsatisfactory, because we generated this
-        // *specifically* for lists, and now a big chunk of the handling
-        // is done properly by the List ChildDef.  So actually, we just
-        // want enough information to make autoclosing work properly,
-        // and then hand off the tricky stuff to the ChildDef.
-        $ol->wrap = 'li';
-        $ul->wrap = 'li';
-        $this->addElement('dl', 'List', 'Required: dt | dd', 'Common');
-
-        $this->addElement('li', false, 'Flow', 'Common');
-
-        $this->addElement('dd', false, 'Flow', 'Common');
-        $this->addElement('dt', false, 'Inline', 'Common');
-    }
+	public $name = 'List';
+
+	// According to the abstract schema, the List content set is a fully formed
+	// one or more expr, but it invariably occurs in an optional declaration
+	// so we're not going to do that subtlety. It might cause trouble
+	// if a user defines "List" and expects that multiple lists are
+	// allowed to be specified, but then again, that's not very intuitive.
+	// Furthermore, the actual XML Schema may disagree. Regardless,
+	// we don't have support for such nested expressions without using
+	// the incredibly inefficient and draconic Custom ChildDef.
+
+	public $content_sets = array('Flow' => 'List');
+
+	public function setup($config) {
+		$ol = $this->addElement('ol', 'List', new HTMLPurifier_ChildDef_List(), 'Common');
+		$ul = $this->addElement('ul', 'List', new HTMLPurifier_ChildDef_List(), 'Common');
+		// XXX The wrap attribute is handled by MakeWellFormed.  This is all
+		// quite unsatisfactory, because we generated this
+		// *specifically* for lists, and now a big chunk of the handling
+		// is done properly by the List ChildDef.  So actually, we just
+		// want enough information to make autoclosing work properly,
+		// and then hand off the tricky stuff to the ChildDef.
+		$ol->wrap = 'li';
+		$ul->wrap = 'li';
+		$this->addElement('dl', 'List', 'Required: dt | dd', 'Common');
+
+		$this->addElement('li', false, 'Flow', 'Common');
+
+		$this->addElement('dd', false, 'Flow', 'Common');
+		$this->addElement('dt', false, 'Inline', 'Common');
+	}
 
 }