mirror of
https://github.com/invoiceninja/invoiceninja.git
synced 2025-11-04 02:37:34 -05:00
40 lines
1.2 KiB
PHP
40 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Libraries;
|
|
|
|
use HTMLPurifier;
|
|
use HTMLPurifier_Config;
|
|
|
|
class HTMLUtils
|
|
{
|
|
public static function sanitize($css)
|
|
{
|
|
// Allow referencing the body element
|
|
$css = preg_replace('/(?<![a-z0-9\-\_\#\.])body(?![a-z0-9\-\_])/i', '.body', $css);
|
|
|
|
//
|
|
// Inspired by http://stackoverflow.com/a/5209050/1721527, dleavitt <https://stackoverflow.com/users/362110/dleavitt>
|
|
//
|
|
|
|
// Create a new configuration object
|
|
$config = HTMLPurifier_Config::createDefault();
|
|
$config->set('Filter.ExtractStyleBlocks', true);
|
|
$config->set('CSS.AllowImportant', true);
|
|
$config->set('CSS.AllowTricky', true);
|
|
$config->set('CSS.Trusted', true);
|
|
|
|
// Create a new purifier instance
|
|
$purifier = new HTMLPurifier($config);
|
|
|
|
// Wrap our CSS in style tags and pass to purifier.
|
|
// we're not actually interested in the html response though
|
|
$purifier->purify('<style>'.$css.'</style>');
|
|
|
|
// The "style" blocks are stored seperately
|
|
$css = $purifier->context->get('StyleBlocks');
|
|
|
|
// Get the first style block
|
|
return count($css) ? $css[0] : '';
|
|
}
|
|
}
|