lib/htmlpurifier/HTMLPurifier/AttrDef/HTML/Pixels.php

   1 <?php
   2
   3 require_once 'HTMLPurifier/AttrDef.php';
   4
   5 /**
   6  * Validates an integer representation of pixels according to the HTML spec.
   7  */
   8 class HTMLPurifier_AttrDef_HTML_Pixels extends HTMLPurifier_AttrDef
   9 {
  10
  11     function validate($string, $config, &$context) {
  12
  13         $string = trim($string);
  14         if ($string === '0') return $string;
  15         if ($string === '')  return false;
  16         $length = strlen($string);
  17         if (substr($string, $length - 2) == 'px') {
  18             $string = substr($string, 0, $length - 2);
  19         }
  20         if (!is_numeric($string)) return false;
  21         $int = (int) $string;
  22
  23         if ($int < 0) return '0';
  24
  25         // upper-bound value, extremely high values can
  26         // crash operating systems, see <http://ha.ckers.org/imagecrash.html>
  27         // WARNING, above link WILL crash you if you're using Windows
  28
  29         if ($int > 1200) return '1200';
  30
  31         return (string) $int;
  32
  33     }
  34
  35 }
  36