lib/htmlpurifier/HTMLPurifier/AttrDef/CSS/Color.php

   1 <?php
   2
   3 require_once 'HTMLPurifier/AttrDef.php';
   4
   5 /**
   6  * Validates Color as defined by CSS.
   7  */
   8 class HTMLPurifier_AttrDef_CSS_Color extends HTMLPurifier_AttrDef
   9 {
  10
  11     /**
  12      * Color keyword lookup table.
  13      * @todo Extend it to include all usually allowed colors.
  14      */
  15     var $colors = array(
  16         'maroon'    => '#800000',
  17         'red'       => '#F00',
  18         'orange'    => '#FFA500',
  19         'yellow'    => '#FF0',
  20         'olive'     => '#808000',
  21         'purple'    => '#800080',
  22         'fuchsia'   => '#F0F',
  23         'white'     => '#FFF',
  24         'lime'      => '#0F0',
  25         'green'     => '#008000',
  26         'navy'      => '#000080',
  27         'blue'      => '#00F',
  28         'aqua'      => '#0FF',
  29         'teal'      => '#008080',
  30         'black'     => '#000',
  31         'silver'    => '#C0C0C0',
  32         'gray'      => '#808080'
  33     );
  34
  35     function validate($color, $config, &$context) {
  36
  37         $color = trim($color);
  38         if (!$color) return false;
  39
  40         $lower = strtolower($color);
  41         if (isset($this->colors[$lower])) return $this->colors[$lower];
  42
  43         if ($color[0] === '#') {
  44             // hexadecimal handling
  45             $hex = substr($color, 1);
  46             $length = strlen($hex);
  47             if ($length !== 3 && $length !== 6) return false;
  48             if (!ctype_xdigit($hex)) return false;
  49         } else {
  50             // rgb literal handling
  51             if (strpos($color, 'rgb(')) return false;
  52             $length = strlen($color);
  53             if (strpos($color, ')') !== $length - 1) return false;
  54             $triad = substr($color, 4, $length - 4 - 1);
  55             $parts = explode(',', $triad);
  56             if (count($parts) !== 3) return false;
  57             $type = false; // to ensure that they're all the same type
  58             $new_parts = array();
  59             foreach ($parts as $part) {
  60                 $part = trim($part);
  61                 if ($part === '') return false;
  62                 $length = strlen($part);
  63                 if ($part[$length - 1] === '%') {
  64                     // handle percents
  65                     if (!$type) {
  66                         $type = 'percentage';
  67                     } elseif ($type !== 'percentage') {
  68                         return false;
  69                     }
  70                     $num = (float) substr($part, 0, $length - 1);
  71                     if ($num < 0) $num = 0;
  72                     if ($num > 100) $num = 100;
  73                     $new_parts[] = "$num%";
  74                 } else {
  75                     // handle integers
  76                     if (!$type) {
  77                         $type = 'integer';
  78                     } elseif ($type !== 'integer') {
  79                         return false;
  80                     }
  81                     $num = (int) $part;
  82                     if ($num < 0) $num = 0;
  83                     if ($num > 255) $num = 255;
  84                     $new_parts[] = (string) $num;
  85                 }
  86             }
  87             $new_triad = implode(',', $new_parts);
  88             $color = "rgb($new_triad)";
  89         }
  90
  91         return $color;
  92
  93     }
  94
  95 }
  96
  97 ?>