 |
Smarty
WARNING: All discussion is moving to https://reddit.com/r/smarty, please go there! This forum will be closing soon. |
|
| View previous topic :: View next topic |
| Author |
Message |
eadz
Smarty Regular
Joined: 30 Apr 2003
Posts: 61
Location: Auckland, New Zealand
|
 Posted: Sat Jan 17, 2004 6:40 am Post subject: Regex guru help needed : modifier.kses.php |
 |
|
| Quote: | | kses is an HTML/XHTML filter written in PHP. It removes all unwanted HTML elements and attributes, and it also does several checks on attribute values. kses can be used to avoid Cross-Site Scripting (XSS), Buffer Overflows and Denial of Service attacks. |
kses is very handy for CMSs and commenting systems. The problem is specifing the allowed tags via a modifier.
Now {$text|kses} works of course, but the list of allowed tags and attributes in kses is very flexable. It's specified by an array called $template_tags and looks like this :
[php:1:7f0de7f608]
$template_tags = array(
"b" => array(),
"a" => array("title"=>array(),"href"=>array()),
"iframe" => array("width"=>array("maxval"=>200),"height"=>array("maxval"=>200)))
);
[/php:1:7f0de7f608]
Now, what that does is allow the following tags : b, a with the href and title paramater, and iframe with the width and height paramater as long as they aren't over 200. It will remove all other paramaters, so you can't for example put the src in the iframe tag.
So the question is, how do you get something like ( and this may not be the best syntax ) this :
| Code: |
{$text|kses:"b,a(title,href),iframe(width(maxval=200),height(maxval=200))"}
|
into the above array?
_________________
bBlog - Smarty based blogging software
I work for Webforce web site design ( Auckland, NZ ) |
|
| Back to top |
|
messju
Administrator
Joined: 16 Apr 2003
Posts: 3336
Location: Oldenburg, Germany
|
| Posted: Sat Jan 17, 2004 9:04 pm Post subject: |
|
|
| why do you want to provide the structure of allowed tags in the template? this doesn't really sound like display-logic to me. i'd assign the allowed tags from php and use them inside the modifier. |
|
| Back to top |
|
eadz
Smarty Regular
Joined: 30 Apr 2003
Posts: 61
Location: Auckland, New Zealand
|
|
| Back to top |
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
