lib/htmlpurifier/HTMLPurifier/AttrDef/CSS/Number.php

   1 <?php
   2
   3 /**
   4  * Validates a number as defined by the CSS spec.
   5  */
   6 class HTMLPurifier_AttrDef_CSS_Number extends HTMLPurifier_AttrDef
   7 {
   8
   9     /**
  10      * Bool indicating whether or not only positive values allowed.
  11      */
  12     var $non_negative = false;
  13
  14     /**
  15      * @param $non_negative Bool indicating whether negatives are forbidden
  16      */
  17     function HTMLPurifier_AttrDef_CSS_Number($non_negative = false) {
  18         $this->non_negative = $non_negative;
  19     }
  20
  21     function validate($number, $config, &$context) {
  22
  23         $number = $this->parseCDATA($number);
  24
  25         if ($number === '') return false;
  26
  27         $sign = '';
  28         switch ($number[0]) {
  29             case '-':
  30                 if ($this->non_negative) return false;
  31                 $sign = '-';
  32             case '+':
  33                 $number = substr($number, 1);
  34         }
  35
  36         if (ctype_digit($number)) {
  37             $number = ltrim($number, '0');
  38             return $number ? $sign . $number : '0';
  39         }
  40         if (!strpos($number, '.')) return false;
  41
  42         list($left, $right) = explode('.', $number, 2);
  43
  44         if (!ctype_digit($left)) return false;
  45         $left = ltrim($left, '0');
  46
  47         $right = rtrim($right, '0');
  48
  49         if ($right === '') {
  50             return $left ? $sign . $left : '0';
  51         } elseif (!ctype_digit($right)) {
  52             return false;
  53         }
  54
  55         return $sign . $left . '.' . $right;
  56
  57     }
  58
  59 }
  60
  61 ?>