FM / URIFilter

/home/techb158/immovalet.com/vendor/ezyang/htmlpurifier/library/HTMLPurifier/URIFilter/

/home/techb158/immovalet.com/vendor/ezyang/htmlpurifier/library/HTMLPurifier/URIFilter

Name	Size	Mode	Actions
DisableExternal.php	1284	0644	edit dl rm
DisableExternalResources.php	584	0644	edit dl rm
DisableResources.php	462	0644	edit dl rm
HostBlacklist.php	1152	0644	edit dl rm
MakeAbsolute.php	4961	0644	edit dl rm
Munge.php	3139	0644	edit dl rm
SafeIframe.php	1714	0644	edit dl rm

Edit: /home/techb158/immovalet.com/vendor/ezyang/htmlpurifier/library/HTMLPurifier/URIFilter/Munge.php (3139B)

<?php

class HTMLPurifier_URIFilter_Munge extends HTMLPurifier_URIFilter
{
    /**
     * @type string
     */
    public $name = 'Munge';

/**
     * @type bool
     */
    public $post = true;

/**
     * @type string
     */
    private $target;

/**
     * @type HTMLPurifier_URIParser
     */
    private $parser;

/**
     * @type bool
     */
    private $doEmbed;

/**
     * @type string
     */
    private $secretKey;

/**
     * @type array
     */
    protected $replace = array();

/**
     * @param HTMLPurifier_Config $config
     * @return bool
     */
    public function prepare($config)
    {
        $this->target = $config->get('URI.' . $this->name);
        $this->parser = new HTMLPurifier_URIParser();
        $this->doEmbed = $config->get('URI.MungeResources');
        $this->secretKey = $config->get('URI.MungeSecretKey');
        if ($this->secretKey && !function_exists('hash_hmac')) {
            throw new Exception("Cannot use %URI.MungeSecretKey without hash_hmac support.");
        }
        return true;
    }

/**
     * @param HTMLPurifier_URI $uri
     * @param HTMLPurifier_Config $config
     * @param HTMLPurifier_Context $context
     * @return bool
     */
    public function filter(&$uri, $config, $context)
    {
        if ($context->get('EmbeddedURI', true) && !$this->doEmbed) {
            return true;
        }

$scheme_obj = $uri->getSchemeObj($config, $context);
        if (!$scheme_obj) {
            return true;
        } // ignore unknown schemes, maybe another postfilter did it
        if (!$scheme_obj->browsable) {
            return true;
        } // ignore non-browseable schemes, since we can't munge those in a reasonable way
        if ($uri->isBenign($config, $context)) {
            return true;
        } // don't redirect if a benign URL

$this->makeReplace($uri, $config, $context);
        $this->replace = array_map('rawurlencode', $this->replace);

$new_uri = strtr($this->target, $this->replace);
        $new_uri = $this->parser->parse($new_uri);
        // don't redirect if the target host is the same as the
        // starting host
        if ($uri->host === $new_uri->host) {
            return true;
        }
        $uri = $new_uri; // overwrite
        return true;
    }

/**
     * @param HTMLPurifier_URI $uri
     * @param HTMLPurifier_Config $config
     * @param HTMLPurifier_Context $context
     */
    protected function makeReplace($uri, $config, $context)
    {
        $string = $uri->toString();
        // always available
        $this->replace['%s'] = $string;
        $this->replace['%r'] = $context->get('EmbeddedURI', true);
        $token = $context->get('CurrentToken', true);
        $this->replace['%n'] = $token ? $token->name : null;
        $this->replace['%m'] = $context->get('CurrentAttr', true);
        $this->replace['%p'] = $context->get('CurrentCSSProperty', true);
        // not always available
        if ($this->secretKey) {
            $this->replace['%t'] = hash_hmac("sha256", $string, $this->secretKey);
        }
    }
}

// vim: et sw=4 sts=4

cmd: