Merge pull request #481 from wallabag/dev1.5.2

1.5.2

1 files changed, 46 insertions, 0 deletions

diff --git a/inc/3rdparty/htmlpurifier/HTMLPurifier/URIFilter/HostBlacklist.php b/inc/3rdparty/htmlpurifier/HTMLPurifier/URIFilter/HostBlacklist.php
new file mode 100644
index 00000000..54980b6e
--- /dev/null
+++ b/inc/3rdparty/htmlpurifier/HTMLPurifier/URIFilter/HostBlacklist.php
@@ -0,0 +1,46 @@
+<?php

+

+// It's not clear to me whether or not Punycode means that hostnames

+// do not have canonical forms anymore. As far as I can tell, it's

+// not a problem (punycoding should be identity when no Unicode

+// points are involved), but I'm not 100% sure

+class HTMLPurifier_URIFilter_HostBlacklist extends HTMLPurifier_URIFilter

+{

+    /**

+     * @type string

+     */

+    public $name = 'HostBlacklist';

+

+    /**

+     * @type array

+     */

+    protected $blacklist = array();

+

+    /**

+     * @param HTMLPurifier_Config $config

+     * @return bool

+     */

+    public function prepare($config)

+    {

+        $this->blacklist = $config->get('URI.HostBlacklist');

+        return true;

+    }

+

+    /**

+     * @param HTMLPurifier_URI $uri

+     * @param HTMLPurifier_Config $config

+     * @param HTMLPurifier_Context $context

+     * @return bool

+     */

+    public function filter(&$uri, $config, $context)

+    {

+        foreach ($this->blacklist as $blacklisted_host_fragment) {

+            if (strpos($uri->host, $blacklisted_host_fragment) !== false) {

+                return false;

+            }

+        }

+        return true;

+    }

+}

+

+// vim: et sw=4 sts=4