PHP CHtmlPurifier类代码示例

 function actionSearch($q = null, $page = 1)
 {
     $pages = new CPagination();
     $pages->pageSize = 50;
     $pages->currentPage = $page;
     $p = new CHtmlPurifier();
     $q = CHtml::encode($p->purify($q));
     $searchCriteria = new stdClass();
     $searchCriteria->select = 'id';
     $searchCriteria->query = $q . '*';
     $searchCriteria->paginator = $pages;
     $searchCriteria->from = join(",", $this->indexes);
     // Получаем данные в виде массива
     $resArray = Yii::App()->search->searchRaw($searchCriteria);
     $news = null;
     if (is_array($resArray['matches'])) {
         $c = new CDbCriteria();
         $c->order = 'FIELD(id,' . join(",", array_keys($resArray['matches'])) . ')';
         $news = News::model()->findAllByPk(array_keys($resArray['matches']), $c);
     }
     $this->render("search_results", array('news' => $news));
 }

 /**
  * 对内容进行过滤  未使用
  */
 public static function htmlPurifier($content)
 {
     $p = new CHtmlPurifier();
     //过滤规则
     $p->options = array('URI.Disable' => true);
     return $p->purify($content);
 }

 public function Purify($value)
 {
     $p = new CHtmlPurifier();
     $p->options = array('HTML.Allowed' => 'strong,em,u,h1,h2,h3,h4');
     $cleanHtml = $p->purify($value);
     return $cleanHtml;
 }

 /**
  * @param \Solarium\QueryType\Select\Result\Result $ergebnisse
  * @return array();
  */
 public static function ergebnisse2FeedData($ergebnisse)
 {
     $data = array();
     $dokumente = $ergebnisse->getDocuments();
     $highlighting = $ergebnisse->getHighlighting();
     $purifier = new CHtmlPurifier();
     $purifier->options = array('URI.AllowedSchemes' => array('http' => true, 'https' => true));
     foreach ($dokumente as $dokument) {
         $model = Dokument::getDocumentBySolrId($dokument->id);
         $risitem = $model->getRISItem();
         if (!$risitem) {
             continue;
         }
         $link = $risitem->getLink();
         $highlightedDoc = $highlighting->getResult($dokument->id);
         $item = array("title" => $model->name . " (zu " . $risitem->getTypName() . " \"" . $risitem->getName() . "\"", "link" => $link, "content" => "", "dateCreated" => RISTools::date_iso2timestamp(str_replace("T", " ", str_replace("Z", "", $dokument->sort_datum))), "aenderung_guid" => $link);
         if ($highlightedDoc && count($highlightedDoc) > 0) {
             foreach ($highlightedDoc as $highlight) {
                 $item["content"] .= $purifier->purify(implode(' (...) ', $highlight)) . '<br/>';
             }
         }
         $data[] = $item;
     }
     return $data;
 }

 public function safehtml($attr, $params)
 {
     $p = new CHtmlPurifier();
     $p->options = Yii::app()->params["HTMLPurifierOptions"];
     $p->options["HTML.Allowed"] = "a[href],b,strong,i,em,u,small,sub,sup";
     $this->{$attr} = trim($p->purify($this->{$attr}));
 }

 public function safeTransform($content)
 {
     $content = $this->transform($content);
     $purifier = new CHtmlPurifier();
     $purifier->options = $this->purifierOptions;
     return $purifier->purify($content);
 }

 public function purifyText($attribute, $params)
 {
     $module = Yii::app()->getModule('comment');
     $p = new CHtmlPurifier();
     $p->options = ['HTML.Allowed' => $module->allowedTags];
     $this->{$attribute} = $p->purify($this->{$attribute});
 }

 /**
  * Manage the created fields
  */
 public function beforeSave()
 {
     if ($this->isNewRecord) {
         $this->created = time();
     }
     $p = new CHtmlPurifier();
     $this->subject = $p->purify($this->subject);
     return parent::beforeSave();
 }

	public function actionHtmlFilter()
	{
		$str = "fd'<script><b>fdsafds</b>alert('good')</script>d%#sds/ds\gs<a href='fdsa'>fdas</a>a@fd<b>fdsa<?php echo 'fdsad'; ?>fds</b>sa0";
		
		$p = new CHtmlPurifier();

		echo $p->processOutput($str);
		/* echo $p->purify($str); */
	}

 /**
  * Process a string with markup
  *
  * @abstract
  * @param string $input
  * @return string $output
  */
 public function process($input)
 {
     $out = $this->processMarkup($input);
     if ($this->purify) {
         $purifier = new CHtmlPurifier();
         $out = $purifier->purify($out);
     }
     return $out;
 }

 /**
  * Processes the captured output.
  * This method converts the content in markdown syntax to HTML code.
  * If {@link purifyOutput} is true, the HTML code will also be purified.
  * @param string $output the captured output to be processed
  * @see convert
  */
 public function processOutput($output)
 {
     $output = $this->transform($output);
     if ($this->purifyOutput) {
         $purifier = new CHtmlPurifier();
         $output = $purifier->purify($output);
     }
     parent::processOutput($output);
 }

 /**
  * @return array validation rules for model attributes.
  * @internal you should only define rules for those attributes that will receive user inputs
  */
 public function rules()
 {
     // On ajoute un filtre CHtmlPurifier avant l'enregistrement des données. Il sert ici moins à la protection contre
     // les attaques XSS qu'à s'assurer que le code HTML de l'actualité est valide.
     // Cette condition est indispensable pour que la classe DOMHelper puisse tronquer correctement
     // le texte pour construire des résumés (en page d'accueil par exemple)
     $htmlPurifier = new CHtmlPurifier();
     $htmlPurifier->setOptions(array('HTML.SafeIframe' => true, 'URI.SafeIframeRegexp' => '%www.youtube.com/embed/%'));
     return array(array('news_id, language_id, title', 'required'), array('title, description, keywords', 'length', 'max' => 255), array('language_id', 'exist', 'attributeName' => 'id', 'className' => 'Language'), array('news_id', 'exist', 'attributeName' => 'id', 'className' => 'News'), array('content', 'filter', 'filter' => array($htmlPurifier, 'purify')), array('tagsString', 'length', 'max' => 255), array('created_at, updated_at', 'safe'), array('news_id, language_id, title, slug, description, keywords, content, tagsString, tagIdFilter, enabled, eventDate', 'safe', 'on' => 'search'));
 }

 public static function filterString($string)
 {
     $string = strip_tags($string);
     $string = stripcslashes($string);
     $string = htmlspecialchars($string);
     $p = new CHtmlPurifier();
     $string = $p->purify($string);
     $string = addslashes($string);
     $string = str_replace("\r\n", "\n", $string);
     return $string;
 }

 public function run()
 {
     $this->markdown = CHtml::encode($this->markdown);
     $parserClass = $this->parserClass;
     $parser = new $parserClass();
     $html = $parser->parse($this->markdown);
     if ($this->purifyOutput) {
         $purifier = new CHtmlPurifier();
         $html = $purifier->purify($html);
     }
     $this->render('markdownView', array('content' => $html));
 }

 public function actionHtmlPurifier()
 {
     $user_input = null;
     if (isset($_POST['user_input'])) {
         $user_input = $_POST['user_input'];
     }
     $parser = new CHtmlPurifier();
     //create instance of CHtmlPurifier
     $user_input = $parser->purify($user_input);
     //we purify the $user_input
     $this->render("htmlpurifier", array('user_input' => $user_input));
 }