xpressengine / xe-core

classes/security/htmlpurifier/library/HTMLPurifier/Lexer.php

Indentation +276 added lines, -276 removed lines

@@ -42,284 +42,284 @@
 class HTMLPurifier_Lexer
 {
 
-    /**
-     * Whether or not this lexer implements line-number/column-number tracking.
-     * If it does, set to true.
-     */
-    public $tracksLineNumbers = false;
-
-    // -- STATIC ----------------------------------------------------------
-
-    /**
-     * Retrieves or sets the default Lexer as a Prototype Factory.
-     *
-     * By default HTMLPurifier_Lexer_DOMLex will be returned. There are
-     * a few exceptions involving special features that only DirectLex
-     * implements.
-     *
-     * @note The behavior of this class has changed, rather than accepting
-     *       a prototype object, it now accepts a configuration object.
-     *       To specify your own prototype, set %Core.LexerImpl to it.
-     *       This change in behavior de-singletonizes the lexer object.
-     *
-     * @param $config Instance of HTMLPurifier_Config
-     * @return Concrete lexer.
-     */
-    public static function create($config) {
-
-        if (!($config instanceof HTMLPurifier_Config)) {
-            $lexer = $config;
-            trigger_error("Passing a prototype to
+	/**
+	 * Whether or not this lexer implements line-number/column-number tracking.
+	 * If it does, set to true.
+	 */
+	public $tracksLineNumbers = false;
+
+	// -- STATIC ----------------------------------------------------------
+
+	/**
+	 * Retrieves or sets the default Lexer as a Prototype Factory.
+	 *
+	 * By default HTMLPurifier_Lexer_DOMLex will be returned. There are
+	 * a few exceptions involving special features that only DirectLex
+	 * implements.
+	 *
+	 * @note The behavior of this class has changed, rather than accepting
+	 *       a prototype object, it now accepts a configuration object.
+	 *       To specify your own prototype, set %Core.LexerImpl to it.
+	 *       This change in behavior de-singletonizes the lexer object.
+	 *
+	 * @param $config Instance of HTMLPurifier_Config
+	 * @return Concrete lexer.
+	 */
+	public static function create($config) {
+
+		if (!($config instanceof HTMLPurifier_Config)) {
+			$lexer = $config;
+			trigger_error("Passing a prototype to
               HTMLPurifier_Lexer::create() is deprecated, please instead
               use %Core.LexerImpl", E_USER_WARNING);
-        } else {
-            $lexer = $config->get('Core.LexerImpl');
-        }
-
-        $needs_tracking =
-            $config->get('Core.MaintainLineNumbers') ||
-            $config->get('Core.CollectErrors');
-
-        $inst = null;
-        if (is_object($lexer)) {
-            $inst = $lexer;
-        } else {
-
-            if (is_null($lexer)) { do {
-                // auto-detection algorithm
-
-                if ($needs_tracking) {
-                    $lexer = 'DirectLex';
-                    break;
-                }
-
-                if (
-                    class_exists('DOMDocument') &&
-                    method_exists('DOMDocument', 'loadHTML') &&
-                    !extension_loaded('domxml')
-                ) {
-                    // check for DOM support, because while it's part of the
-                    // core, it can be disabled compile time. Also, the PECL
-                    // domxml extension overrides the default DOM, and is evil
-                    // and nasty and we shan't bother to support it
-                    $lexer = 'DOMLex';
-                } else {
-                    $lexer = 'DirectLex';
-                }
-
-            } while(0); } // do..while so we can break
-
-            // instantiate recognized string names
-            switch ($lexer) {
-                case 'DOMLex':
-                    $inst = new HTMLPurifier_Lexer_DOMLex();
-                    break;
-                case 'DirectLex':
-                    $inst = new HTMLPurifier_Lexer_DirectLex();
-                    break;
-                case 'PH5P':
-                    $inst = new HTMLPurifier_Lexer_PH5P();
-                    break;
-                default:
-                    throw new HTMLPurifier_Exception("Cannot instantiate unrecognized Lexer type " . htmlspecialchars($lexer, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
-            }
-        }
-
-        if (!$inst) throw new HTMLPurifier_Exception('No lexer was instantiated');
-
-        // once PHP DOM implements native line numbers, or we
-        // hack out something using XSLT, remove this stipulation
-        if ($needs_tracking && !$inst->tracksLineNumbers) {
-            throw new HTMLPurifier_Exception('Cannot use lexer that does not support line numbers with Core.MaintainLineNumbers or Core.CollectErrors (use DirectLex instead)');
-        }
-
-        return $inst;
-
-    }
-
-    // -- CONVENIENCE MEMBERS ---------------------------------------------
-
-    public function __construct() {
-        $this->_entity_parser = new HTMLPurifier_EntityParser();
-    }
-
-    /**
-     * Most common entity to raw value conversion table for special entities.
-     */
-    protected $_special_entity2str =
-            array(
-                    '"' => '"',
-                    '&'  => '&',
-                    '&lt;'   => '<',
-                    '&gt;'   => '>',
-                    '&#39;'  => "'",
-                    '&#039;' => "'",
-                    '&#x27;' => "'"
-            );
-
-    /**
-     * Parses special entities into the proper characters.
-     *
-     * This string will translate escaped versions of the special characters
-     * into the correct ones.
-     *
-     * @warning
-     * You should be able to treat the output of this function as
-     * completely parsed, but that's only because all other entities should
-     * have been handled previously in substituteNonSpecialEntities()
-     *
-     * @param $string String character data to be parsed.
-     * @returns Parsed character data.
-     */
-    public function parseData($string) {
-
-        // following functions require at least one character
-        if ($string === '') return '';
-
-        // subtracts amps that cannot possibly be escaped
-        $num_amp = substr_count($string, '&') - substr_count($string, '& ') -
-            ($string[strlen($string)-1] === '&' ? 1 : 0);
-
-        if (!$num_amp) return $string; // abort if no entities
-        $num_esc_amp = substr_count($string, '&amp;');
-        $string = strtr($string, $this->_special_entity2str);
-
-        // code duplication for sake of optimization, see above
-        $num_amp_2 = substr_count($string, '&') - substr_count($string, '& ') -
-            ($string[strlen($string)-1] === '&' ? 1 : 0);
-
-        if ($num_amp_2 <= $num_esc_amp) return $string;
-
-        // hmm... now we have some uncommon entities. Use the callback.
-        $string = $this->_entity_parser->substituteSpecialEntities($string);
-        return $string;
-    }
-
-    /**
-     * Lexes an HTML string into tokens.
-     *
-     * @param $string String HTML.
-     * @return HTMLPurifier_Token array representation of HTML.
-     */
-    public function tokenizeHTML($string, $config, $context) {
-        trigger_error('Call to abstract class', E_USER_ERROR);
-    }
-
-    /**
-     * Translates CDATA sections into regular sections (through escaping).
-     *
-     * @param $string HTML string to process.
-     * @returns HTML with CDATA sections escaped.
-     */
-    protected static function escapeCDATA($string) {
-        return preg_replace_callback(
-            '/<!\[CDATA\[(.+?)\]\]>/s',
-            array('HTMLPurifier_Lexer', 'CDATACallback'),
-            $string
-        );
-    }
-
-    /**
-     * Special CDATA case that is especially convoluted for <script>
-     */
-    protected static function escapeCommentedCDATA($string) {
-        return preg_replace_callback(
-            '#<!--//--><!\[CDATA\[//><!--(.+?)//--><!\]\]>#s',
-            array('HTMLPurifier_Lexer', 'CDATACallback'),
-            $string
-        );
-    }
-
-    /**
-     * Special Internet Explorer conditional comments should be removed.
-     */
-    protected static function removeIEConditional($string) {
-        return preg_replace(
-            '#<!--\[if [^>]+\]>.*?<!\[endif\]-->#si', // probably should generalize for all strings
-            '',
-            $string
-        );
-    }
-
-    /**
-     * Callback function for escapeCDATA() that does the work.
-     *
-     * @warning Though this is public in order to let the callback happen,
-     *          calling it directly is not recommended.
-     * @params $matches PCRE matches array, with index 0 the entire match
-     *                  and 1 the inside of the CDATA section.
-     * @returns Escaped internals of the CDATA section.
-     */
-    protected static function CDATACallback($matches) {
-        // not exactly sure why the character set is needed, but whatever
-        return htmlspecialchars($matches[1], ENT_COMPAT, 'UTF-8', false);
-    }
-
-    /**
-     * Takes a piece of HTML and normalizes it by converting entities, fixing
-     * encoding, extracting bits, and other good stuff.
-     * @todo Consider making protected
-     */
-    public function normalize($html, $config, $context) {
-
-        // normalize newlines to \n
-        if ($config->get('Core.NormalizeNewlines')) {
-            $html = str_replace("\r\n", "\n", $html);
-            $html = str_replace("\r", "\n", $html);
-        }
-
-        if ($config->get('HTML.Trusted')) {
-            // escape convoluted CDATA
-            $html = $this->escapeCommentedCDATA($html);
-        }
-
-        // escape CDATA
-        $html = $this->escapeCDATA($html);
-
-        $html = $this->removeIEConditional($html);
-
-        // extract body from document if applicable
-        if ($config->get('Core.ConvertDocumentToFragment')) {
-            $e = false;
-            if ($config->get('Core.CollectErrors')) {
-                $e =& $context->get('ErrorCollector');
-            }
-            $new_html = $this->extractBody($html);
-            if ($e && $new_html != $html) {
-                $e->send(E_WARNING, 'Lexer: Extracted body');
-            }
-            $html = $new_html;
-        }
-
-        // expand entities that aren't the big five
-        $html = $this->_entity_parser->substituteNonSpecialEntities($html);
-
-        // clean into wellformed UTF-8 string for an SGML context: this has
-        // to be done after entity expansion because the entities sometimes
-        // represent non-SGML characters (horror, horror!)
-        $html = HTMLPurifier_Encoder::cleanUTF8($html);
-
-        // if processing instructions are to removed, remove them now
-        if ($config->get('Core.RemoveProcessingInstructions')) {
-            $html = preg_replace('#<\?.+?\?>#s', '', $html);
-        }
-
-        return $html;
-    }
-
-    /**
-     * Takes a string of HTML (fragment or document) and returns the content
-     * @todo Consider making protected
-     */
-    public function extractBody($html) {
-        $matches = array();
-        $result = preg_match('!<body[^>]*>(.*)</body>!is', $html, $matches);
-        if ($result) {
-            return $matches[1];
-        } else {
-            return $html;
-        }
-    }
+		} else {
+			$lexer = $config->get('Core.LexerImpl');
+		}
+
+		$needs_tracking =
+			$config->get('Core.MaintainLineNumbers') ||
+			$config->get('Core.CollectErrors');
+
+		$inst = null;
+		if (is_object($lexer)) {
+			$inst = $lexer;
+		} else {
+
+			if (is_null($lexer)) { do {
+				// auto-detection algorithm
+
+				if ($needs_tracking) {
+					$lexer = 'DirectLex';
+					break;
+				}
+
+				if (
+					class_exists('DOMDocument') &&
+					method_exists('DOMDocument', 'loadHTML') &&
+					!extension_loaded('domxml')
+				) {
+					// check for DOM support, because while it's part of the
+					// core, it can be disabled compile time. Also, the PECL
+					// domxml extension overrides the default DOM, and is evil
+					// and nasty and we shan't bother to support it
+					$lexer = 'DOMLex';
+				} else {
+					$lexer = 'DirectLex';
+				}
+
+			} while(0); } // do..while so we can break
+
+			// instantiate recognized string names
+			switch ($lexer) {
+				case 'DOMLex':
+					$inst = new HTMLPurifier_Lexer_DOMLex();
+					break;
+				case 'DirectLex':
+					$inst = new HTMLPurifier_Lexer_DirectLex();
+					break;
+				case 'PH5P':
+					$inst = new HTMLPurifier_Lexer_PH5P();
+					break;
+				default:
+					throw new HTMLPurifier_Exception("Cannot instantiate unrecognized Lexer type " . htmlspecialchars($lexer, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
+			}
+		}
+
+		if (!$inst) throw new HTMLPurifier_Exception('No lexer was instantiated');
+
+		// once PHP DOM implements native line numbers, or we
+		// hack out something using XSLT, remove this stipulation
+		if ($needs_tracking && !$inst->tracksLineNumbers) {
+			throw new HTMLPurifier_Exception('Cannot use lexer that does not support line numbers with Core.MaintainLineNumbers or Core.CollectErrors (use DirectLex instead)');
+		}
+
+		return $inst;
+
+	}
+
+	// -- CONVENIENCE MEMBERS ---------------------------------------------
+
+	public function __construct() {
+		$this->_entity_parser = new HTMLPurifier_EntityParser();
+	}
+
+	/**
+	 * Most common entity to raw value conversion table for special entities.
+	 */
+	protected $_special_entity2str =
+			array(
+					'&quot;' => '"',
+					'&amp;'  => '&',
+					'&lt;'   => '<',
+					'&gt;'   => '>',
+					'&#39;'  => "'",
+					'&#039;' => "'",
+					'&#x27;' => "'"
+			);
+
+	/**
+	 * Parses special entities into the proper characters.
+	 *
+	 * This string will translate escaped versions of the special characters
+	 * into the correct ones.
+	 *
+	 * @warning
+	 * You should be able to treat the output of this function as
+	 * completely parsed, but that's only because all other entities should
+	 * have been handled previously in substituteNonSpecialEntities()
+	 *
+	 * @param $string String character data to be parsed.
+	 * @returns Parsed character data.
+	 */
+	public function parseData($string) {
+
+		// following functions require at least one character
+		if ($string === '') return '';
+
+		// subtracts amps that cannot possibly be escaped
+		$num_amp = substr_count($string, '&') - substr_count($string, '& ') -
+			($string[strlen($string)-1] === '&' ? 1 : 0);
+
+		if (!$num_amp) return $string; // abort if no entities
+		$num_esc_amp = substr_count($string, '&amp;');
+		$string = strtr($string, $this->_special_entity2str);
+
+		// code duplication for sake of optimization, see above
+		$num_amp_2 = substr_count($string, '&') - substr_count($string, '& ') -
+			($string[strlen($string)-1] === '&' ? 1 : 0);
+
+		if ($num_amp_2 <= $num_esc_amp) return $string;
+
+		// hmm... now we have some uncommon entities. Use the callback.
+		$string = $this->_entity_parser->substituteSpecialEntities($string);
+		return $string;
+	}
+
+	/**
+	 * Lexes an HTML string into tokens.
+	 *
+	 * @param $string String HTML.
+	 * @return HTMLPurifier_Token array representation of HTML.
+	 */
+	public function tokenizeHTML($string, $config, $context) {
+		trigger_error('Call to abstract class', E_USER_ERROR);
+	}
+
+	/**
+	 * Translates CDATA sections into regular sections (through escaping).
+	 *
+	 * @param $string HTML string to process.
+	 * @returns HTML with CDATA sections escaped.
+	 */
+	protected static function escapeCDATA($string) {
+		return preg_replace_callback(
+			'/<!\[CDATA\[(.+?)\]\]>/s',
+			array('HTMLPurifier_Lexer', 'CDATACallback'),
+			$string
+		);
+	}
+
+	/**
+	 * Special CDATA case that is especially convoluted for <script>
+	 */
+	protected static function escapeCommentedCDATA($string) {
+		return preg_replace_callback(
+			'#<!--//--><!\[CDATA\[//><!--(.+?)//--><!\]\]>#s',
+			array('HTMLPurifier_Lexer', 'CDATACallback'),
+			$string
+		);
+	}
+
+	/**
+	 * Special Internet Explorer conditional comments should be removed.
+	 */
+	protected static function removeIEConditional($string) {
+		return preg_replace(
+			'#<!--\[if [^>]+\]>.*?<!\[endif\]-->#si', // probably should generalize for all strings
+			'',
+			$string
+		);
+	}
+
+	/**
+	 * Callback function for escapeCDATA() that does the work.
+	 *
+	 * @warning Though this is public in order to let the callback happen,
+	 *          calling it directly is not recommended.
+	 * @params $matches PCRE matches array, with index 0 the entire match
+	 *                  and 1 the inside of the CDATA section.
+	 * @returns Escaped internals of the CDATA section.
+	 */
+	protected static function CDATACallback($matches) {
+		// not exactly sure why the character set is needed, but whatever
+		return htmlspecialchars($matches[1], ENT_COMPAT, 'UTF-8', false);
+	}
+
+	/**
+	 * Takes a piece of HTML and normalizes it by converting entities, fixing
+	 * encoding, extracting bits, and other good stuff.
+	 * @todo Consider making protected
+	 */
+	public function normalize($html, $config, $context) {
+
+		// normalize newlines to \n
+		if ($config->get('Core.NormalizeNewlines')) {
+			$html = str_replace("\r\n", "\n", $html);
+			$html = str_replace("\r", "\n", $html);
+		}
+
+		if ($config->get('HTML.Trusted')) {
+			// escape convoluted CDATA
+			$html = $this->escapeCommentedCDATA($html);
+		}
+
+		// escape CDATA
+		$html = $this->escapeCDATA($html);
+
+		$html = $this->removeIEConditional($html);
+
+		// extract body from document if applicable
+		if ($config->get('Core.ConvertDocumentToFragment')) {
+			$e = false;
+			if ($config->get('Core.CollectErrors')) {
+				$e =& $context->get('ErrorCollector');
+			}
+			$new_html = $this->extractBody($html);
+			if ($e && $new_html != $html) {
+				$e->send(E_WARNING, 'Lexer: Extracted body');
+			}
+			$html = $new_html;
+		}
+
+		// expand entities that aren't the big five
+		$html = $this->_entity_parser->substituteNonSpecialEntities($html);
+
+		// clean into wellformed UTF-8 string for an SGML context: this has
+		// to be done after entity expansion because the entities sometimes
+		// represent non-SGML characters (horror, horror!)
+		$html = HTMLPurifier_Encoder::cleanUTF8($html);
+
+		// if processing instructions are to removed, remove them now
+		if ($config->get('Core.RemoveProcessingInstructions')) {
+			$html = preg_replace('#<\?.+?\?>#s', '', $html);
+		}
+
+		return $html;
+	}
+
+	/**
+	 * Takes a string of HTML (fragment or document) and returns the content
+	 * @todo Consider making protected
+	 */
+	public function extractBody($html) {
+		$matches = array();
+		$result = preg_match('!<body[^>]*>(.*)</body>!is', $html, $matches);
+		if ($result) {
+			return $matches[1];
+		} else {
+			return $html;
+		}
+	}
 
 }
 

Braces +13 added lines, -4 removed lines

@@ -125,7 +125,9 @@ 
             }
         }
 
-        if (!$inst) throw new HTMLPurifier_Exception('No lexer was instantiated');
+        if (!$inst) {
+        	throw new HTMLPurifier_Exception('No lexer was instantiated');
+        }
 
         // once PHP DOM implements native line numbers, or we
         // hack out something using XSLT, remove this stipulation
@@ -174,13 +176,18 @@ 
     public function parseData($string) {
 
         // following functions require at least one character
-        if ($string === '') return '';
+        if ($string === '') {
+        	return '';
+        }
 
         // subtracts amps that cannot possibly be escaped
         $num_amp = substr_count($string, '&') - substr_count($string, '& ') -
             ($string[strlen($string)-1] === '&' ? 1 : 0);
 
-        if (!$num_amp) return $string; // abort if no entities
+        if (!$num_amp) {
+        	return $string;
+        }
+        // abort if no entities
         $num_esc_amp = substr_count($string, '&');
         $string = strtr($string, $this->_special_entity2str);
 
@@ -188,7 +195,9 @@ 
         $num_amp_2 = substr_count($string, '&') - substr_count($string, '& ') -
             ($string[strlen($string)-1] === '&' ? 1 : 0);
 
-        if ($num_amp_2 <= $num_esc_amp) return $string;
+        if ($num_amp_2 <= $num_esc_amp) {
+        	return $string;
+        }
 
         // hmm... now we have some uncommon entities. Use the callback.
         $string = $this->_entity_parser->substituteSpecialEntities($string);

Spacing +5 added lines, -5 removed lines

@@ -107,7 +107,7 @@ 
                     $lexer = 'DirectLex';
                 }
 
-            } while(0); } // do..while so we can break
+            } while (0); } // do..while so we can break
 
             // instantiate recognized string names
             switch ($lexer) {
@@ -121,7 +121,7 @@ 
                     $inst = new HTMLPurifier_Lexer_PH5P();
                     break;
                 default:
-                    throw new HTMLPurifier_Exception("Cannot instantiate unrecognized Lexer type " . htmlspecialchars($lexer, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
+                    throw new HTMLPurifier_Exception("Cannot instantiate unrecognized Lexer type ".htmlspecialchars($lexer, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
             }
         }
 
@@ -178,7 +178,7 @@ 
 
         // subtracts amps that cannot possibly be escaped
         $num_amp = substr_count($string, '&') - substr_count($string, '& ') -
-            ($string[strlen($string)-1] === '&' ? 1 : 0);
+            ($string[strlen($string) - 1] === '&' ? 1 : 0);
 
         if (!$num_amp) return $string; // abort if no entities
         $num_esc_amp = substr_count($string, '&');
@@ -186,7 +186,7 @@ 
 
         // code duplication for sake of optimization, see above
         $num_amp_2 = substr_count($string, '&') - substr_count($string, '& ') -
-            ($string[strlen($string)-1] === '&' ? 1 : 0);
+            ($string[strlen($string) - 1] === '&' ? 1 : 0);
 
         if ($num_amp_2 <= $num_esc_amp) return $string;
 
@@ -282,7 +282,7 @@ 
         if ($config->get('Core.ConvertDocumentToFragment')) {
             $e = false;
             if ($config->get('Core.CollectErrors')) {
-                $e =& $context->get('ErrorCollector');
+                $e = & $context->get('ErrorCollector');
             }
             $new_html = $this->extractBody($html);
             if ($e && $new_html != $html) {

classes/security/htmlpurifier/library/HTMLPurifier/PercentEncoder.php

Indentation +77 added lines, -77 removed lines

@@ -11,87 +11,87 @@
 class HTMLPurifier_PercentEncoder
 {
 
-    /**
-     * Reserved characters to preserve when using encode().
-     */
-    protected $preserve = array();
+	/**
+	 * Reserved characters to preserve when using encode().
+	 */
+	protected $preserve = array();
 
-    /**
-     * String of characters that should be preserved while using encode().
-     */
-    public function __construct($preserve = false) {
-        // unreserved letters, ought to const-ify
-        for ($i = 48; $i <= 57;  $i++) $this->preserve[$i] = true; // digits
-        for ($i = 65; $i <= 90;  $i++) $this->preserve[$i] = true; // upper-case
-        for ($i = 97; $i <= 122; $i++) $this->preserve[$i] = true; // lower-case
-        $this->preserve[45] = true; // Dash         -
-        $this->preserve[46] = true; // Period       .
-        $this->preserve[95] = true; // Underscore   _
-        $this->preserve[126]= true; // Tilde        ~
+	/**
+	 * String of characters that should be preserved while using encode().
+	 */
+	public function __construct($preserve = false) {
+		// unreserved letters, ought to const-ify
+		for ($i = 48; $i <= 57;  $i++) $this->preserve[$i] = true; // digits
+		for ($i = 65; $i <= 90;  $i++) $this->preserve[$i] = true; // upper-case
+		for ($i = 97; $i <= 122; $i++) $this->preserve[$i] = true; // lower-case
+		$this->preserve[45] = true; // Dash         -
+		$this->preserve[46] = true; // Period       .
+		$this->preserve[95] = true; // Underscore   _
+		$this->preserve[126]= true; // Tilde        ~
 
-        // extra letters not to escape
-        if ($preserve !== false) {
-            for ($i = 0, $c = strlen($preserve); $i < $c; $i++) {
-                $this->preserve[ord($preserve[$i])] = true;
-            }
-        }
-    }
+		// extra letters not to escape
+		if ($preserve !== false) {
+			for ($i = 0, $c = strlen($preserve); $i < $c; $i++) {
+				$this->preserve[ord($preserve[$i])] = true;
+			}
+		}
+	}
 
-    /**
-     * Our replacement for urlencode, it encodes all non-reserved characters,
-     * as well as any extra characters that were instructed to be preserved.
-     * @note
-     *      Assumes that the string has already been normalized, making any
-     *      and all percent escape sequences valid. Percents will not be
-     *      re-escaped, regardless of their status in $preserve
-     * @param $string String to be encoded
-     * @return Encoded string.
-     */
-    public function encode($string) {
-        $ret = '';
-        for ($i = 0, $c = strlen($string); $i < $c; $i++) {
-            if ($string[$i] !== '%' && !isset($this->preserve[$int = ord($string[$i])]) ) {
-                $ret .= '%' . sprintf('%02X', $int);
-            } else {
-                $ret .= $string[$i];
-            }
-        }
-        return $ret;
-    }
+	/**
+	 * Our replacement for urlencode, it encodes all non-reserved characters,
+	 * as well as any extra characters that were instructed to be preserved.
+	 * @note
+	 *      Assumes that the string has already been normalized, making any
+	 *      and all percent escape sequences valid. Percents will not be
+	 *      re-escaped, regardless of their status in $preserve
+	 * @param $string String to be encoded
+	 * @return Encoded string.
+	 */
+	public function encode($string) {
+		$ret = '';
+		for ($i = 0, $c = strlen($string); $i < $c; $i++) {
+			if ($string[$i] !== '%' && !isset($this->preserve[$int = ord($string[$i])]) ) {
+				$ret .= '%' . sprintf('%02X', $int);
+			} else {
+				$ret .= $string[$i];
+			}
+		}
+		return $ret;
+	}
 
-    /**
-     * Fix up percent-encoding by decoding unreserved characters and normalizing.
-     * @warning This function is affected by $preserve, even though the
-     *          usual desired behavior is for this not to preserve those
-     *          characters. Be careful when reusing instances of PercentEncoder!
-     * @param $string String to normalize
-     */
-    public function normalize($string) {
-        if ($string == '') return '';
-        $parts = explode('%', $string);
-        $ret = array_shift($parts);
-        foreach ($parts as $part) {
-            $length = strlen($part);
-            if ($length < 2) {
-                $ret .= '%25' . $part;
-                continue;
-            }
-            $encoding = substr($part, 0, 2);
-            $text     = substr($part, 2);
-            if (!ctype_xdigit($encoding)) {
-                $ret .= '%25' . $part;
-                continue;
-            }
-            $int = hexdec($encoding);
-            if (isset($this->preserve[$int])) {
-                $ret .= chr($int) . $text;
-                continue;
-            }
-            $encoding = strtoupper($encoding);
-            $ret .= '%' . $encoding . $text;
-        }
-        return $ret;
-    }
+	/**
+	 * Fix up percent-encoding by decoding unreserved characters and normalizing.
+	 * @warning This function is affected by $preserve, even though the
+	 *          usual desired behavior is for this not to preserve those
+	 *          characters. Be careful when reusing instances of PercentEncoder!
+	 * @param $string String to normalize
+	 */
+	public function normalize($string) {
+		if ($string == '') return '';
+		$parts = explode('%', $string);
+		$ret = array_shift($parts);
+		foreach ($parts as $part) {
+			$length = strlen($part);
+			if ($length < 2) {
+				$ret .= '%25' . $part;
+				continue;
+			}
+			$encoding = substr($part, 0, 2);
+			$text     = substr($part, 2);
+			if (!ctype_xdigit($encoding)) {
+				$ret .= '%25' . $part;
+				continue;
+			}
+			$int = hexdec($encoding);
+			if (isset($this->preserve[$int])) {
+				$ret .= chr($int) . $text;
+				continue;
+			}
+			$encoding = strtoupper($encoding);
+			$ret .= '%' . $encoding . $text;
+		}
+		return $ret;
+	}
 
 }
 

Braces +15 added lines, -4 removed lines

@@ -21,9 +21,18 @@ 
      */
     public function __construct($preserve = false) {
         // unreserved letters, ought to const-ify
-        for ($i = 48; $i <= 57;  $i++) $this->preserve[$i] = true; // digits
-        for ($i = 65; $i <= 90;  $i++) $this->preserve[$i] = true; // upper-case
-        for ($i = 97; $i <= 122; $i++) $this->preserve[$i] = true; // lower-case
+        for ($i = 48; $i <= 57;  $i++) {
+        	$this->preserve[$i] = true;
+        }
+        // digits
+        for ($i = 65; $i <= 90;  $i++) {
+        	$this->preserve[$i] = true;
+        }
+        // upper-case
+        for ($i = 97; $i <= 122; $i++) {
+        	$this->preserve[$i] = true;
+        }
+        // lower-case
         $this->preserve[45] = true; // Dash         -
         $this->preserve[46] = true; // Period       .
         $this->preserve[95] = true; // Underscore   _
@@ -67,7 +76,9 @@ 
      * @param $string String to normalize
      */
     public function normalize($string) {
-        if ($string == '') return '';
+        if ($string == '') {
+        	return '';
+        }
         $parts = explode('%', $string);
         $ret = array_shift($parts);
         foreach ($parts as $part) {

Spacing +9 added lines, -9 removed lines

@@ -21,13 +21,13 @@ 
      */
     public function __construct($preserve = false) {
         // unreserved letters, ought to const-ify
-        for ($i = 48; $i <= 57;  $i++) $this->preserve[$i] = true; // digits
-        for ($i = 65; $i <= 90;  $i++) $this->preserve[$i] = true; // upper-case
+        for ($i = 48; $i <= 57; $i++) $this->preserve[$i] = true; // digits
+        for ($i = 65; $i <= 90; $i++) $this->preserve[$i] = true; // upper-case
         for ($i = 97; $i <= 122; $i++) $this->preserve[$i] = true; // lower-case
         $this->preserve[45] = true; // Dash         -
         $this->preserve[46] = true; // Period       .
         $this->preserve[95] = true; // Underscore   _
-        $this->preserve[126]= true; // Tilde        ~
+        $this->preserve[126] = true; // Tilde        ~
 
         // extra letters not to escape
         if ($preserve !== false) {
@@ -50,8 +50,8 @@ 
     public function encode($string) {
         $ret = '';
         for ($i = 0, $c = strlen($string); $i < $c; $i++) {
-            if ($string[$i] !== '%' && !isset($this->preserve[$int = ord($string[$i])]) ) {
-                $ret .= '%' . sprintf('%02X', $int);
+            if ($string[$i] !== '%' && !isset($this->preserve[$int = ord($string[$i])])) {
+                $ret .= '%'.sprintf('%02X', $int);
             } else {
                 $ret .= $string[$i];
             }
@@ -73,22 +73,22 @@ 
         foreach ($parts as $part) {
             $length = strlen($part);
             if ($length < 2) {
-                $ret .= '%25' . $part;
+                $ret .= '%25'.$part;
                 continue;
             }
             $encoding = substr($part, 0, 2);
             $text     = substr($part, 2);
             if (!ctype_xdigit($encoding)) {
-                $ret .= '%25' . $part;
+                $ret .= '%25'.$part;
                 continue;
             }
             $int = hexdec($encoding);
             if (isset($this->preserve[$int])) {
-                $ret .= chr($int) . $text;
+                $ret .= chr($int).$text;
                 continue;
             }
             $encoding = strtoupper($encoding);
-            $ret .= '%' . $encoding . $text;
+            $ret .= '%'.$encoding.$text;
         }
         return $ret;
     }

classes/security/htmlpurifier/library/HTMLPurifier/Printer/CSSDefinition.php

Indentation +22 added lines, -22 removed lines

@@ -3,35 +3,35 @@
 class HTMLPurifier_Printer_CSSDefinition extends HTMLPurifier_Printer
 {
 
-    protected $def;
+	protected $def;
 
-    public function render($config) {
-        $this->def = $config->getCSSDefinition();
-        $ret = '';
+	public function render($config) {
+		$this->def = $config->getCSSDefinition();
+		$ret = '';
 
-        $ret .= $this->start('div', array('class' => 'HTMLPurifier_Printer'));
-        $ret .= $this->start('table');
+		$ret .= $this->start('div', array('class' => 'HTMLPurifier_Printer'));
+		$ret .= $this->start('table');
 
-        $ret .= $this->element('caption', 'Properties ($info)');
+		$ret .= $this->element('caption', 'Properties ($info)');
 
-        $ret .= $this->start('thead');
-        $ret .= $this->start('tr');
-        $ret .= $this->element('th', 'Property', array('class' => 'heavy'));
-        $ret .= $this->element('th', 'Definition', array('class' => 'heavy', 'style' => 'width:auto;'));
-        $ret .= $this->end('tr');
-        $ret .= $this->end('thead');
+		$ret .= $this->start('thead');
+		$ret .= $this->start('tr');
+		$ret .= $this->element('th', 'Property', array('class' => 'heavy'));
+		$ret .= $this->element('th', 'Definition', array('class' => 'heavy', 'style' => 'width:auto;'));
+		$ret .= $this->end('tr');
+		$ret .= $this->end('thead');
 
-        ksort($this->def->info);
-        foreach ($this->def->info as $property => $obj) {
-            $name = $this->getClass($obj, 'AttrDef_');
-            $ret .= $this->row($property, $name);
-        }
+		ksort($this->def->info);
+		foreach ($this->def->info as $property => $obj) {
+			$name = $this->getClass($obj, 'AttrDef_');
+			$ret .= $this->row($property, $name);
+		}
 
-        $ret .= $this->end('table');
-        $ret .= $this->end('div');
+		$ret .= $this->end('table');
+		$ret .= $this->end('div');
 
-        return $ret;
-    }
+		return $ret;
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/Printer/ConfigForm.php

Indentation +316 added lines, -316 removed lines

@@ -6,179 +6,179 @@ 
 class HTMLPurifier_Printer_ConfigForm extends HTMLPurifier_Printer
 {
 
-    /**
-     * Printers for specific fields
-     */
-    protected $fields = array();
+	/**
+	 * Printers for specific fields
+	 */
+	protected $fields = array();
 
-    /**
-     * Documentation URL, can have fragment tagged on end
-     */
-    protected $docURL;
+	/**
+	 * Documentation URL, can have fragment tagged on end
+	 */
+	protected $docURL;
 
-    /**
-     * Name of form element to stuff config in
-     */
-    protected $name;
+	/**
+	 * Name of form element to stuff config in
+	 */
+	protected $name;
 
-    /**
-     * Whether or not to compress directive names, clipping them off
-     * after a certain amount of letters. False to disable or integer letters
-     * before clipping.
-     */
-    protected $compress = false;
+	/**
+	 * Whether or not to compress directive names, clipping them off
+	 * after a certain amount of letters. False to disable or integer letters
+	 * before clipping.
+	 */
+	protected $compress = false;
 
-    /**
-     * @param $name Form element name for directives to be stuffed into
-     * @param $doc_url String documentation URL, will have fragment tagged on
-     * @param $compress Integer max length before compressing a directive name, set to false to turn off
-     */
-    public function __construct(
-        $name, $doc_url = null, $compress = false
-    ) {
-        parent::__construct();
-        $this->docURL = $doc_url;
-        $this->name   = $name;
-        $this->compress = $compress;
-        // initialize sub-printers
-        $this->fields[0]    = new HTMLPurifier_Printer_ConfigForm_default();
-        $this->fields[HTMLPurifier_VarParser::BOOL]       = new HTMLPurifier_Printer_ConfigForm_bool();
-    }
+	/**
+	 * @param $name Form element name for directives to be stuffed into
+	 * @param $doc_url String documentation URL, will have fragment tagged on
+	 * @param $compress Integer max length before compressing a directive name, set to false to turn off
+	 */
+	public function __construct(
+		$name, $doc_url = null, $compress = false
+	) {
+		parent::__construct();
+		$this->docURL = $doc_url;
+		$this->name   = $name;
+		$this->compress = $compress;
+		// initialize sub-printers
+		$this->fields[0]    = new HTMLPurifier_Printer_ConfigForm_default();
+		$this->fields[HTMLPurifier_VarParser::BOOL]       = new HTMLPurifier_Printer_ConfigForm_bool();
+	}
 
-    /**
-     * Sets default column and row size for textareas in sub-printers
-     * @param $cols Integer columns of textarea, null to use default
-     * @param $rows Integer rows of textarea, null to use default
-     */
-    public function setTextareaDimensions($cols = null, $rows = null) {
-        if ($cols) $this->fields['default']->cols = $cols;
-        if ($rows) $this->fields['default']->rows = $rows;
-    }
+	/**
+	 * Sets default column and row size for textareas in sub-printers
+	 * @param $cols Integer columns of textarea, null to use default
+	 * @param $rows Integer rows of textarea, null to use default
+	 */
+	public function setTextareaDimensions($cols = null, $rows = null) {
+		if ($cols) $this->fields['default']->cols = $cols;
+		if ($rows) $this->fields['default']->rows = $rows;
+	}
 
-    /**
-     * Retrieves styling, in case it is not accessible by webserver
-     */
-    public static function getCSS() {
-        return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.css');
-    }
+	/**
+	 * Retrieves styling, in case it is not accessible by webserver
+	 */
+	public static function getCSS() {
+		return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.css');
+	}
 
-    /**
-     * Retrieves JavaScript, in case it is not accessible by webserver
-     */
-    public static function getJavaScript() {
-        return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.js');
-    }
+	/**
+	 * Retrieves JavaScript, in case it is not accessible by webserver
+	 */
+	public static function getJavaScript() {
+		return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.js');
+	}
 
-    /**
-     * Returns HTML output for a configuration form
-     * @param $config Configuration object of current form state, or an array
-     *        where [0] has an HTML namespace and [1] is being rendered.
-     * @param $allowed Optional namespace(s) and directives to restrict form to.
-     */
-    public function render($config, $allowed = true, $render_controls = true) {
-        if (is_array($config) && isset($config[0])) {
-            $gen_config = $config[0];
-            $config = $config[1];
-        } else {
-            $gen_config = $config;
-        }
+	/**
+	 * Returns HTML output for a configuration form
+	 * @param $config Configuration object of current form state, or an array
+	 *        where [0] has an HTML namespace and [1] is being rendered.
+	 * @param $allowed Optional namespace(s) and directives to restrict form to.
+	 */
+	public function render($config, $allowed = true, $render_controls = true) {
+		if (is_array($config) && isset($config[0])) {
+			$gen_config = $config[0];
+			$config = $config[1];
+		} else {
+			$gen_config = $config;
+		}
 
-        $this->config = $config;
-        $this->genConfig = $gen_config;
-        $this->prepareGenerator($gen_config);
+		$this->config = $config;
+		$this->genConfig = $gen_config;
+		$this->prepareGenerator($gen_config);
 
-        $allowed = HTMLPurifier_Config::getAllowedDirectivesForForm($allowed, $config->def);
-        $all = array();
-        foreach ($allowed as $key) {
-            list($ns, $directive) = $key;
-            $all[$ns][$directive] = $config->get($ns .'.'. $directive);
-        }
+		$allowed = HTMLPurifier_Config::getAllowedDirectivesForForm($allowed, $config->def);
+		$all = array();
+		foreach ($allowed as $key) {
+			list($ns, $directive) = $key;
+			$all[$ns][$directive] = $config->get($ns .'.'. $directive);
+		}
 
-        $ret = '';
-        $ret .= $this->start('table', array('class' => 'hp-config'));
-        $ret .= $this->start('thead');
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', 'Directive', array('class' => 'hp-directive'));
-            $ret .= $this->element('th', 'Value', array('class' => 'hp-value'));
-        $ret .= $this->end('tr');
-        $ret .= $this->end('thead');
-        foreach ($all as $ns => $directives) {
-            $ret .= $this->renderNamespace($ns, $directives);
-        }
-        if ($render_controls) {
-             $ret .= $this->start('tbody');
-             $ret .= $this->start('tr');
-                 $ret .= $this->start('td', array('colspan' => 2, 'class' => 'controls'));
-                     $ret .= $this->elementEmpty('input', array('type' => 'submit', 'value' => 'Submit'));
-                     $ret .= '[<a href="?">Reset</a>]';
-                 $ret .= $this->end('td');
-             $ret .= $this->end('tr');
-             $ret .= $this->end('tbody');
-        }
-        $ret .= $this->end('table');
-        return $ret;
-    }
+		$ret = '';
+		$ret .= $this->start('table', array('class' => 'hp-config'));
+		$ret .= $this->start('thead');
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', 'Directive', array('class' => 'hp-directive'));
+			$ret .= $this->element('th', 'Value', array('class' => 'hp-value'));
+		$ret .= $this->end('tr');
+		$ret .= $this->end('thead');
+		foreach ($all as $ns => $directives) {
+			$ret .= $this->renderNamespace($ns, $directives);
+		}
+		if ($render_controls) {
+			 $ret .= $this->start('tbody');
+			 $ret .= $this->start('tr');
+				 $ret .= $this->start('td', array('colspan' => 2, 'class' => 'controls'));
+					 $ret .= $this->elementEmpty('input', array('type' => 'submit', 'value' => 'Submit'));
+					 $ret .= '[<a href="?">Reset</a>]';
+				 $ret .= $this->end('td');
+			 $ret .= $this->end('tr');
+			 $ret .= $this->end('tbody');
+		}
+		$ret .= $this->end('table');
+		return $ret;
+	}
 
-    /**
-     * Renders a single namespace
-     * @param $ns String namespace name
-     * @param $directive Associative array of directives to values
-     */
-    protected function renderNamespace($ns, $directives) {
-        $ret = '';
-        $ret .= $this->start('tbody', array('class' => 'namespace'));
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', $ns, array('colspan' => 2));
-        $ret .= $this->end('tr');
-        $ret .= $this->end('tbody');
-        $ret .= $this->start('tbody');
-        foreach ($directives as $directive => $value) {
-            $ret .= $this->start('tr');
-            $ret .= $this->start('th');
-            if ($this->docURL) {
-                $url = str_replace('%s', urlencode("$ns.$directive"), $this->docURL);
-                $ret .= $this->start('a', array('href' => $url));
-            }
-                $attr = array('for' => "{$this->name}:$ns.$directive");
+	/**
+	 * Renders a single namespace
+	 * @param $ns String namespace name
+	 * @param $directive Associative array of directives to values
+	 */
+	protected function renderNamespace($ns, $directives) {
+		$ret = '';
+		$ret .= $this->start('tbody', array('class' => 'namespace'));
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', $ns, array('colspan' => 2));
+		$ret .= $this->end('tr');
+		$ret .= $this->end('tbody');
+		$ret .= $this->start('tbody');
+		foreach ($directives as $directive => $value) {
+			$ret .= $this->start('tr');
+			$ret .= $this->start('th');
+			if ($this->docURL) {
+				$url = str_replace('%s', urlencode("$ns.$directive"), $this->docURL);
+				$ret .= $this->start('a', array('href' => $url));
+			}
+				$attr = array('for' => "{$this->name}:$ns.$directive");
 
-                // crop directive name if it's too long
-                if (!$this->compress || (strlen($directive) < $this->compress)) {
-                    $directive_disp = $directive;
-                } else {
-                    $directive_disp = substr($directive, 0, $this->compress - 2) . '...';
-                    $attr['title'] = $directive;
-                }
+				// crop directive name if it's too long
+				if (!$this->compress || (strlen($directive) < $this->compress)) {
+					$directive_disp = $directive;
+				} else {
+					$directive_disp = substr($directive, 0, $this->compress - 2) . '...';
+					$attr['title'] = $directive;
+				}
 
-                $ret .= $this->element(
-                    'label',
-                    $directive_disp,
-                    // component printers must create an element with this id
-                    $attr
-                );
-            if ($this->docURL) $ret .= $this->end('a');
-            $ret .= $this->end('th');
+				$ret .= $this->element(
+					'label',
+					$directive_disp,
+					// component printers must create an element with this id
+					$attr
+				);
+			if ($this->docURL) $ret .= $this->end('a');
+			$ret .= $this->end('th');
 
-            $ret .= $this->start('td');
-                $def = $this->config->def->info["$ns.$directive"];
-                if (is_int($def)) {
-                    $allow_null = $def < 0;
-                    $type = abs($def);
-                } else {
-                    $type = $def->type;
-                    $allow_null = isset($def->allow_null);
-                }
-                if (!isset($this->fields[$type])) $type = 0; // default
-                $type_obj = $this->fields[$type];
-                if ($allow_null) {
-                    $type_obj = new HTMLPurifier_Printer_ConfigForm_NullDecorator($type_obj);
-                }
-                $ret .= $type_obj->render($ns, $directive, $value, $this->name, array($this->genConfig, $this->config));
-            $ret .= $this->end('td');
-            $ret .= $this->end('tr');
-        }
-        $ret .= $this->end('tbody');
-        return $ret;
-    }
+			$ret .= $this->start('td');
+				$def = $this->config->def->info["$ns.$directive"];
+				if (is_int($def)) {
+					$allow_null = $def < 0;
+					$type = abs($def);
+				} else {
+					$type = $def->type;
+					$allow_null = isset($def->allow_null);
+				}
+				if (!isset($this->fields[$type])) $type = 0; // default
+				$type_obj = $this->fields[$type];
+				if ($allow_null) {
+					$type_obj = new HTMLPurifier_Printer_ConfigForm_NullDecorator($type_obj);
+				}
+				$ret .= $type_obj->render($ns, $directive, $value, $this->name, array($this->genConfig, $this->config));
+			$ret .= $this->end('td');
+			$ret .= $this->end('tr');
+		}
+		$ret .= $this->end('tbody');
+		return $ret;
+	}
 
 }
 
@@ -186,183 +186,183 @@ 
  * Printer decorator for directives that accept null
  */
 class HTMLPurifier_Printer_ConfigForm_NullDecorator extends HTMLPurifier_Printer {
-    /**
-     * Printer being decorated
-     */
-    protected $obj;
-    /**
-     * @param $obj Printer to decorate
-     */
-    public function __construct($obj) {
-        parent::__construct();
-        $this->obj = $obj;
-    }
-    public function render($ns, $directive, $value, $name, $config) {
-        if (is_array($config) && isset($config[0])) {
-            $gen_config = $config[0];
-            $config = $config[1];
-        } else {
-            $gen_config = $config;
-        }
-        $this->prepareGenerator($gen_config);
+	/**
+	 * Printer being decorated
+	 */
+	protected $obj;
+	/**
+	 * @param $obj Printer to decorate
+	 */
+	public function __construct($obj) {
+		parent::__construct();
+		$this->obj = $obj;
+	}
+	public function render($ns, $directive, $value, $name, $config) {
+		if (is_array($config) && isset($config[0])) {
+			$gen_config = $config[0];
+			$config = $config[1];
+		} else {
+			$gen_config = $config;
+		}
+		$this->prepareGenerator($gen_config);
 
-        $ret = '';
-        $ret .= $this->start('label', array('for' => "$name:Null_$ns.$directive"));
-        $ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
-        $ret .= $this->text(' Null/Disabled');
-        $ret .= $this->end('label');
-        $attr = array(
-            'type' => 'checkbox',
-            'value' => '1',
-            'class' => 'null-toggle',
-            'name' => "$name"."[Null_$ns.$directive]",
-            'id' => "$name:Null_$ns.$directive",
-            'onclick' => "toggleWriteability('$name:$ns.$directive',checked)" // INLINE JAVASCRIPT!!!!
-        );
-        if ($this->obj instanceof HTMLPurifier_Printer_ConfigForm_bool) {
-            // modify inline javascript slightly
-            $attr['onclick'] = "toggleWriteability('$name:Yes_$ns.$directive',checked);toggleWriteability('$name:No_$ns.$directive',checked)";
-        }
-        if ($value === null) $attr['checked'] = 'checked';
-        $ret .= $this->elementEmpty('input', $attr);
-        $ret .= $this->text(' or ');
-        $ret .= $this->elementEmpty('br');
-        $ret .= $this->obj->render($ns, $directive, $value, $name, array($gen_config, $config));
-        return $ret;
-    }
+		$ret = '';
+		$ret .= $this->start('label', array('for' => "$name:Null_$ns.$directive"));
+		$ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
+		$ret .= $this->text(' Null/Disabled');
+		$ret .= $this->end('label');
+		$attr = array(
+			'type' => 'checkbox',
+			'value' => '1',
+			'class' => 'null-toggle',
+			'name' => "$name"."[Null_$ns.$directive]",
+			'id' => "$name:Null_$ns.$directive",
+			'onclick' => "toggleWriteability('$name:$ns.$directive',checked)" // INLINE JAVASCRIPT!!!!
+		);
+		if ($this->obj instanceof HTMLPurifier_Printer_ConfigForm_bool) {
+			// modify inline javascript slightly
+			$attr['onclick'] = "toggleWriteability('$name:Yes_$ns.$directive',checked);toggleWriteability('$name:No_$ns.$directive',checked)";
+		}
+		if ($value === null) $attr['checked'] = 'checked';
+		$ret .= $this->elementEmpty('input', $attr);
+		$ret .= $this->text(' or ');
+		$ret .= $this->elementEmpty('br');
+		$ret .= $this->obj->render($ns, $directive, $value, $name, array($gen_config, $config));
+		return $ret;
+	}
 }
 
 /**
  * Swiss-army knife configuration form field printer
  */
 class HTMLPurifier_Printer_ConfigForm_default extends HTMLPurifier_Printer {
-    public $cols = 18;
-    public $rows = 5;
-    public function render($ns, $directive, $value, $name, $config) {
-        if (is_array($config) && isset($config[0])) {
-            $gen_config = $config[0];
-            $config = $config[1];
-        } else {
-            $gen_config = $config;
-        }
-        $this->prepareGenerator($gen_config);
-        // this should probably be split up a little
-        $ret = '';
-        $def = $config->def->info["$ns.$directive"];
-        if (is_int($def)) {
-            $type = abs($def);
-        } else {
-            $type = $def->type;
-        }
-        if (is_array($value)) {
-            switch ($type) {
-                case HTMLPurifier_VarParser::LOOKUP:
-                    $array = $value;
-                    $value = array();
-                    foreach ($array as $val => $b) {
-                        $value[] = $val;
-                    }
-                case HTMLPurifier_VarParser::ALIST:
-                    $value = implode(PHP_EOL, $value);
-                    break;
-                case HTMLPurifier_VarParser::HASH:
-                    $nvalue = '';
-                    foreach ($value as $i => $v) {
-                        $nvalue .= "$i:$v" . PHP_EOL;
-                    }
-                    $value = $nvalue;
-                    break;
-                default:
-                    $value = '';
-            }
-        }
-        if ($type === HTMLPurifier_VarParser::MIXED) {
-            return 'Not supported';
-            $value = serialize($value);
-        }
-        $attr = array(
-            'name' => "$name"."[$ns.$directive]",
-            'id' => "$name:$ns.$directive"
-        );
-        if ($value === null) $attr['disabled'] = 'disabled';
-        if (isset($def->allowed)) {
-            $ret .= $this->start('select', $attr);
-            foreach ($def->allowed as $val => $b) {
-                $attr = array();
-                if ($value == $val) $attr['selected'] = 'selected';
-                $ret .= $this->element('option', $val, $attr);
-            }
-            $ret .= $this->end('select');
-        } elseif (
-            $type === HTMLPurifier_VarParser::TEXT ||
-            $type === HTMLPurifier_VarParser::ITEXT ||
-            $type === HTMLPurifier_VarParser::ALIST ||
-            $type === HTMLPurifier_VarParser::HASH ||
-            $type === HTMLPurifier_VarParser::LOOKUP
-        ) {
-            $attr['cols'] = $this->cols;
-            $attr['rows'] = $this->rows;
-            $ret .= $this->start('textarea', $attr);
-            $ret .= $this->text($value);
-            $ret .= $this->end('textarea');
-        } else {
-            $attr['value'] = $value;
-            $attr['type'] = 'text';
-            $ret .= $this->elementEmpty('input', $attr);
-        }
-        return $ret;
-    }
+	public $cols = 18;
+	public $rows = 5;
+	public function render($ns, $directive, $value, $name, $config) {
+		if (is_array($config) && isset($config[0])) {
+			$gen_config = $config[0];
+			$config = $config[1];
+		} else {
+			$gen_config = $config;
+		}
+		$this->prepareGenerator($gen_config);
+		// this should probably be split up a little
+		$ret = '';
+		$def = $config->def->info["$ns.$directive"];
+		if (is_int($def)) {
+			$type = abs($def);
+		} else {
+			$type = $def->type;
+		}
+		if (is_array($value)) {
+			switch ($type) {
+				case HTMLPurifier_VarParser::LOOKUP:
+					$array = $value;
+					$value = array();
+					foreach ($array as $val => $b) {
+						$value[] = $val;
+					}
+				case HTMLPurifier_VarParser::ALIST:
+					$value = implode(PHP_EOL, $value);
+					break;
+				case HTMLPurifier_VarParser::HASH:
+					$nvalue = '';
+					foreach ($value as $i => $v) {
+						$nvalue .= "$i:$v" . PHP_EOL;
+					}
+					$value = $nvalue;
+					break;
+				default:
+					$value = '';
+			}
+		}
+		if ($type === HTMLPurifier_VarParser::MIXED) {
+			return 'Not supported';
+			$value = serialize($value);
+		}
+		$attr = array(
+			'name' => "$name"."[$ns.$directive]",
+			'id' => "$name:$ns.$directive"
+		);
+		if ($value === null) $attr['disabled'] = 'disabled';
+		if (isset($def->allowed)) {
+			$ret .= $this->start('select', $attr);
+			foreach ($def->allowed as $val => $b) {
+				$attr = array();
+				if ($value == $val) $attr['selected'] = 'selected';
+				$ret .= $this->element('option', $val, $attr);
+			}
+			$ret .= $this->end('select');
+		} elseif (
+			$type === HTMLPurifier_VarParser::TEXT ||
+			$type === HTMLPurifier_VarParser::ITEXT ||
+			$type === HTMLPurifier_VarParser::ALIST ||
+			$type === HTMLPurifier_VarParser::HASH ||
+			$type === HTMLPurifier_VarParser::LOOKUP
+		) {
+			$attr['cols'] = $this->cols;
+			$attr['rows'] = $this->rows;
+			$ret .= $this->start('textarea', $attr);
+			$ret .= $this->text($value);
+			$ret .= $this->end('textarea');
+		} else {
+			$attr['value'] = $value;
+			$attr['type'] = 'text';
+			$ret .= $this->elementEmpty('input', $attr);
+		}
+		return $ret;
+	}
 }
 
 /**
  * Bool form field printer
  */
 class HTMLPurifier_Printer_ConfigForm_bool extends HTMLPurifier_Printer {
-    public function render($ns, $directive, $value, $name, $config) {
-        if (is_array($config) && isset($config[0])) {
-            $gen_config = $config[0];
-            $config = $config[1];
-        } else {
-            $gen_config = $config;
-        }
-        $this->prepareGenerator($gen_config);
-        $ret = '';
-        $ret .= $this->start('div', array('id' => "$name:$ns.$directive"));
+	public function render($ns, $directive, $value, $name, $config) {
+		if (is_array($config) && isset($config[0])) {
+			$gen_config = $config[0];
+			$config = $config[1];
+		} else {
+			$gen_config = $config;
+		}
+		$this->prepareGenerator($gen_config);
+		$ret = '';
+		$ret .= $this->start('div', array('id' => "$name:$ns.$directive"));
 
-        $ret .= $this->start('label', array('for' => "$name:Yes_$ns.$directive"));
-        $ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
-        $ret .= $this->text(' Yes');
-        $ret .= $this->end('label');
+		$ret .= $this->start('label', array('for' => "$name:Yes_$ns.$directive"));
+		$ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
+		$ret .= $this->text(' Yes');
+		$ret .= $this->end('label');
 
-        $attr = array(
-            'type' => 'radio',
-            'name' => "$name"."[$ns.$directive]",
-            'id' => "$name:Yes_$ns.$directive",
-            'value' => '1'
-        );
-        if ($value === true) $attr['checked'] = 'checked';
-        if ($value === null) $attr['disabled'] = 'disabled';
-        $ret .= $this->elementEmpty('input', $attr);
+		$attr = array(
+			'type' => 'radio',
+			'name' => "$name"."[$ns.$directive]",
+			'id' => "$name:Yes_$ns.$directive",
+			'value' => '1'
+		);
+		if ($value === true) $attr['checked'] = 'checked';
+		if ($value === null) $attr['disabled'] = 'disabled';
+		$ret .= $this->elementEmpty('input', $attr);
 
-        $ret .= $this->start('label', array('for' => "$name:No_$ns.$directive"));
-        $ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
-        $ret .= $this->text(' No');
-        $ret .= $this->end('label');
+		$ret .= $this->start('label', array('for' => "$name:No_$ns.$directive"));
+		$ret .= $this->element('span', "$ns.$directive:", array('class' => 'verbose'));
+		$ret .= $this->text(' No');
+		$ret .= $this->end('label');
 
-        $attr = array(
-            'type' => 'radio',
-            'name' => "$name"."[$ns.$directive]",
-            'id' => "$name:No_$ns.$directive",
-            'value' => '0'
-        );
-        if ($value === false) $attr['checked'] = 'checked';
-        if ($value === null) $attr['disabled'] = 'disabled';
-        $ret .= $this->elementEmpty('input', $attr);
+		$attr = array(
+			'type' => 'radio',
+			'name' => "$name"."[$ns.$directive]",
+			'id' => "$name:No_$ns.$directive",
+			'value' => '0'
+		);
+		if ($value === false) $attr['checked'] = 'checked';
+		if ($value === null) $attr['disabled'] = 'disabled';
+		$ret .= $this->elementEmpty('input', $attr);
 
-        $ret .= $this->end('div');
+		$ret .= $this->end('div');
 
-        return $ret;
-    }
+		return $ret;
+	}
 }
 
 // vim: et sw=4 sts=4

Braces +34 added lines, -11 removed lines

@@ -51,8 +51,12 @@ 
      * @param $rows Integer rows of textarea, null to use default
      */
     public function setTextareaDimensions($cols = null, $rows = null) {
-        if ($cols) $this->fields['default']->cols = $cols;
-        if ($rows) $this->fields['default']->rows = $rows;
+        if ($cols) {
+        	$this->fields['default']->cols = $cols;
+        }
+        if ($rows) {
+        	$this->fields['default']->rows = $rows;
+        }
     }
 
     /**
@@ -155,7 +159,9 @@ 
                     // component printers must create an element with this id
                     $attr
                 );
-            if ($this->docURL) $ret .= $this->end('a');
+            if ($this->docURL) {
+            	$ret .= $this->end('a');
+            }
             $ret .= $this->end('th');
 
             $ret .= $this->start('td');
@@ -167,7 +173,10 @@ 
                     $type = $def->type;
                     $allow_null = isset($def->allow_null);
                 }
-                if (!isset($this->fields[$type])) $type = 0; // default
+                if (!isset($this->fields[$type])) {
+                	$type = 0;
+                }
+                // default
                 $type_obj = $this->fields[$type];
                 if ($allow_null) {
                     $type_obj = new HTMLPurifier_Printer_ConfigForm_NullDecorator($type_obj);
@@ -223,7 +232,9 @@ 
             // modify inline javascript slightly
             $attr['onclick'] = "toggleWriteability('$name:Yes_$ns.$directive',checked);toggleWriteability('$name:No_$ns.$directive',checked)";
         }
-        if ($value === null) $attr['checked'] = 'checked';
+        if ($value === null) {
+        	$attr['checked'] = 'checked';
+        }
         $ret .= $this->elementEmpty('input', $attr);
         $ret .= $this->text(' or ');
         $ret .= $this->elementEmpty('br');
@@ -284,12 +295,16 @@ 
             'name' => "$name"."[$ns.$directive]",
             'id' => "$name:$ns.$directive"
         );
-        if ($value === null) $attr['disabled'] = 'disabled';
+        if ($value === null) {
+        	$attr['disabled'] = 'disabled';
+        }
         if (isset($def->allowed)) {
             $ret .= $this->start('select', $attr);
             foreach ($def->allowed as $val => $b) {
                 $attr = array();
-                if ($value == $val) $attr['selected'] = 'selected';
+                if ($value == $val) {
+                	$attr['selected'] = 'selected';
+                }
                 $ret .= $this->element('option', $val, $attr);
             }
             $ret .= $this->end('select');
@@ -340,8 +355,12 @@ 
             'id' => "$name:Yes_$ns.$directive",
             'value' => '1'
         );
-        if ($value === true) $attr['checked'] = 'checked';
-        if ($value === null) $attr['disabled'] = 'disabled';
+        if ($value === true) {
+        	$attr['checked'] = 'checked';
+        }
+        if ($value === null) {
+        	$attr['disabled'] = 'disabled';
+        }
         $ret .= $this->elementEmpty('input', $attr);
 
         $ret .= $this->start('label', array('for' => "$name:No_$ns.$directive"));
@@ -355,8 +374,12 @@ 
             'id' => "$name:No_$ns.$directive",
             'value' => '0'
         );
-        if ($value === false) $attr['checked'] = 'checked';
-        if ($value === null) $attr['disabled'] = 'disabled';
+        if ($value === false) {
+        	$attr['checked'] = 'checked';
+        }
+        if ($value === null) {
+        	$attr['disabled'] = 'disabled';
+        }
         $ret .= $this->elementEmpty('input', $attr);
 
         $ret .= $this->end('div');

Spacing +7 added lines, -7 removed lines

@@ -41,8 +41,8 @@ 
         $this->name   = $name;
         $this->compress = $compress;
         // initialize sub-printers
-        $this->fields[0]    = new HTMLPurifier_Printer_ConfigForm_default();
-        $this->fields[HTMLPurifier_VarParser::BOOL]       = new HTMLPurifier_Printer_ConfigForm_bool();
+        $this->fields[0] = new HTMLPurifier_Printer_ConfigForm_default();
+        $this->fields[HTMLPurifier_VarParser::BOOL] = new HTMLPurifier_Printer_ConfigForm_bool();
     }
 
     /**
@@ -59,14 +59,14 @@ 
      * Retrieves styling, in case it is not accessible by webserver
      */
     public static function getCSS() {
-        return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.css');
+        return file_get_contents(HTMLPURIFIER_PREFIX.'/HTMLPurifier/Printer/ConfigForm.css');
     }
 
     /**
      * Retrieves JavaScript, in case it is not accessible by webserver
      */
     public static function getJavaScript() {
-        return file_get_contents(HTMLPURIFIER_PREFIX . '/HTMLPurifier/Printer/ConfigForm.js');
+        return file_get_contents(HTMLPURIFIER_PREFIX.'/HTMLPurifier/Printer/ConfigForm.js');
     }
 
     /**
@@ -91,7 +91,7 @@ 
         $all = array();
         foreach ($allowed as $key) {
             list($ns, $directive) = $key;
-            $all[$ns][$directive] = $config->get($ns .'.'. $directive);
+            $all[$ns][$directive] = $config->get($ns.'.'.$directive);
         }
 
         $ret = '';
@@ -145,7 +145,7 @@ 
                 if (!$this->compress || (strlen($directive) < $this->compress)) {
                     $directive_disp = $directive;
                 } else {
-                    $directive_disp = substr($directive, 0, $this->compress - 2) . '...';
+                    $directive_disp = substr($directive, 0, $this->compress - 2).'...';
                     $attr['title'] = $directive;
                 }
 
@@ -268,7 +268,7 @@ 
                 case HTMLPurifier_VarParser::HASH:
                     $nvalue = '';
                     foreach ($value as $i => $v) {
-                        $nvalue .= "$i:$v" . PHP_EOL;
+                        $nvalue .= "$i:$v".PHP_EOL;
                     }
                     $value = $nvalue;
                     break;

classes/security/htmlpurifier/library/HTMLPurifier/Printer/HTMLDefinition.php

Indentation +263 added lines, -263 removed lines

@@ -3,269 +3,269 @@
 class HTMLPurifier_Printer_HTMLDefinition extends HTMLPurifier_Printer
 {
 
-    /**
-     * Instance of HTMLPurifier_HTMLDefinition, for easy access
-     */
-    protected $def;
-
-    public function render($config) {
-        $ret = '';
-        $this->config =& $config;
-
-        $this->def = $config->getHTMLDefinition();
-
-        $ret .= $this->start('div', array('class' => 'HTMLPurifier_Printer'));
-
-        $ret .= $this->renderDoctype();
-        $ret .= $this->renderEnvironment();
-        $ret .= $this->renderContentSets();
-        $ret .= $this->renderInfo();
-
-        $ret .= $this->end('div');
-
-        return $ret;
-    }
-
-    /**
-     * Renders the Doctype table
-     */
-    protected function renderDoctype() {
-        $doctype = $this->def->doctype;
-        $ret = '';
-        $ret .= $this->start('table');
-        $ret .= $this->element('caption', 'Doctype');
-        $ret .= $this->row('Name', $doctype->name);
-        $ret .= $this->row('XML', $doctype->xml ? 'Yes' : 'No');
-        $ret .= $this->row('Default Modules', implode($doctype->modules, ', '));
-        $ret .= $this->row('Default Tidy Modules', implode($doctype->tidyModules, ', '));
-        $ret .= $this->end('table');
-        return $ret;
-    }
-
-
-    /**
-     * Renders environment table, which is miscellaneous info
-     */
-    protected function renderEnvironment() {
-        $def = $this->def;
-
-        $ret = '';
-
-        $ret .= $this->start('table');
-        $ret .= $this->element('caption', 'Environment');
-
-        $ret .= $this->row('Parent of fragment', $def->info_parent);
-        $ret .= $this->renderChildren($def->info_parent_def->child);
-        $ret .= $this->row('Block wrap name', $def->info_block_wrapper);
-
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', 'Global attributes');
-            $ret .= $this->element('td', $this->listifyAttr($def->info_global_attr),0,0);
-        $ret .= $this->end('tr');
-
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', 'Tag transforms');
-            $list = array();
-            foreach ($def->info_tag_transform as $old => $new) {
-                $new = $this->getClass($new, 'TagTransform_');
-                $list[] = "<$old> with $new";
-            }
-            $ret .= $this->element('td', $this->listify($list));
-        $ret .= $this->end('tr');
-
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', 'Pre-AttrTransform');
-            $ret .= $this->element('td', $this->listifyObjectList($def->info_attr_transform_pre));
-        $ret .= $this->end('tr');
-
-        $ret .= $this->start('tr');
-            $ret .= $this->element('th', 'Post-AttrTransform');
-            $ret .= $this->element('td', $this->listifyObjectList($def->info_attr_transform_post));
-        $ret .= $this->end('tr');
-
-        $ret .= $this->end('table');
-        return $ret;
-    }
-
-    /**
-     * Renders the Content Sets table
-     */
-    protected function renderContentSets() {
-        $ret = '';
-        $ret .= $this->start('table');
-        $ret .= $this->element('caption', 'Content Sets');
-        foreach ($this->def->info_content_sets as $name => $lookup) {
-            $ret .= $this->heavyHeader($name);
-            $ret .= $this->start('tr');
-            $ret .= $this->element('td', $this->listifyTagLookup($lookup));
-            $ret .= $this->end('tr');
-        }
-        $ret .= $this->end('table');
-        return $ret;
-    }
-
-    /**
-     * Renders the Elements ($info) table
-     */
-    protected function renderInfo() {
-        $ret = '';
-        $ret .= $this->start('table');
-        $ret .= $this->element('caption', 'Elements ($info)');
-        ksort($this->def->info);
-        $ret .= $this->heavyHeader('Allowed tags', 2);
-        $ret .= $this->start('tr');
-        $ret .= $this->element('td', $this->listifyTagLookup($this->def->info), array('colspan' => 2));
-        $ret .= $this->end('tr');
-        foreach ($this->def->info as $name => $def) {
-            $ret .= $this->start('tr');
-                $ret .= $this->element('th', "<$name>", array('class'=>'heavy', 'colspan' => 2));
-            $ret .= $this->end('tr');
-            $ret .= $this->start('tr');
-                $ret .= $this->element('th', 'Inline content');
-                $ret .= $this->element('td', $def->descendants_are_inline ? 'Yes' : 'No');
-            $ret .= $this->end('tr');
-            if (!empty($def->excludes)) {
-                $ret .= $this->start('tr');
-                    $ret .= $this->element('th', 'Excludes');
-                    $ret .= $this->element('td', $this->listifyTagLookup($def->excludes));
-                $ret .= $this->end('tr');
-            }
-            if (!empty($def->attr_transform_pre)) {
-                $ret .= $this->start('tr');
-                    $ret .= $this->element('th', 'Pre-AttrTransform');
-                    $ret .= $this->element('td', $this->listifyObjectList($def->attr_transform_pre));
-                $ret .= $this->end('tr');
-            }
-            if (!empty($def->attr_transform_post)) {
-                $ret .= $this->start('tr');
-                    $ret .= $this->element('th', 'Post-AttrTransform');
-                    $ret .= $this->element('td', $this->listifyObjectList($def->attr_transform_post));
-                $ret .= $this->end('tr');
-            }
-            if (!empty($def->auto_close)) {
-                $ret .= $this->start('tr');
-                    $ret .= $this->element('th', 'Auto closed by');
-                    $ret .= $this->element('td', $this->listifyTagLookup($def->auto_close));
-                $ret .= $this->end('tr');
-            }
-            $ret .= $this->start('tr');
-                $ret .= $this->element('th', 'Allowed attributes');
-                $ret .= $this->element('td',$this->listifyAttr($def->attr), array(), 0);
-            $ret .= $this->end('tr');
-
-            if (!empty($def->required_attr)) {
-                $ret .= $this->row('Required attributes', $this->listify($def->required_attr));
-            }
-
-            $ret .= $this->renderChildren($def->child);
-        }
-        $ret .= $this->end('table');
-        return $ret;
-    }
-
-    /**
-     * Renders a row describing the allowed children of an element
-     * @param $def HTMLPurifier_ChildDef of pertinent element
-     */
-    protected function renderChildren($def) {
-        $context = new HTMLPurifier_Context();
-        $ret = '';
-        $ret .= $this->start('tr');
-            $elements = array();
-            $attr = array();
-            if (isset($def->elements)) {
-                if ($def->type == 'strictblockquote') {
-                    $def->validateChildren(array(), $this->config, $context);
-                }
-                $elements = $def->elements;
-            }
-            if ($def->type == 'chameleon') {
-                $attr['rowspan'] = 2;
-            } elseif ($def->type == 'empty') {
-                $elements = array();
-            } elseif ($def->type == 'table') {
-                $elements = array_flip(array('col', 'caption', 'colgroup', 'thead',
-                    'tfoot', 'tbody', 'tr'));
-            }
-            $ret .= $this->element('th', 'Allowed children', $attr);
-
-            if ($def->type == 'chameleon') {
-
-                $ret .= $this->element('td',
-                    '<em>Block</em>: ' .
-                    $this->escape($this->listifyTagLookup($def->block->elements)),0,0);
-                $ret .= $this->end('tr');
-                $ret .= $this->start('tr');
-                $ret .= $this->element('td',
-                    '<em>Inline</em>: ' .
-                    $this->escape($this->listifyTagLookup($def->inline->elements)),0,0);
-
-            } elseif ($def->type == 'custom') {
-
-                $ret .= $this->element('td', '<em>'.ucfirst($def->type).'</em>: ' .
-                    $def->dtd_regex);
-
-            } else {
-                $ret .= $this->element('td',
-                    '<em>'.ucfirst($def->type).'</em>: ' .
-                    $this->escape($this->listifyTagLookup($elements)),0,0);
-            }
-        $ret .= $this->end('tr');
-        return $ret;
-    }
-
-    /**
-     * Listifies a tag lookup table.
-     * @param $array Tag lookup array in form of array('tagname' => true)
-     */
-    protected function listifyTagLookup($array) {
-        ksort($array);
-        $list = array();
-        foreach ($array as $name => $discard) {
-            if ($name !== '#PCDATA' && !isset($this->def->info[$name])) continue;
-            $list[] = $name;
-        }
-        return $this->listify($list);
-    }
-
-    /**
-     * Listifies a list of objects by retrieving class names and internal state
-     * @param $array List of objects
-     * @todo Also add information about internal state
-     */
-    protected function listifyObjectList($array) {
-        ksort($array);
-        $list = array();
-        foreach ($array as $discard => $obj) {
-            $list[] = $this->getClass($obj, 'AttrTransform_');
-        }
-        return $this->listify($list);
-    }
-
-    /**
-     * Listifies a hash of attributes to AttrDef classes
-     * @param $array Array hash in form of array('attrname' => HTMLPurifier_AttrDef)
-     */
-    protected function listifyAttr($array) {
-        ksort($array);
-        $list = array();
-        foreach ($array as $name => $obj) {
-            if ($obj === false) continue;
-            $list[] = "$name&nbsp;=&nbsp;<i>" . $this->getClass($obj, 'AttrDef_') . '</i>';
-        }
-        return $this->listify($list);
-    }
-
-    /**
-     * Creates a heavy header row
-     */
-    protected function heavyHeader($text, $num = 1) {
-        $ret = '';
-        $ret .= $this->start('tr');
-        $ret .= $this->element('th', $text, array('colspan' => $num, 'class' => 'heavy'));
-        $ret .= $this->end('tr');
-        return $ret;
-    }
+	/**
+	 * Instance of HTMLPurifier_HTMLDefinition, for easy access
+	 */
+	protected $def;
+
+	public function render($config) {
+		$ret = '';
+		$this->config =& $config;
+
+		$this->def = $config->getHTMLDefinition();
+
+		$ret .= $this->start('div', array('class' => 'HTMLPurifier_Printer'));
+
+		$ret .= $this->renderDoctype();
+		$ret .= $this->renderEnvironment();
+		$ret .= $this->renderContentSets();
+		$ret .= $this->renderInfo();
+
+		$ret .= $this->end('div');
+
+		return $ret;
+	}
+
+	/**
+	 * Renders the Doctype table
+	 */
+	protected function renderDoctype() {
+		$doctype = $this->def->doctype;
+		$ret = '';
+		$ret .= $this->start('table');
+		$ret .= $this->element('caption', 'Doctype');
+		$ret .= $this->row('Name', $doctype->name);
+		$ret .= $this->row('XML', $doctype->xml ? 'Yes' : 'No');
+		$ret .= $this->row('Default Modules', implode($doctype->modules, ', '));
+		$ret .= $this->row('Default Tidy Modules', implode($doctype->tidyModules, ', '));
+		$ret .= $this->end('table');
+		return $ret;
+	}
+
+
+	/**
+	 * Renders environment table, which is miscellaneous info
+	 */
+	protected function renderEnvironment() {
+		$def = $this->def;
+
+		$ret = '';
+
+		$ret .= $this->start('table');
+		$ret .= $this->element('caption', 'Environment');
+
+		$ret .= $this->row('Parent of fragment', $def->info_parent);
+		$ret .= $this->renderChildren($def->info_parent_def->child);
+		$ret .= $this->row('Block wrap name', $def->info_block_wrapper);
+
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', 'Global attributes');
+			$ret .= $this->element('td', $this->listifyAttr($def->info_global_attr),0,0);
+		$ret .= $this->end('tr');
+
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', 'Tag transforms');
+			$list = array();
+			foreach ($def->info_tag_transform as $old => $new) {
+				$new = $this->getClass($new, 'TagTransform_');
+				$list[] = "<$old> with $new";
+			}
+			$ret .= $this->element('td', $this->listify($list));
+		$ret .= $this->end('tr');
+
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', 'Pre-AttrTransform');
+			$ret .= $this->element('td', $this->listifyObjectList($def->info_attr_transform_pre));
+		$ret .= $this->end('tr');
+
+		$ret .= $this->start('tr');
+			$ret .= $this->element('th', 'Post-AttrTransform');
+			$ret .= $this->element('td', $this->listifyObjectList($def->info_attr_transform_post));
+		$ret .= $this->end('tr');
+
+		$ret .= $this->end('table');
+		return $ret;
+	}
+
+	/**
+	 * Renders the Content Sets table
+	 */
+	protected function renderContentSets() {
+		$ret = '';
+		$ret .= $this->start('table');
+		$ret .= $this->element('caption', 'Content Sets');
+		foreach ($this->def->info_content_sets as $name => $lookup) {
+			$ret .= $this->heavyHeader($name);
+			$ret .= $this->start('tr');
+			$ret .= $this->element('td', $this->listifyTagLookup($lookup));
+			$ret .= $this->end('tr');
+		}
+		$ret .= $this->end('table');
+		return $ret;
+	}
+
+	/**
+	 * Renders the Elements ($info) table
+	 */
+	protected function renderInfo() {
+		$ret = '';
+		$ret .= $this->start('table');
+		$ret .= $this->element('caption', 'Elements ($info)');
+		ksort($this->def->info);
+		$ret .= $this->heavyHeader('Allowed tags', 2);
+		$ret .= $this->start('tr');
+		$ret .= $this->element('td', $this->listifyTagLookup($this->def->info), array('colspan' => 2));
+		$ret .= $this->end('tr');
+		foreach ($this->def->info as $name => $def) {
+			$ret .= $this->start('tr');
+				$ret .= $this->element('th', "<$name>", array('class'=>'heavy', 'colspan' => 2));
+			$ret .= $this->end('tr');
+			$ret .= $this->start('tr');
+				$ret .= $this->element('th', 'Inline content');
+				$ret .= $this->element('td', $def->descendants_are_inline ? 'Yes' : 'No');
+			$ret .= $this->end('tr');
+			if (!empty($def->excludes)) {
+				$ret .= $this->start('tr');
+					$ret .= $this->element('th', 'Excludes');
+					$ret .= $this->element('td', $this->listifyTagLookup($def->excludes));
+				$ret .= $this->end('tr');
+			}
+			if (!empty($def->attr_transform_pre)) {
+				$ret .= $this->start('tr');
+					$ret .= $this->element('th', 'Pre-AttrTransform');
+					$ret .= $this->element('td', $this->listifyObjectList($def->attr_transform_pre));
+				$ret .= $this->end('tr');
+			}
+			if (!empty($def->attr_transform_post)) {
+				$ret .= $this->start('tr');
+					$ret .= $this->element('th', 'Post-AttrTransform');
+					$ret .= $this->element('td', $this->listifyObjectList($def->attr_transform_post));
+				$ret .= $this->end('tr');
+			}
+			if (!empty($def->auto_close)) {
+				$ret .= $this->start('tr');
+					$ret .= $this->element('th', 'Auto closed by');
+					$ret .= $this->element('td', $this->listifyTagLookup($def->auto_close));
+				$ret .= $this->end('tr');
+			}
+			$ret .= $this->start('tr');
+				$ret .= $this->element('th', 'Allowed attributes');
+				$ret .= $this->element('td',$this->listifyAttr($def->attr), array(), 0);
+			$ret .= $this->end('tr');
+
+			if (!empty($def->required_attr)) {
+				$ret .= $this->row('Required attributes', $this->listify($def->required_attr));
+			}
+
+			$ret .= $this->renderChildren($def->child);
+		}
+		$ret .= $this->end('table');
+		return $ret;
+	}
+
+	/**
+	 * Renders a row describing the allowed children of an element
+	 * @param $def HTMLPurifier_ChildDef of pertinent element
+	 */
+	protected function renderChildren($def) {
+		$context = new HTMLPurifier_Context();
+		$ret = '';
+		$ret .= $this->start('tr');
+			$elements = array();
+			$attr = array();
+			if (isset($def->elements)) {
+				if ($def->type == 'strictblockquote') {
+					$def->validateChildren(array(), $this->config, $context);
+				}
+				$elements = $def->elements;
+			}
+			if ($def->type == 'chameleon') {
+				$attr['rowspan'] = 2;
+			} elseif ($def->type == 'empty') {
+				$elements = array();
+			} elseif ($def->type == 'table') {
+				$elements = array_flip(array('col', 'caption', 'colgroup', 'thead',
+					'tfoot', 'tbody', 'tr'));
+			}
+			$ret .= $this->element('th', 'Allowed children', $attr);
+
+			if ($def->type == 'chameleon') {
+
+				$ret .= $this->element('td',
+					'<em>Block</em>: ' .
+					$this->escape($this->listifyTagLookup($def->block->elements)),0,0);
+				$ret .= $this->end('tr');
+				$ret .= $this->start('tr');
+				$ret .= $this->element('td',
+					'<em>Inline</em>: ' .
+					$this->escape($this->listifyTagLookup($def->inline->elements)),0,0);
+
+			} elseif ($def->type == 'custom') {
+
+				$ret .= $this->element('td', '<em>'.ucfirst($def->type).'</em>: ' .
+					$def->dtd_regex);
+
+			} else {
+				$ret .= $this->element('td',
+					'<em>'.ucfirst($def->type).'</em>: ' .
+					$this->escape($this->listifyTagLookup($elements)),0,0);
+			}
+		$ret .= $this->end('tr');
+		return $ret;
+	}
+
+	/**
+	 * Listifies a tag lookup table.
+	 * @param $array Tag lookup array in form of array('tagname' => true)
+	 */
+	protected function listifyTagLookup($array) {
+		ksort($array);
+		$list = array();
+		foreach ($array as $name => $discard) {
+			if ($name !== '#PCDATA' && !isset($this->def->info[$name])) continue;
+			$list[] = $name;
+		}
+		return $this->listify($list);
+	}
+
+	/**
+	 * Listifies a list of objects by retrieving class names and internal state
+	 * @param $array List of objects
+	 * @todo Also add information about internal state
+	 */
+	protected function listifyObjectList($array) {
+		ksort($array);
+		$list = array();
+		foreach ($array as $discard => $obj) {
+			$list[] = $this->getClass($obj, 'AttrTransform_');
+		}
+		return $this->listify($list);
+	}
+
+	/**
+	 * Listifies a hash of attributes to AttrDef classes
+	 * @param $array Array hash in form of array('attrname' => HTMLPurifier_AttrDef)
+	 */
+	protected function listifyAttr($array) {
+		ksort($array);
+		$list = array();
+		foreach ($array as $name => $obj) {
+			if ($obj === false) continue;
+			$list[] = "$name&nbsp;=&nbsp;<i>" . $this->getClass($obj, 'AttrDef_') . '</i>';
+		}
+		return $this->listify($list);
+	}
+
+	/**
+	 * Creates a heavy header row
+	 */
+	protected function heavyHeader($text, $num = 1) {
+		$ret = '';
+		$ret .= $this->start('tr');
+		$ret .= $this->element('th', $text, array('colspan' => $num, 'class' => 'heavy'));
+		$ret .= $this->end('tr');
+		return $ret;
+	}
 
 }
 

Braces +6 added lines, -2 removed lines

@@ -222,7 +222,9 @@ 
         ksort($array);
         $list = array();
         foreach ($array as $name => $discard) {
-            if ($name !== '#PCDATA' && !isset($this->def->info[$name])) continue;
+            if ($name !== '#PCDATA' && !isset($this->def->info[$name])) {
+            	continue;
+            }
             $list[] = $name;
         }
         return $this->listify($list);
@@ -250,7 +252,9 @@ 
         ksort($array);
         $list = array();
         foreach ($array as $name => $obj) {
-            if ($obj === false) continue;
+            if ($obj === false) {
+            	continue;
+            }
             $list[] = "$name&nbsp;=&nbsp;<i>" . $this->getClass($obj, 'AttrDef_') . '</i>';
         }
         return $this->listify($list);

Spacing +11 added lines, -11 removed lines

@@ -10,7 +10,7 @@ 
 
     public function render($config) {
         $ret = '';
-        $this->config =& $config;
+        $this->config = & $config;
 
         $this->def = $config->getHTMLDefinition();
 
@@ -60,7 +60,7 @@ 
 
         $ret .= $this->start('tr');
             $ret .= $this->element('th', 'Global attributes');
-            $ret .= $this->element('td', $this->listifyAttr($def->info_global_attr),0,0);
+            $ret .= $this->element('td', $this->listifyAttr($def->info_global_attr), 0, 0);
         $ret .= $this->end('tr');
 
         $ret .= $this->start('tr');
@@ -150,7 +150,7 @@ 
             }
             $ret .= $this->start('tr');
                 $ret .= $this->element('th', 'Allowed attributes');
-                $ret .= $this->element('td',$this->listifyAttr($def->attr), array(), 0);
+                $ret .= $this->element('td', $this->listifyAttr($def->attr), array(), 0);
             $ret .= $this->end('tr');
 
             if (!empty($def->required_attr)) {
@@ -192,23 +192,23 @@ 
             if ($def->type == 'chameleon') {
 
                 $ret .= $this->element('td',
-                    '<em>Block</em>: ' .
-                    $this->escape($this->listifyTagLookup($def->block->elements)),0,0);
+                    '<em>Block</em>: '.
+                    $this->escape($this->listifyTagLookup($def->block->elements)), 0, 0);
                 $ret .= $this->end('tr');
                 $ret .= $this->start('tr');
                 $ret .= $this->element('td',
-                    '<em>Inline</em>: ' .
-                    $this->escape($this->listifyTagLookup($def->inline->elements)),0,0);
+                    '<em>Inline</em>: '.
+                    $this->escape($this->listifyTagLookup($def->inline->elements)), 0, 0);
 
             } elseif ($def->type == 'custom') {
 
-                $ret .= $this->element('td', '<em>'.ucfirst($def->type).'</em>: ' .
+                $ret .= $this->element('td', '<em>'.ucfirst($def->type).'</em>: '.
                     $def->dtd_regex);
 
             } else {
                 $ret .= $this->element('td',
-                    '<em>'.ucfirst($def->type).'</em>: ' .
-                    $this->escape($this->listifyTagLookup($elements)),0,0);
+                    '<em>'.ucfirst($def->type).'</em>: '.
+                    $this->escape($this->listifyTagLookup($elements)), 0, 0);
             }
         $ret .= $this->end('tr');
         return $ret;
@@ -251,7 +251,7 @@ 
         $list = array();
         foreach ($array as $name => $obj) {
             if ($obj === false) continue;
-            $list[] = "$name&nbsp;=&nbsp;<i>" . $this->getClass($obj, 'AttrDef_') . '</i>';
+            $list[] = "$name&nbsp;=&nbsp;<i>".$this->getClass($obj, 'AttrDef_').'</i>';
         }
         return $this->listify($list);
     }

classes/security/htmlpurifier/library/HTMLPurifier/PropertyList.php

Indentation +66 added lines, -66 removed lines

@@ -5,82 +5,82 @@
  */
 class HTMLPurifier_PropertyList
 {
-    /**
-     * Internal data-structure for properties
-     */
-    protected $data = array();
+	/**
+	 * Internal data-structure for properties
+	 */
+	protected $data = array();
 
-    /**
-     * Parent plist
-     */
-    protected $parent;
+	/**
+	 * Parent plist
+	 */
+	protected $parent;
 
-    protected $cache;
+	protected $cache;
 
-    public function __construct($parent = null) {
-        $this->parent = $parent;
-    }
+	public function __construct($parent = null) {
+		$this->parent = $parent;
+	}
 
-    /**
-     * Recursively retrieves the value for a key
-     */
-    public function get($name) {
-        if ($this->has($name)) return $this->data[$name];
-        // possible performance bottleneck, convert to iterative if necessary
-        if ($this->parent) return $this->parent->get($name);
-        throw new HTMLPurifier_Exception("Key '$name' not found");
-    }
+	/**
+	 * Recursively retrieves the value for a key
+	 */
+	public function get($name) {
+		if ($this->has($name)) return $this->data[$name];
+		// possible performance bottleneck, convert to iterative if necessary
+		if ($this->parent) return $this->parent->get($name);
+		throw new HTMLPurifier_Exception("Key '$name' not found");
+	}
 
-    /**
-     * Sets the value of a key, for this plist
-     */
-    public function set($name, $value) {
-        $this->data[$name] = $value;
-    }
+	/**
+	 * Sets the value of a key, for this plist
+	 */
+	public function set($name, $value) {
+		$this->data[$name] = $value;
+	}
 
-    /**
-     * Returns true if a given key exists
-     */
-    public function has($name) {
-        return array_key_exists($name, $this->data);
-    }
+	/**
+	 * Returns true if a given key exists
+	 */
+	public function has($name) {
+		return array_key_exists($name, $this->data);
+	}
 
-    /**
-     * Resets a value to the value of it's parent, usually the default. If
-     * no value is specified, the entire plist is reset.
-     */
-    public function reset($name = null) {
-        if ($name == null) $this->data = array();
-        else unset($this->data[$name]);
-    }
+	/**
+	 * Resets a value to the value of it's parent, usually the default. If
+	 * no value is specified, the entire plist is reset.
+	 */
+	public function reset($name = null) {
+		if ($name == null) $this->data = array();
+		else unset($this->data[$name]);
+	}
 
-    /**
-     * Squashes this property list and all of its property lists into a single
-     * array, and returns the array. This value is cached by default.
-     * @param $force If true, ignores the cache and regenerates the array.
-     */
-    public function squash($force = false) {
-        if ($this->cache !== null && !$force) return $this->cache;
-        if ($this->parent) {
-            return $this->cache = array_merge($this->parent->squash($force), $this->data);
-        } else {
-            return $this->cache = $this->data;
-        }
-    }
+	/**
+	 * Squashes this property list and all of its property lists into a single
+	 * array, and returns the array. This value is cached by default.
+	 * @param $force If true, ignores the cache and regenerates the array.
+	 */
+	public function squash($force = false) {
+		if ($this->cache !== null && !$force) return $this->cache;
+		if ($this->parent) {
+			return $this->cache = array_merge($this->parent->squash($force), $this->data);
+		} else {
+			return $this->cache = $this->data;
+		}
+	}
 
-    /**
-     * Returns the parent plist.
-     */
-    public function getParent() {
-        return $this->parent;
-    }
+	/**
+	 * Returns the parent plist.
+	 */
+	public function getParent() {
+		return $this->parent;
+	}
 
-    /**
-     * Sets the parent plist.
-     */
-    public function setParent($plist) {
-        $this->parent = $plist;
-    }
+	/**
+	 * Sets the parent plist.
+	 */
+	public function setParent($plist) {
+		$this->parent = $plist;
+	}
 }
 
 // vim: et sw=4 sts=4

Braces +14 added lines, -5 removed lines

@@ -25,9 +25,13 @@ 
      * Recursively retrieves the value for a key
      */
     public function get($name) {
-        if ($this->has($name)) return $this->data[$name];
+        if ($this->has($name)) {
+        	return $this->data[$name];
+        }
         // possible performance bottleneck, convert to iterative if necessary
-        if ($this->parent) return $this->parent->get($name);
+        if ($this->parent) {
+        	return $this->parent->get($name);
+        }
         throw new HTMLPurifier_Exception("Key '$name' not found");
     }
 
@@ -50,8 +54,11 @@ 
      * no value is specified, the entire plist is reset.
      */
     public function reset($name = null) {
-        if ($name == null) $this->data = array();
-        else unset($this->data[$name]);
+        if ($name == null) {
+        	$this->data = array();
+        } else {
+        	unset($this->data[$name]);
+        }
     }
 
     /**
@@ -60,7 +67,9 @@ 
      * @param $force If true, ignores the cache and regenerates the array.
      */
     public function squash($force = false) {
-        if ($this->cache !== null && !$force) return $this->cache;
+        if ($this->cache !== null && !$force) {
+        	return $this->cache;
+        }
         if ($this->parent) {
             return $this->cache = array_merge($this->parent->squash($force), $this->data);
         } else {

classes/security/htmlpurifier/library/HTMLPurifier/PropertyListIterator.php

Indentation +18 added lines, -18 removed lines

@@ -6,26 +6,26 @@
 class HTMLPurifier_PropertyListIterator extends FilterIterator
 {
 
-    protected $l;
-    protected $filter;
+	protected $l;
+	protected $filter;
 
-    /**
-     * @param $data Array of data to iterate over
-     * @param $filter Optional prefix to only allow values of
-     */
-    public function __construct(Iterator $iterator, $filter = null) {
-        parent::__construct($iterator);
-        $this->l = strlen($filter);
-        $this->filter = $filter;
-    }
+	/**
+	 * @param $data Array of data to iterate over
+	 * @param $filter Optional prefix to only allow values of
+	 */
+	public function __construct(Iterator $iterator, $filter = null) {
+		parent::__construct($iterator);
+		$this->l = strlen($filter);
+		$this->filter = $filter;
+	}
 
-    public function accept() {
-        $key = $this->getInnerIterator()->key();
-        if( strncmp($key, $this->filter, $this->l) !== 0 ) {
-            return false;
-        }
-        return true;
-    }
+	public function accept() {
+		$key = $this->getInnerIterator()->key();
+		if( strncmp($key, $this->filter, $this->l) !== 0 ) {
+			return false;
+		}
+		return true;
+	}
 
 }
 

Spacing +1 added lines, -1 removed lines

@@ -21,7 +21,7 @@
 
     public function accept() {
         $key = $this->getInnerIterator()->key();
-        if( strncmp($key, $this->filter, $this->l) !== 0 ) {
+        if (strncmp($key, $this->filter, $this->l) !== 0) {
             return false;
         }
         return true;

classes/security/htmlpurifier/library/HTMLPurifier/Strategy.php

Indentation +8 added lines, -8 removed lines

@@ -12,14 +12,14 @@
 abstract class HTMLPurifier_Strategy
 {
 
-    /**
-     * Executes the strategy on the tokens.
-     *
-     * @param $tokens Array of HTMLPurifier_Token objects to be operated on.
-     * @param $config Configuration options
-     * @returns Processed array of token objects.
-     */
-    abstract public function execute($tokens, $config, $context);
+	/**
+	 * Executes the strategy on the tokens.
+	 *
+	 * @param $tokens Array of HTMLPurifier_Token objects to be operated on.
+	 * @param $config Configuration options
+	 * @returns Processed array of token objects.
+	 */
+	abstract public function execute($tokens, $config, $context);
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/Strategy/Composite.php

Indentation +10 added lines, -10 removed lines

@@ -6,17 +6,17 @@
 abstract class HTMLPurifier_Strategy_Composite extends HTMLPurifier_Strategy
 {
 
-    /**
-     * List of strategies to run tokens through.
-     */
-    protected $strategies = array();
+	/**
+	 * List of strategies to run tokens through.
+	 */
+	protected $strategies = array();
 
-    public function execute($tokens, $config, $context) {
-        foreach ($this->strategies as $strategy) {
-            $tokens = $strategy->execute($tokens, $config, $context);
-        }
-        return $tokens;
-    }
+	public function execute($tokens, $config, $context) {
+		foreach ($this->strategies as $strategy) {
+			$tokens = $strategy->execute($tokens, $config, $context);
+		}
+		return $tokens;
+	}
 
 }