You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
37 lines
1022 B
37 lines
1022 B
<?php |
|
|
|
// must be called POST validation |
|
|
|
/** |
|
* Adds rel="noopener" to any links which target a different window |
|
* than the current one. This is used to prevent malicious websites |
|
* from silently replacing the original window, which could be used |
|
* to do phishing. |
|
* This transform is controlled by %HTML.TargetNoopener. |
|
*/ |
|
class HTMLPurifier_AttrTransform_TargetNoopener extends HTMLPurifier_AttrTransform |
|
{ |
|
/** |
|
* @param array $attr |
|
* @param HTMLPurifier_Config $config |
|
* @param HTMLPurifier_Context $context |
|
* @return array |
|
*/ |
|
public function transform($attr, $config, $context) |
|
{ |
|
if (isset($attr['rel'])) { |
|
$rels = explode(' ', $attr['rel']); |
|
} else { |
|
$rels = array(); |
|
} |
|
if (isset($attr['target']) && !in_array('noopener', $rels)) { |
|
$rels[] = 'noopener'; |
|
} |
|
if (!empty($rels) || isset($attr['rel'])) { |
|
$attr['rel'] = implode(' ', $rels); |
|
} |
|
|
|
return $attr; |
|
} |
|
} |
|
|
|
|