xpressengine / xe-core

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/URI.php

Indentation +47 added lines, -47 removed lines

@@ -7,70 +7,70 @@
 class HTMLPurifier_AttrDef_URI extends HTMLPurifier_AttrDef
 {
 
-    protected $parser;
-    protected $embedsResource;
+	protected $parser;
+	protected $embedsResource;
 
-    /**
-     * @param $embeds_resource_resource Does the URI here result in an extra HTTP request?
-     */
-    public function __construct($embeds_resource = false) {
-        $this->parser = new HTMLPurifier_URIParser();
-        $this->embedsResource = (bool) $embeds_resource;
-    }
+	/**
+	 * @param $embeds_resource_resource Does the URI here result in an extra HTTP request?
+	 */
+	public function __construct($embeds_resource = false) {
+		$this->parser = new HTMLPurifier_URIParser();
+		$this->embedsResource = (bool) $embeds_resource;
+	}
 
-    public function make($string) {
-        $embeds = ($string === 'embedded');
-        return new HTMLPurifier_AttrDef_URI($embeds);
-    }
+	public function make($string) {
+		$embeds = ($string === 'embedded');
+		return new HTMLPurifier_AttrDef_URI($embeds);
+	}
 
-    public function validate($uri, $config, $context) {
+	public function validate($uri, $config, $context) {
 
-        if ($config->get('URI.Disable')) return false;
+		if ($config->get('URI.Disable')) return false;
 
-        $uri = $this->parseCDATA($uri);
+		$uri = $this->parseCDATA($uri);
 
-        // parse the URI
-        $uri = $this->parser->parse($uri);
-        if ($uri === false) return false;
+		// parse the URI
+		$uri = $this->parser->parse($uri);
+		if ($uri === false) return false;
 
-        // add embedded flag to context for validators
-        $context->register('EmbeddedURI', $this->embedsResource);
+		// add embedded flag to context for validators
+		$context->register('EmbeddedURI', $this->embedsResource);
 
-        $ok = false;
-        do {
+		$ok = false;
+		do {
 
-            // generic validation
-            $result = $uri->validate($config, $context);
-            if (!$result) break;
+			// generic validation
+			$result = $uri->validate($config, $context);
+			if (!$result) break;
 
-            // chained filtering
-            $uri_def = $config->getDefinition('URI');
-            $result = $uri_def->filter($uri, $config, $context);
-            if (!$result) break;
+			// chained filtering
+			$uri_def = $config->getDefinition('URI');
+			$result = $uri_def->filter($uri, $config, $context);
+			if (!$result) break;
 
-            // scheme-specific validation
-            $scheme_obj = $uri->getSchemeObj($config, $context);
-            if (!$scheme_obj) break;
-            if ($this->embedsResource && !$scheme_obj->browsable) break;
-            $result = $scheme_obj->validate($uri, $config, $context);
-            if (!$result) break;
+			// scheme-specific validation
+			$scheme_obj = $uri->getSchemeObj($config, $context);
+			if (!$scheme_obj) break;
+			if ($this->embedsResource && !$scheme_obj->browsable) break;
+			$result = $scheme_obj->validate($uri, $config, $context);
+			if (!$result) break;
 
-            // Post chained filtering
-            $result = $uri_def->postFilter($uri, $config, $context);
-            if (!$result) break;
+			// Post chained filtering
+			$result = $uri_def->postFilter($uri, $config, $context);
+			if (!$result) break;
 
-            // survived gauntlet
-            $ok = true;
+			// survived gauntlet
+			$ok = true;
 
-        } while (false);
+		} while (false);
 
-        $context->destroy('EmbeddedURI');
-        if (!$ok) return false;
+		$context->destroy('EmbeddedURI');
+		if (!$ok) return false;
 
-        // back to string
-        return $uri->toString();
+		// back to string
+		return $uri->toString();
 
-    }
+	}
 
 }
 

Braces +27 added lines, -9 removed lines

@@ -25,13 +25,17 @@ 
 
     public function validate($uri, $config, $context) {
 
-        if ($config->get('URI.Disable')) return false;
+        if ($config->get('URI.Disable')) {
+        	return false;
+        }
 
         $uri = $this->parseCDATA($uri);
 
         // parse the URI
         $uri = $this->parser->parse($uri);
-        if ($uri === false) return false;
+        if ($uri === false) {
+        	return false;
+        }
 
         // add embedded flag to context for validators
         $context->register('EmbeddedURI', $this->embedsResource);
@@ -41,23 +45,35 @@ 
 
             // generic validation
             $result = $uri->validate($config, $context);
-            if (!$result) break;
+            if (!$result) {
+            	break;
+            }
 
             // chained filtering
             $uri_def = $config->getDefinition('URI');
             $result = $uri_def->filter($uri, $config, $context);
-            if (!$result) break;
+            if (!$result) {
+            	break;
+            }
 
             // scheme-specific validation
             $scheme_obj = $uri->getSchemeObj($config, $context);
-            if (!$scheme_obj) break;
-            if ($this->embedsResource && !$scheme_obj->browsable) break;
+            if (!$scheme_obj) {
+            	break;
+            }
+            if ($this->embedsResource && !$scheme_obj->browsable) {
+            	break;
+            }
             $result = $scheme_obj->validate($uri, $config, $context);
-            if (!$result) break;
+            if (!$result) {
+            	break;
+            }
 
             // Post chained filtering
             $result = $uri_def->postFilter($uri, $config, $context);
-            if (!$result) break;
+            if (!$result) {
+            	break;
+            }
 
             // survived gauntlet
             $ok = true;
@@ -65,7 +81,9 @@ 
         } while (false);
 
         $context->destroy('EmbeddedURI');
-        if (!$ok) return false;
+        if (!$ok) {
+        	return false;
+        }
 
         // back to string
         return $uri->toString();

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Email.php

Indentation +6 added lines, -6 removed lines

@@ -3,12 +3,12 @@
 abstract class HTMLPurifier_AttrDef_URI_Email extends HTMLPurifier_AttrDef
 {
 
-    /**
-     * Unpacks a mailbox into its display-name and address
-     */
-    function unpack($string) {
-        // needs to be implemented
-    }
+	/**
+	 * Unpacks a mailbox into its display-name and address
+	 */
+	function unpack($string) {
+		// needs to be implemented
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Email/SimpleCheck.php

Indentation +8 added lines, -8 removed lines

@@ -7,14 +7,14 @@
 class HTMLPurifier_AttrDef_URI_Email_SimpleCheck extends HTMLPurifier_AttrDef_URI_Email
 {
 
-    public function validate($string, $config, $context) {
-        // no support for named mailboxes i.e. "Bob <bob@example.com>"
-        // that needs more percent encoding to be done
-        if ($string == '') return false;
-        $string = trim($string);
-        $result = preg_match('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i', $string);
-        return $result ? $string : false;
-    }
+	public function validate($string, $config, $context) {
+		// no support for named mailboxes i.e. "Bob <bob@example.com>"
+		// that needs more percent encoding to be done
+		if ($string == '') return false;
+		$string = trim($string);
+		$result = preg_match('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i', $string);
+		return $result ? $string : false;
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -10,7 +10,9 @@
     public function validate($string, $config, $context) {
         // no support for named mailboxes i.e. "Bob <bob@example.com>"
         // that needs more percent encoding to be done
-        if ($string == '') return false;
+        if ($string == '') {
+        	return false;
+        }
         $string = trim($string);
         $result = preg_match('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i', $string);
         return $result ? $string : false;

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Host.php

Indentation +79 added lines, -79 removed lines

@@ -6,95 +6,95 @@
 class HTMLPurifier_AttrDef_URI_Host extends HTMLPurifier_AttrDef
 {
 
-    /**
-     * Instance of HTMLPurifier_AttrDef_URI_IPv4 sub-validator
-     */
-    protected $ipv4;
+	/**
+	 * Instance of HTMLPurifier_AttrDef_URI_IPv4 sub-validator
+	 */
+	protected $ipv4;
 
-    /**
-     * Instance of HTMLPurifier_AttrDef_URI_IPv6 sub-validator
-     */
-    protected $ipv6;
+	/**
+	 * Instance of HTMLPurifier_AttrDef_URI_IPv6 sub-validator
+	 */
+	protected $ipv6;
 
-    public function __construct() {
-        $this->ipv4 = new HTMLPurifier_AttrDef_URI_IPv4();
-        $this->ipv6 = new HTMLPurifier_AttrDef_URI_IPv6();
-    }
+	public function __construct() {
+		$this->ipv4 = new HTMLPurifier_AttrDef_URI_IPv4();
+		$this->ipv6 = new HTMLPurifier_AttrDef_URI_IPv6();
+	}
 
-    public function validate($string, $config, $context) {
-        $length = strlen($string);
-        // empty hostname is OK; it's usually semantically equivalent:
-        // the default host as defined by a URI scheme is used:
-        //
-        //      If the URI scheme defines a default for host, then that
-        //      default applies when the host subcomponent is undefined
-        //      or when the registered name is empty (zero length).
-        if ($string === '') return '';
-        if ($length > 1 && $string[0] === '[' && $string[$length-1] === ']') {
-            //IPv6
-            $ip = substr($string, 1, $length - 2);
-            $valid = $this->ipv6->validate($ip, $config, $context);
-            if ($valid === false) return false;
-            return '['. $valid . ']';
-        }
+	public function validate($string, $config, $context) {
+		$length = strlen($string);
+		// empty hostname is OK; it's usually semantically equivalent:
+		// the default host as defined by a URI scheme is used:
+		//
+		//      If the URI scheme defines a default for host, then that
+		//      default applies when the host subcomponent is undefined
+		//      or when the registered name is empty (zero length).
+		if ($string === '') return '';
+		if ($length > 1 && $string[0] === '[' && $string[$length-1] === ']') {
+			//IPv6
+			$ip = substr($string, 1, $length - 2);
+			$valid = $this->ipv6->validate($ip, $config, $context);
+			if ($valid === false) return false;
+			return '['. $valid . ']';
+		}
 
-        // need to do checks on unusual encodings too
-        $ipv4 = $this->ipv4->validate($string, $config, $context);
-        if ($ipv4 !== false) return $ipv4;
+		// need to do checks on unusual encodings too
+		$ipv4 = $this->ipv4->validate($string, $config, $context);
+		if ($ipv4 !== false) return $ipv4;
 
-        // A regular domain name.
+		// A regular domain name.
 
-        // This doesn't match I18N domain names, but we don't have proper IRI support,
-        // so force users to insert Punycode.
+		// This doesn't match I18N domain names, but we don't have proper IRI support,
+		// so force users to insert Punycode.
 
-        // The productions describing this are:
-        $a   = '[a-z]';     // alpha
-        $an  = '[a-z0-9]';  // alphanum
-        $and = '[a-z0-9-]'; // alphanum | "-"
-        // domainlabel = alphanum | alphanum *( alphanum | "-" ) alphanum
-        $domainlabel   = "$an($and*$an)?";
-        // toplabel    = alpha | alpha *( alphanum | "-" ) alphanum
-        $toplabel      = "$a($and*$an)?";
-        // hostname    = *( domainlabel "." ) toplabel [ "." ]
-        if (preg_match("/^($domainlabel\.)*$toplabel\.?$/i", $string)) {
-            return $string;
-        }
+		// The productions describing this are:
+		$a   = '[a-z]';     // alpha
+		$an  = '[a-z0-9]';  // alphanum
+		$and = '[a-z0-9-]'; // alphanum | "-"
+		// domainlabel = alphanum | alphanum *( alphanum | "-" ) alphanum
+		$domainlabel   = "$an($and*$an)?";
+		// toplabel    = alpha | alpha *( alphanum | "-" ) alphanum
+		$toplabel      = "$a($and*$an)?";
+		// hostname    = *( domainlabel "." ) toplabel [ "." ]
+		if (preg_match("/^($domainlabel\.)*$toplabel\.?$/i", $string)) {
+			return $string;
+		}
 
-        // If we have Net_IDNA2 support, we can support IRIs by
-        // punycoding them. (This is the most portable thing to do,
-        // since otherwise we have to assume browsers support
+		// If we have Net_IDNA2 support, we can support IRIs by
+		// punycoding them. (This is the most portable thing to do,
+		// since otherwise we have to assume browsers support
 
-        if ($config->get('Core.EnableIDNA')) {
-            $idna = new Net_IDNA2(array('encoding' => 'utf8', 'overlong' => false, 'strict' => true));
-            // we need to encode each period separately
-            $parts = explode('.', $string);
-            try {
-                $new_parts = array();
-                foreach ($parts as $part) {
-                    $encodable = false;
-                    for ($i = 0, $c = strlen($part); $i < $c; $i++) {
-                        if (ord($part[$i]) > 0x7a) {
-                            $encodable = true;
-                            break;
-                        }
-                    }
-                    if (!$encodable) {
-                        $new_parts[] = $part;
-                    } else {
-                        $new_parts[] = $idna->encode($part);
-                    }
-                }
-                $string = implode('.', $new_parts);
-                if (preg_match("/^($domainlabel\.)*$toplabel\.?$/i", $string)) {
-                    return $string;
-                }
-            } catch (Exception $e) {
-                // XXX error reporting
-            }
-        }
+		if ($config->get('Core.EnableIDNA')) {
+			$idna = new Net_IDNA2(array('encoding' => 'utf8', 'overlong' => false, 'strict' => true));
+			// we need to encode each period separately
+			$parts = explode('.', $string);
+			try {
+				$new_parts = array();
+				foreach ($parts as $part) {
+					$encodable = false;
+					for ($i = 0, $c = strlen($part); $i < $c; $i++) {
+						if (ord($part[$i]) > 0x7a) {
+							$encodable = true;
+							break;
+						}
+					}
+					if (!$encodable) {
+						$new_parts[] = $part;
+					} else {
+						$new_parts[] = $idna->encode($part);
+					}
+				}
+				$string = implode('.', $new_parts);
+				if (preg_match("/^($domainlabel\.)*$toplabel\.?$/i", $string)) {
+					return $string;
+				}
+			} catch (Exception $e) {
+				// XXX error reporting
+			}
+		}
 
-        return false;
-    }
+		return false;
+	}
 
 }
 

Braces +9 added lines, -3 removed lines

@@ -29,18 +29,24 @@
         //      If the URI scheme defines a default for host, then that
         //      default applies when the host subcomponent is undefined
         //      or when the registered name is empty (zero length).
-        if ($string === '') return '';
+        if ($string === '') {
+        	return '';
+        }
         if ($length > 1 && $string[0] === '[' && $string[$length-1] === ']') {
             //IPv6
             $ip = substr($string, 1, $length - 2);
             $valid = $this->ipv6->validate($ip, $config, $context);
-            if ($valid === false) return false;
+            if ($valid === false) {
+            	return false;
+            }
             return '['. $valid . ']';
         }
 
         // need to do checks on unusual encodings too
         $ipv4 = $this->ipv4->validate($string, $config, $context);
-        if ($ipv4 !== false) return $ipv4;
+        if ($ipv4 !== false) {
+        	return $ipv4;
+        }
 
         // A regular domain name.
 

Spacing +4 added lines, -4 removed lines

@@ -30,12 +30,12 @@ 
         //      default applies when the host subcomponent is undefined
         //      or when the registered name is empty (zero length).
         if ($string === '') return '';
-        if ($length > 1 && $string[0] === '[' && $string[$length-1] === ']') {
+        if ($length > 1 && $string[0] === '[' && $string[$length - 1] === ']') {
             //IPv6
             $ip = substr($string, 1, $length - 2);
             $valid = $this->ipv6->validate($ip, $config, $context);
             if ($valid === false) return false;
-            return '['. $valid . ']';
+            return '['.$valid.']';
         }
 
         // need to do checks on unusual encodings too
@@ -48,8 +48,8 @@ 
         // so force users to insert Punycode.
 
         // The productions describing this are:
-        $a   = '[a-z]';     // alpha
-        $an  = '[a-z0-9]';  // alphanum
+        $a   = '[a-z]'; // alpha
+        $an  = '[a-z0-9]'; // alphanum
         $and = '[a-z0-9-]'; // alphanum | "-"
         // domainlabel = alphanum | alphanum *( alphanum | "-" ) alphanum
         $domainlabel   = "$an($and*$an)?";

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/URI/IPv4.php

Indentation +20 added lines, -20 removed lines

@@ -7,32 +7,32 @@
 class HTMLPurifier_AttrDef_URI_IPv4 extends HTMLPurifier_AttrDef
 {
 
-    /**
-     * IPv4 regex, protected so that IPv6 can reuse it
-     */
-    protected $ip4;
+	/**
+	 * IPv4 regex, protected so that IPv6 can reuse it
+	 */
+	protected $ip4;
 
-    public function validate($aIP, $config, $context) {
+	public function validate($aIP, $config, $context) {
 
-        if (!$this->ip4) $this->_loadRegex();
+		if (!$this->ip4) $this->_loadRegex();
 
-        if (preg_match('#^' . $this->ip4 . '$#s', $aIP))
-        {
-                return $aIP;
-        }
+		if (preg_match('#^' . $this->ip4 . '$#s', $aIP))
+		{
+				return $aIP;
+		}
 
-        return false;
+		return false;
 
-    }
+	}
 
-    /**
-     * Lazy load function to prevent regex from being stuffed in
-     * cache.
-     */
-    protected function _loadRegex() {
-        $oct = '(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9][0-9]|[0-9])'; // 0-255
-        $this->ip4 = "(?:{$oct}\\.{$oct}\\.{$oct}\\.{$oct})";
-    }
+	/**
+	 * Lazy load function to prevent regex from being stuffed in
+	 * cache.
+	 */
+	protected function _loadRegex() {
+		$oct = '(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9][0-9]|[0-9])'; // 0-255
+		$this->ip4 = "(?:{$oct}\\.{$oct}\\.{$oct}\\.{$oct})";
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -14,7 +14,9 @@
 
     public function validate($aIP, $config, $context) {
 
-        if (!$this->ip4) $this->_loadRegex();
+        if (!$this->ip4) {
+        	$this->_loadRegex();
+        }
 
         if (preg_match('#^' . $this->ip4 . '$#s', $aIP))
         {

Spacing +1 added lines, -1 removed lines

@@ -16,7 +16,7 @@
 
         if (!$this->ip4) $this->_loadRegex();
 
-        if (preg_match('#^' . $this->ip4 . '$#s', $aIP))
+        if (preg_match('#^'.$this->ip4.'$#s', $aIP))
         {
                 return $aIP;
         }

classes/security/htmlpurifier/library/HTMLPurifier/AttrTransform.php

Indentation +31 added lines, -31 removed lines

@@ -17,39 +17,39 @@
 abstract class HTMLPurifier_AttrTransform
 {
 
-    /**
-     * Abstract: makes changes to the attributes dependent on multiple values.
-     *
-     * @param $attr Assoc array of attributes, usually from
-     *              HTMLPurifier_Token_Tag::$attr
-     * @param $config Mandatory HTMLPurifier_Config object.
-     * @param $context Mandatory HTMLPurifier_Context object
-     * @returns Processed attribute array.
-     */
-    abstract public function transform($attr, $config, $context);
+	/**
+	 * Abstract: makes changes to the attributes dependent on multiple values.
+	 *
+	 * @param $attr Assoc array of attributes, usually from
+	 *              HTMLPurifier_Token_Tag::$attr
+	 * @param $config Mandatory HTMLPurifier_Config object.
+	 * @param $context Mandatory HTMLPurifier_Context object
+	 * @returns Processed attribute array.
+	 */
+	abstract public function transform($attr, $config, $context);
 
-    /**
-     * Prepends CSS properties to the style attribute, creating the
-     * attribute if it doesn't exist.
-     * @param $attr Attribute array to process (passed by reference)
-     * @param $css CSS to prepend
-     */
-    public function prependCSS(&$attr, $css) {
-        $attr['style'] = isset($attr['style']) ? $attr['style'] : '';
-        $attr['style'] = $css . $attr['style'];
-    }
+	/**
+	 * Prepends CSS properties to the style attribute, creating the
+	 * attribute if it doesn't exist.
+	 * @param $attr Attribute array to process (passed by reference)
+	 * @param $css CSS to prepend
+	 */
+	public function prependCSS(&$attr, $css) {
+		$attr['style'] = isset($attr['style']) ? $attr['style'] : '';
+		$attr['style'] = $css . $attr['style'];
+	}
 
-    /**
-     * Retrieves and removes an attribute
-     * @param $attr Attribute array to process (passed by reference)
-     * @param $key Key of attribute to confiscate
-     */
-    public function confiscateAttr(&$attr, $key) {
-        if (!isset($attr[$key])) return null;
-        $value = $attr[$key];
-        unset($attr[$key]);
-        return $value;
-    }
+	/**
+	 * Retrieves and removes an attribute
+	 * @param $attr Attribute array to process (passed by reference)
+	 * @param $key Key of attribute to confiscate
+	 */
+	public function confiscateAttr(&$attr, $key) {
+		if (!isset($attr[$key])) return null;
+		$value = $attr[$key];
+		unset($attr[$key]);
+		return $value;
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -45,7 +45,9 @@
      * @param $key Key of attribute to confiscate
      */
     public function confiscateAttr(&$attr, $key) {
-        if (!isset($attr[$key])) return null;
+        if (!isset($attr[$key])) {
+        	return null;
+        }
         $value = $attr[$key];
         unset($attr[$key]);
         return $value;

Spacing +1 added lines, -1 removed lines

@@ -36,7 +36,7 @@
      */
     public function prependCSS(&$attr, $css) {
         $attr['style'] = isset($attr['style']) ? $attr['style'] : '';
-        $attr['style'] = $css . $attr['style'];
+        $attr['style'] = $css.$attr['style'];
     }
 
     /**

classes/security/htmlpurifier/library/HTMLPurifier/AttrTransform/Background.php

Indentation +7 added lines, -7 removed lines

@@ -5,18 +5,18 @@
  */
 class HTMLPurifier_AttrTransform_Background extends HTMLPurifier_AttrTransform {
 
-    public function transform($attr, $config, $context) {
+	public function transform($attr, $config, $context) {
 
-        if (!isset($attr['background'])) return $attr;
+		if (!isset($attr['background'])) return $attr;
 
-        $background = $this->confiscateAttr($attr, 'background');
-        // some validation should happen here
+		$background = $this->confiscateAttr($attr, 'background');
+		// some validation should happen here
 
-        $this->prependCSS($attr, "background-image:url($background);");
+		$this->prependCSS($attr, "background-image:url($background);");
 
-        return $attr;
+		return $attr;
 
-    }
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -7,7 +7,9 @@
 
     public function transform($attr, $config, $context) {
 
-        if (!isset($attr['background'])) return $attr;
+        if (!isset($attr['background'])) {
+        	return $attr;
+        }
 
         $background = $this->confiscateAttr($attr, 'background');
         // some validation should happen here

classes/security/htmlpurifier/library/HTMLPurifier/AttrTransform/BdoDir.php

Indentation +5 added lines, -5 removed lines

@@ -8,11 +8,11 @@
 class HTMLPurifier_AttrTransform_BdoDir extends HTMLPurifier_AttrTransform
 {
 
-    public function transform($attr, $config, $context) {
-        if (isset($attr['dir'])) return $attr;
-        $attr['dir'] = $config->get('Attr.DefaultTextDir');
-        return $attr;
-    }
+	public function transform($attr, $config, $context) {
+		if (isset($attr['dir'])) return $attr;
+		$attr['dir'] = $config->get('Attr.DefaultTextDir');
+		return $attr;
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -9,7 +9,9 @@
 {
 
     public function transform($attr, $config, $context) {
-        if (isset($attr['dir'])) return $attr;
+        if (isset($attr['dir'])) {
+        	return $attr;
+        }
         $attr['dir'] = $config->get('Attr.DefaultTextDir');
         return $attr;
     }

classes/security/htmlpurifier/library/HTMLPurifier/AttrTransform/BgColor.php

Indentation +7 added lines, -7 removed lines

@@ -5,18 +5,18 @@
  */
 class HTMLPurifier_AttrTransform_BgColor extends HTMLPurifier_AttrTransform {
 
-    public function transform($attr, $config, $context) {
+	public function transform($attr, $config, $context) {
 
-        if (!isset($attr['bgcolor'])) return $attr;
+		if (!isset($attr['bgcolor'])) return $attr;
 
-        $bgcolor = $this->confiscateAttr($attr, 'bgcolor');
-        // some validation should happen here
+		$bgcolor = $this->confiscateAttr($attr, 'bgcolor');
+		// some validation should happen here
 
-        $this->prependCSS($attr, "background-color:$bgcolor;");
+		$this->prependCSS($attr, "background-color:$bgcolor;");
 
-        return $attr;
+		return $attr;
 
-    }
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -7,7 +7,9 @@
 
     public function transform($attr, $config, $context) {
 
-        if (!isset($attr['bgcolor'])) return $attr;
+        if (!isset($attr['bgcolor'])) {
+        	return $attr;
+        }
 
         $bgcolor = $this->confiscateAttr($attr, 'bgcolor');
         // some validation should happen here