xpressengine / xe-core

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/URI.php

Indentation +32 added lines, -32 removed lines

@@ -12,49 +12,49 @@
 class HTMLPurifier_AttrDef_CSS_URI extends HTMLPurifier_AttrDef_URI
 {
 
-    public function __construct() {
-        parent::__construct(true); // always embedded
-    }
+	public function __construct() {
+		parent::__construct(true); // always embedded
+	}
 
-    public function validate($uri_string, $config, $context) {
-        // parse the URI out of the string and then pass it onto
-        // the parent object
+	public function validate($uri_string, $config, $context) {
+		// parse the URI out of the string and then pass it onto
+		// the parent object
 
-        $uri_string = $this->parseCDATA($uri_string);
-        if (strpos($uri_string, 'url(') !== 0) return false;
-        $uri_string = substr($uri_string, 4);
-        $new_length = strlen($uri_string) - 1;
-        if ($uri_string[$new_length] != ')') return false;
-        $uri = trim(substr($uri_string, 0, $new_length));
+		$uri_string = $this->parseCDATA($uri_string);
+		if (strpos($uri_string, 'url(') !== 0) return false;
+		$uri_string = substr($uri_string, 4);
+		$new_length = strlen($uri_string) - 1;
+		if ($uri_string[$new_length] != ')') return false;
+		$uri = trim(substr($uri_string, 0, $new_length));
 
-        if (!empty($uri) && ($uri[0] == "'" || $uri[0] == '"')) {
-            $quote = $uri[0];
-            $new_length = strlen($uri) - 1;
-            if ($uri[$new_length] !== $quote) return false;
-            $uri = substr($uri, 1, $new_length - 1);
-        }
+		if (!empty($uri) && ($uri[0] == "'" || $uri[0] == '"')) {
+			$quote = $uri[0];
+			$new_length = strlen($uri) - 1;
+			if ($uri[$new_length] !== $quote) return false;
+			$uri = substr($uri, 1, $new_length - 1);
+		}
 
-        $uri = $this->expandCSSEscape($uri);
+		$uri = $this->expandCSSEscape($uri);
 
-        $result = parent::validate($uri, $config, $context);
+		$result = parent::validate($uri, $config, $context);
 
-        if ($result === false) return false;
+		if ($result === false) return false;
 
-        // extra sanity check; should have been done by URI
-        $result = str_replace(array('"', "\\", "\n", "\x0c", "\r"), "", $result);
+		// extra sanity check; should have been done by URI
+		$result = str_replace(array('"', "\\", "\n", "\x0c", "\r"), "", $result);
 
-        // suspicious characters are ()'; we're going to percent encode
-        // them for safety.
-        $result = str_replace(array('(', ')', "'"), array('%28', '%29', '%27'), $result);
+		// suspicious characters are ()'; we're going to percent encode
+		// them for safety.
+		$result = str_replace(array('(', ')', "'"), array('%28', '%29', '%27'), $result);
 
-        // there's an extra bug where ampersands lose their escaping on
-        // an innerHTML cycle, so a very unlucky query parameter could
-        // then change the meaning of the URL.  Unfortunately, there's
-        // not much we can do about that...
+		// there's an extra bug where ampersands lose their escaping on
+		// an innerHTML cycle, so a very unlucky query parameter could
+		// then change the meaning of the URL.  Unfortunately, there's
+		// not much we can do about that...
 
-        return "url(\"$result\")";
+		return "url(\"$result\")";
 
-    }
+	}
 
 }
 

Braces +12 added lines, -4 removed lines

@@ -21,16 +21,22 @@ 
         // the parent object
 
         $uri_string = $this->parseCDATA($uri_string);
-        if (strpos($uri_string, 'url(') !== 0) return false;
+        if (strpos($uri_string, 'url(') !== 0) {
+        	return false;
+        }
         $uri_string = substr($uri_string, 4);
         $new_length = strlen($uri_string) - 1;
-        if ($uri_string[$new_length] != ')') return false;
+        if ($uri_string[$new_length] != ')') {
+        	return false;
+        }
         $uri = trim(substr($uri_string, 0, $new_length));
 
         if (!empty($uri) && ($uri[0] == "'" || $uri[0] == '"')) {
             $quote = $uri[0];
             $new_length = strlen($uri) - 1;
-            if ($uri[$new_length] !== $quote) return false;
+            if ($uri[$new_length] !== $quote) {
+            	return false;
+            }
             $uri = substr($uri, 1, $new_length - 1);
         }
 
@@ -38,7 +44,9 @@ 
 
         $result = parent::validate($uri, $config, $context);
 
-        if ($result === false) return false;
+        if ($result === false) {
+        	return false;
+        }
 
         // extra sanity check; should have been done by URI
         $result = str_replace(array('"', "\\", "\n", "\x0c", "\r"), "", $result);

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/Clone.php

Indentation +13 added lines, -13 removed lines

@@ -6,22 +6,22 @@
  */
 class HTMLPurifier_AttrDef_Clone extends HTMLPurifier_AttrDef
 {
-    /**
-     * What we're cloning
-     */
-    protected $clone;
+	/**
+	 * What we're cloning
+	 */
+	protected $clone;
 
-    public function __construct($clone) {
-        $this->clone = $clone;
-    }
+	public function __construct($clone) {
+		$this->clone = $clone;
+	}
 
-    public function validate($v, $config, $context) {
-        return $this->clone->validate($v, $config, $context);
-    }
+	public function validate($v, $config, $context) {
+		return $this->clone->validate($v, $config, $context);
+	}
 
-    public function make($string) {
-        return clone $this->clone;
-    }
+	public function make($string) {
+		return clone $this->clone;
+	}
 
 }
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/Enum.php

Indentation +44 added lines, -44 removed lines

@@ -10,55 +10,55 @@
 class HTMLPurifier_AttrDef_Enum extends HTMLPurifier_AttrDef
 {
 
-    /**
-     * Lookup table of valid values.
-     * @todo Make protected
-     */
-    public $valid_values   = array();
+	/**
+	 * Lookup table of valid values.
+	 * @todo Make protected
+	 */
+	public $valid_values   = array();
 
-    /**
-     * Bool indicating whether or not enumeration is case sensitive.
-     * @note In general this is always case insensitive.
-     */
-    protected $case_sensitive = false; // values according to W3C spec
+	/**
+	 * Bool indicating whether or not enumeration is case sensitive.
+	 * @note In general this is always case insensitive.
+	 */
+	protected $case_sensitive = false; // values according to W3C spec
 
-    /**
-     * @param $valid_values List of valid values
-     * @param $case_sensitive Bool indicating whether or not case sensitive
-     */
-    public function __construct(
-        $valid_values = array(), $case_sensitive = false
-    ) {
-        $this->valid_values = array_flip($valid_values);
-        $this->case_sensitive = $case_sensitive;
-    }
+	/**
+	 * @param $valid_values List of valid values
+	 * @param $case_sensitive Bool indicating whether or not case sensitive
+	 */
+	public function __construct(
+		$valid_values = array(), $case_sensitive = false
+	) {
+		$this->valid_values = array_flip($valid_values);
+		$this->case_sensitive = $case_sensitive;
+	}
 
-    public function validate($string, $config, $context) {
-        $string = trim($string);
-        if (!$this->case_sensitive) {
-            // we may want to do full case-insensitive libraries
-            $string = ctype_lower($string) ? $string : strtolower($string);
-        }
-        $result = isset($this->valid_values[$string]);
+	public function validate($string, $config, $context) {
+		$string = trim($string);
+		if (!$this->case_sensitive) {
+			// we may want to do full case-insensitive libraries
+			$string = ctype_lower($string) ? $string : strtolower($string);
+		}
+		$result = isset($this->valid_values[$string]);
 
-        return $result ? $string : false;
-    }
+		return $result ? $string : false;
+	}
 
-    /**
-     * @param $string In form of comma-delimited list of case-insensitive
-     *      valid values. Example: "foo,bar,baz". Prepend "s:" to make
-     *      case sensitive
-     */
-    public function make($string) {
-        if (strlen($string) > 2 && $string[0] == 's' && $string[1] == ':') {
-            $string = substr($string, 2);
-            $sensitive = true;
-        } else {
-            $sensitive = false;
-        }
-        $values = explode(',', $string);
-        return new HTMLPurifier_AttrDef_Enum($values, $sensitive);
-    }
+	/**
+	 * @param $string In form of comma-delimited list of case-insensitive
+	 *      valid values. Example: "foo,bar,baz". Prepend "s:" to make
+	 *      case sensitive
+	 */
+	public function make($string) {
+		if (strlen($string) > 2 && $string[0] == 's' && $string[1] == ':') {
+			$string = substr($string, 2);
+			$sensitive = true;
+		} else {
+			$sensitive = false;
+		}
+		$values = explode(',', $string);
+		return new HTMLPurifier_AttrDef_Enum($values, $sensitive);
+	}
 
 }
 

Spacing +1 added lines, -1 removed lines

@@ -14,7 +14,7 @@
      * Lookup table of valid values.
      * @todo Make protected
      */
-    public $valid_values   = array();
+    public $valid_values = array();
 
     /**
      * Bool indicating whether or not enumeration is case sensitive.

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/Bool.php

Indentation +13 added lines, -13 removed lines

@@ -6,22 +6,22 @@
 class HTMLPurifier_AttrDef_HTML_Bool extends HTMLPurifier_AttrDef
 {
 
-    protected $name;
-    public $minimized = true;
+	protected $name;
+	public $minimized = true;
 
-    public function __construct($name = false) {$this->name = $name;}
+	public function __construct($name = false) {$this->name = $name;}
 
-    public function validate($string, $config, $context) {
-        if (empty($string)) return false;
-        return $this->name;
-    }
+	public function validate($string, $config, $context) {
+		if (empty($string)) return false;
+		return $this->name;
+	}
 
-    /**
-     * @param $string Name of attribute
-     */
-    public function make($string) {
-        return new HTMLPurifier_AttrDef_HTML_Bool($string);
-    }
+	/**
+	 * @param $string Name of attribute
+	 */
+	public function make($string) {
+		return new HTMLPurifier_AttrDef_HTML_Bool($string);
+	}
 
 }
 

Spacing +1 added lines, -1 removed lines

@@ -9,7 +9,7 @@
     protected $name;
     public $minimized = true;
 
-    public function __construct($name = false) {$this->name = $name;}
+    public function __construct($name = false) {$this->name = $name; }
 
     public function validate($string, $config, $context) {
         if (empty($string)) return false;

Braces +3 added lines, -1 removed lines

@@ -12,7 +12,9 @@
     public function __construct($name = false) {$this->name = $name;}
 
     public function validate($string, $config, $context) {
-        if (empty($string)) return false;
+        if (empty($string)) {
+        	return false;
+        }
         return $this->name;
     }
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/Class.php

Indentation +26 added lines, -26 removed lines

@@ -5,30 +5,30 @@
  */
 class HTMLPurifier_AttrDef_HTML_Class extends HTMLPurifier_AttrDef_HTML_Nmtokens
 {
-    protected function split($string, $config, $context) {
-        // really, this twiddle should be lazy loaded
-        $name = $config->getDefinition('HTML')->doctype->name;
-        if ($name == "XHTML 1.1" || $name == "XHTML 2.0") {
-            return parent::split($string, $config, $context);
-        } else {
-            return preg_split('/\s+/', $string);
-        }
-    }
-    protected function filter($tokens, $config, $context) {
-        $allowed = $config->get('Attr.AllowedClasses');
-        $forbidden = $config->get('Attr.ForbiddenClasses');
-        $ret = array();
-        foreach ($tokens as $token) {
-            if (
-                ($allowed === null || isset($allowed[$token])) &&
-                !isset($forbidden[$token]) &&
-                // We need this O(n) check because of PHP's array
-                // implementation that casts -0 to 0.
-                !in_array($token, $ret, true)
-            ) {
-                $ret[] = $token;
-            }
-        }
-        return $ret;
-    }
+	protected function split($string, $config, $context) {
+		// really, this twiddle should be lazy loaded
+		$name = $config->getDefinition('HTML')->doctype->name;
+		if ($name == "XHTML 1.1" || $name == "XHTML 2.0") {
+			return parent::split($string, $config, $context);
+		} else {
+			return preg_split('/\s+/', $string);
+		}
+	}
+	protected function filter($tokens, $config, $context) {
+		$allowed = $config->get('Attr.AllowedClasses');
+		$forbidden = $config->get('Attr.ForbiddenClasses');
+		$ret = array();
+		foreach ($tokens as $token) {
+			if (
+				($allowed === null || isset($allowed[$token])) &&
+				!isset($forbidden[$token]) &&
+				// We need this O(n) check because of PHP's array
+				// implementation that casts -0 to 0.
+				!in_array($token, $ret, true)
+			) {
+				$ret[] = $token;
+			}
+		}
+		return $ret;
+	}
 }

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/Color.php

Indentation +14 added lines, -14 removed lines

@@ -6,26 +6,26 @@
 class HTMLPurifier_AttrDef_HTML_Color extends HTMLPurifier_AttrDef
 {
 
-    public function validate($string, $config, $context) {
+	public function validate($string, $config, $context) {
 
-        static $colors = null;
-        if ($colors === null) $colors = $config->get('Core.ColorKeywords');
+		static $colors = null;
+		if ($colors === null) $colors = $config->get('Core.ColorKeywords');
 
-        $string = trim($string);
+		$string = trim($string);
 
-        if (empty($string)) return false;
-        if (isset($colors[strtolower($string)])) return $colors[$string];
-        if ($string[0] === '#') $hex = substr($string, 1);
-        else $hex = $string;
+		if (empty($string)) return false;
+		if (isset($colors[strtolower($string)])) return $colors[$string];
+		if ($string[0] === '#') $hex = substr($string, 1);
+		else $hex = $string;
 
-        $length = strlen($hex);
-        if ($length !== 3 && $length !== 6) return false;
-        if (!ctype_xdigit($hex)) return false;
-        if ($length === 3) $hex = $hex[0].$hex[0].$hex[1].$hex[1].$hex[2].$hex[2];
+		$length = strlen($hex);
+		if ($length !== 3 && $length !== 6) return false;
+		if (!ctype_xdigit($hex)) return false;
+		if ($length === 3) $hex = $hex[0].$hex[0].$hex[1].$hex[1].$hex[2].$hex[2];
 
-        return "#$hex";
+		return "#$hex";
 
-    }
+	}
 
 }
 

Braces +23 added lines, -8 removed lines

@@ -9,19 +9,34 @@
     public function validate($string, $config, $context) {
 
         static $colors = null;
-        if ($colors === null) $colors = $config->get('Core.ColorKeywords');
+        if ($colors === null) {
+        	$colors = $config->get('Core.ColorKeywords');
+        }
 
         $string = trim($string);
 
-        if (empty($string)) return false;
-        if (isset($colors[strtolower($string)])) return $colors[$string];
-        if ($string[0] === '#') $hex = substr($string, 1);
-        else $hex = $string;
+        if (empty($string)) {
+        	return false;
+        }
+        if (isset($colors[strtolower($string)])) {
+        	return $colors[$string];
+        }
+        if ($string[0] === '#') {
+        	$hex = substr($string, 1);
+        } else {
+        	$hex = $string;
+        }
 
         $length = strlen($hex);
-        if ($length !== 3 && $length !== 6) return false;
-        if (!ctype_xdigit($hex)) return false;
-        if ($length === 3) $hex = $hex[0].$hex[0].$hex[1].$hex[1].$hex[2].$hex[2];
+        if ($length !== 3 && $length !== 6) {
+        	return false;
+        }
+        if (!ctype_xdigit($hex)) {
+        	return false;
+        }
+        if ($length === 3) {
+        	$hex = $hex[0].$hex[0].$hex[1].$hex[1].$hex[2].$hex[2];
+        }
 
         return "#$hex";
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/FrameTarget.php

Indentation +7 added lines, -7 removed lines

@@ -6,15 +6,15 @@
 class HTMLPurifier_AttrDef_HTML_FrameTarget extends HTMLPurifier_AttrDef_Enum
 {
 
-    public $valid_values = false; // uninitialized value
-    protected $case_sensitive = false;
+	public $valid_values = false; // uninitialized value
+	protected $case_sensitive = false;
 
-    public function __construct() {}
+	public function __construct() {}
 
-    public function validate($string, $config, $context) {
-        if ($this->valid_values === false) $this->valid_values = $config->get('Attr.AllowedFrameTargets');
-        return parent::validate($string, $config, $context);
-    }
+	public function validate($string, $config, $context) {
+		if ($this->valid_values === false) $this->valid_values = $config->get('Attr.AllowedFrameTargets');
+		return parent::validate($string, $config, $context);
+	}
 
 }
 

Braces +3 added lines, -1 removed lines

@@ -12,7 +12,9 @@
     public function __construct() {}
 
     public function validate($string, $config, $context) {
-        if ($this->valid_values === false) $this->valid_values = $config->get('Attr.AllowedFrameTargets');
+        if ($this->valid_values === false) {
+        	$this->valid_values = $config->get('Attr.AllowedFrameTargets');
+        }
         return parent::validate($string, $config, $context);
     }
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/ID.php

Indentation +62 added lines, -62 removed lines

@@ -12,68 +12,68 @@
 class HTMLPurifier_AttrDef_HTML_ID extends HTMLPurifier_AttrDef
 {
 
-    // selector is NOT a valid thing to use for IDREFs, because IDREFs
-    // *must* target IDs that exist, whereas selector #ids do not.
-
-    /**
-     * Determines whether or not we're validating an ID in a CSS
-     * selector context.
-     */
-    protected $selector;
-
-    public function __construct($selector = false) {
-        $this->selector = $selector;
-    }
-
-    public function validate($id, $config, $context) {
-
-        if (!$this->selector && !$config->get('Attr.EnableID')) return false;
-
-        $id = trim($id); // trim it first
-
-        if ($id === '') return false;
-
-        $prefix = $config->get('Attr.IDPrefix');
-        if ($prefix !== '') {
-            $prefix .= $config->get('Attr.IDPrefixLocal');
-            // prevent re-appending the prefix
-            if (strpos($id, $prefix) !== 0) $id = $prefix . $id;
-        } elseif ($config->get('Attr.IDPrefixLocal') !== '') {
-            trigger_error('%Attr.IDPrefixLocal cannot be used unless '.
-                '%Attr.IDPrefix is set', E_USER_WARNING);
-        }
-
-        if (!$this->selector) {
-            $id_accumulator =& $context->get('IDAccumulator');
-            if (isset($id_accumulator->ids[$id])) return false;
-        }
-
-        // we purposely avoid using regex, hopefully this is faster
-
-        if (ctype_alpha($id)) {
-            $result = true;
-        } else {
-            if (!ctype_alpha(@$id[0])) return false;
-            $trim = trim( // primitive style of regexps, I suppose
-                $id,
-                'A..Za..z0..9:-._'
-              );
-            $result = ($trim === '');
-        }
-
-        $regexp = $config->get('Attr.IDBlacklistRegexp');
-        if ($regexp && preg_match($regexp, $id)) {
-            return false;
-        }
-
-        if (!$this->selector && $result) $id_accumulator->add($id);
-
-        // if no change was made to the ID, return the result
-        // else, return the new id if stripping whitespace made it
-        //     valid, or return false.
-        return $result ? $id : false;
-
-    }
+	// selector is NOT a valid thing to use for IDREFs, because IDREFs
+	// *must* target IDs that exist, whereas selector #ids do not.
+
+	/**
+	 * Determines whether or not we're validating an ID in a CSS
+	 * selector context.
+	 */
+	protected $selector;
+
+	public function __construct($selector = false) {
+		$this->selector = $selector;
+	}
+
+	public function validate($id, $config, $context) {
+
+		if (!$this->selector && !$config->get('Attr.EnableID')) return false;
+
+		$id = trim($id); // trim it first
+
+		if ($id === '') return false;
+
+		$prefix = $config->get('Attr.IDPrefix');
+		if ($prefix !== '') {
+			$prefix .= $config->get('Attr.IDPrefixLocal');
+			// prevent re-appending the prefix
+			if (strpos($id, $prefix) !== 0) $id = $prefix . $id;
+		} elseif ($config->get('Attr.IDPrefixLocal') !== '') {
+			trigger_error('%Attr.IDPrefixLocal cannot be used unless '.
+				'%Attr.IDPrefix is set', E_USER_WARNING);
+		}
+
+		if (!$this->selector) {
+			$id_accumulator =& $context->get('IDAccumulator');
+			if (isset($id_accumulator->ids[$id])) return false;
+		}
+
+		// we purposely avoid using regex, hopefully this is faster
+
+		if (ctype_alpha($id)) {
+			$result = true;
+		} else {
+			if (!ctype_alpha(@$id[0])) return false;
+			$trim = trim( // primitive style of regexps, I suppose
+				$id,
+				'A..Za..z0..9:-._'
+			  );
+			$result = ($trim === '');
+		}
+
+		$regexp = $config->get('Attr.IDBlacklistRegexp');
+		if ($regexp && preg_match($regexp, $id)) {
+			return false;
+		}
+
+		if (!$this->selector && $result) $id_accumulator->add($id);
+
+		// if no change was made to the ID, return the result
+		// else, return the new id if stripping whitespace made it
+		//     valid, or return false.
+		return $result ? $id : false;
+
+	}
 
 }
 

Braces +18 added lines, -6 removed lines

@@ -27,17 +27,23 @@ 
 
     public function validate($id, $config, $context) {
 
-        if (!$this->selector && !$config->get('Attr.EnableID')) return false;
+        if (!$this->selector && !$config->get('Attr.EnableID')) {
+        	return false;
+        }
 
         $id = trim($id); // trim it first
 
-        if ($id === '') return false;
+        if ($id === '') {
+        	return false;
+        }
 
         $prefix = $config->get('Attr.IDPrefix');
         if ($prefix !== '') {
             $prefix .= $config->get('Attr.IDPrefixLocal');
             // prevent re-appending the prefix
-            if (strpos($id, $prefix) !== 0) $id = $prefix . $id;
+            if (strpos($id, $prefix) !== 0) {
+            	$id = $prefix . $id;
+            }
         } elseif ($config->get('Attr.IDPrefixLocal') !== '') {
             trigger_error('%Attr.IDPrefixLocal cannot be used unless '.
                 '%Attr.IDPrefix is set', E_USER_WARNING);
@@ -45,7 +51,9 @@ 
 
         if (!$this->selector) {
             $id_accumulator =& $context->get('IDAccumulator');
-            if (isset($id_accumulator->ids[$id])) return false;
+            if (isset($id_accumulator->ids[$id])) {
+            	return false;
+            }
         }
 
         // we purposely avoid using regex, hopefully this is faster
@@ -53,7 +61,9 @@ 
         if (ctype_alpha($id)) {
             $result = true;
         } else {
-            if (!ctype_alpha(@$id[0])) return false;
+            if (!ctype_alpha(@$id[0])) {
+            	return false;
+            }
             $trim = trim( // primitive style of regexps, I suppose
                 $id,
                 'A..Za..z0..9:-._'
@@ -66,7 +76,9 @@ 
             return false;
         }
 
-        if (!$this->selector && $result) $id_accumulator->add($id);
+        if (!$this->selector && $result) {
+        	$id_accumulator->add($id);
+        }
 
         // if no change was made to the ID, return the result
         // else, return the new id if stripping whitespace made it

Spacing +2 added lines, -2 removed lines

@@ -37,14 +37,14 @@
         if ($prefix !== '') {
             $prefix .= $config->get('Attr.IDPrefixLocal');
             // prevent re-appending the prefix
-            if (strpos($id, $prefix) !== 0) $id = $prefix . $id;
+            if (strpos($id, $prefix) !== 0) $id = $prefix.$id;
         } elseif ($config->get('Attr.IDPrefixLocal') !== '') {
             trigger_error('%Attr.IDPrefixLocal cannot be used unless '.
                 '%Attr.IDPrefix is set', E_USER_WARNING);
         }
 
         if (!$this->selector) {
-            $id_accumulator =& $context->get('IDAccumulator');
+            $id_accumulator = & $context->get('IDAccumulator');
             if (isset($id_accumulator->ids[$id])) return false;
         }
 

classes/security/htmlpurifier/library/HTMLPurifier/AttrDef/HTML/Length.php

Indentation +15 added lines, -15 removed lines

@@ -10,31 +10,31 @@
 class HTMLPurifier_AttrDef_HTML_Length extends HTMLPurifier_AttrDef_HTML_Pixels
 {
 
-    public function validate($string, $config, $context) {
+	public function validate($string, $config, $context) {
 
-        $string = trim($string);
-        if ($string === '') return false;
+		$string = trim($string);
+		if ($string === '') return false;
 
-        $parent_result = parent::validate($string, $config, $context);
-        if ($parent_result !== false) return $parent_result;
+		$parent_result = parent::validate($string, $config, $context);
+		if ($parent_result !== false) return $parent_result;
 
-        $length = strlen($string);
-        $last_char = $string[$length - 1];
+		$length = strlen($string);
+		$last_char = $string[$length - 1];
 
-        if ($last_char !== '%') return false;
+		if ($last_char !== '%') return false;
 
-        $points = substr($string, 0, $length - 1);
+		$points = substr($string, 0, $length - 1);
 
-        if (!is_numeric($points)) return false;
+		if (!is_numeric($points)) return false;
 
-        $points = (int) $points;
+		$points = (int) $points;
 
-        if ($points < 0) return '0%';
-        if ($points > 100) return '100%';
+		if ($points < 0) return '0%';
+		if ($points > 100) return '100%';
 
-        return ((string) $points) . '%';
+		return ((string) $points) . '%';
 
-    }
+	}
 
 }
 

Braces +18 added lines, -6 removed lines

@@ -13,24 +13,36 @@
     public function validate($string, $config, $context) {
 
         $string = trim($string);
-        if ($string === '') return false;
+        if ($string === '') {
+        	return false;
+        }
 
         $parent_result = parent::validate($string, $config, $context);
-        if ($parent_result !== false) return $parent_result;
+        if ($parent_result !== false) {
+        	return $parent_result;
+        }
 
         $length = strlen($string);
         $last_char = $string[$length - 1];
 
-        if ($last_char !== '%') return false;
+        if ($last_char !== '%') {
+        	return false;
+        }
 
         $points = substr($string, 0, $length - 1);
 
-        if (!is_numeric($points)) return false;
+        if (!is_numeric($points)) {
+        	return false;
+        }
 
         $points = (int) $points;
 
-        if ($points < 0) return '0%';
-        if ($points > 100) return '100%';
+        if ($points < 0) {
+        	return '0%';
+        }
+        if ($points > 100) {
+        	return '100%';
+        }
 
         return ((string) $points) . '%';
 

Spacing +1 added lines, -1 removed lines

@@ -32,7 +32,7 @@
         if ($points < 0) return '0%';
         if ($points > 100) return '100%';
 
-        return ((string) $points) . '%';
+        return ((string) $points).'%';
 
     }