PATH:
home
/
letacommog
/
letaweb
/
admin
/
classes
/
htmlpurifier
/
library
/
HTMLPurifier
/
URIFilter
<?php // It's not clear to me whether or not Punycode means that hostnames // do not have canonical forms anymore. As far as I can tell, it's // not a problem (punycoding should be identity when no Unicode // points are involved), but I'm not 100% sure class HTMLPurifier_URIFilter_HostBlacklist extends HTMLPurifier_URIFilter { public $name = 'HostBlacklist'; protected $blacklist = array(); public function prepare($config) { $this->blacklist = $config->get('URI.HostBlacklist'); return true; } public function filter(&$uri, $config, $context) { foreach ($this->blacklist as $blacklisted_host_fragment) { if (strpos($uri->host, $blacklisted_host_fragment) !== false) { return false; } } return true; } } // vim: et sw=4 sts=4
[+]
..
[-] Munge.php
[edit]
[-] HostBlacklist.php
[edit]
[-] DisableExternal.php
[edit]
[-] SafeIframe.php
[edit]
[-] MakeAbsolute.php
[edit]
[-] DisableResources.php
[edit]
[-] DisableExternalResources.php
[edit]