Fix displaying messages with invalid self-closing HTML tags (#1489137)

pull/79/head
Aleksander Machniak 12 years ago
parent 0279879871
commit cb3e2fe0c2

@ -1,6 +1,7 @@
CHANGELOG Roundcube Webmail CHANGELOG Roundcube Webmail
=========================== ===========================
- Fix displaying messages with invalid self-closing HTML tags (#1489137)
- Fix PHP warning when responding to a message with many Return-Path headers (#1489136) - Fix PHP warning when responding to a message with many Return-Path headers (#1489136)
- Added user preference to open all popups as standard windows - Added user preference to open all popups as standard windows
- Fix unintentional compose window resize (#1489114) - Fix unintentional compose window resize (#1489114)

@ -113,10 +113,9 @@ class rcube_washtml
'type', 'rows', 'cols', 'disabled', 'readonly', 'checked', 'multiple', 'value' 'type', 'rows', 'cols', 'disabled', 'readonly', 'checked', 'multiple', 'value'
); );
/* Block elements which could be empty but cannot be returned in short form (<tag />) */ /* Elements which could be empty and be returned in short form (<tag />) */
static $block_elements = array('div', 'p', 'pre', 'blockquote', 'a', 'font', 'center', static $void_elements = array('area', 'base', 'br', 'col', 'command', 'embed', 'hr',
'table', 'ul', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ol', 'dl', 'strong', 'img', 'input', 'keygen', 'link', 'meta', 'param', 'source', 'track', 'wbr'
'i', 'b', 'u', 'span',
); );
/* State for linked objects in HTML */ /* State for linked objects in HTML */
@ -134,8 +133,8 @@ class rcube_washtml
/* Ignore these HTML tags but process their content */ /* Ignore these HTML tags but process their content */
private $_ignore_elements = array(); private $_ignore_elements = array();
/* Block elements which could be empty but cannot be returned in short form (<tag />) */ /* Elements which could be empty and be returned in short form (<tag />) */
private $_block_elements = array(); private $_void_elements = array();
/* Allowed HTML attributes */ /* Allowed HTML attributes */
private $_html_attribs = array(); private $_html_attribs = array();
@ -152,9 +151,9 @@ class rcube_washtml
$this->_html_elements = array_flip((array)$p['html_elements']) + array_flip(self::$html_elements) ; $this->_html_elements = array_flip((array)$p['html_elements']) + array_flip(self::$html_elements) ;
$this->_html_attribs = array_flip((array)$p['html_attribs']) + array_flip(self::$html_attribs); $this->_html_attribs = array_flip((array)$p['html_attribs']) + array_flip(self::$html_attribs);
$this->_ignore_elements = array_flip((array)$p['ignore_elements']) + array_flip(self::$ignore_elements); $this->_ignore_elements = array_flip((array)$p['ignore_elements']) + array_flip(self::$ignore_elements);
$this->_block_elements = array_flip((array)$p['block_elements']) + array_flip(self::$block_elements); $this->_void_elements = array_flip((array)$p['void_elements']) + array_flip(self::$void_elements);
unset($p['html_elements'], $p['html_attribs'], $p['ignore_elements'], $p['block_elements']); unset($p['html_elements'], $p['html_attribs'], $p['ignore_elements'], $p['void_elements']);
$this->config = $p + array('show_washed' => true, 'allow_remote' => false, 'cid_map' => array()); $this->config = $p + array('show_washed' => true, 'allow_remote' => false, 'cid_map' => array());
} }
@ -321,7 +320,7 @@ class rcube_washtml
else if (isset($this->_html_elements[$tagName])) { else if (isset($this->_html_elements[$tagName])) {
$content = $this->dumpHtml($node, $level); $content = $this->dumpHtml($node, $level);
$dump .= '<' . $tagName . $this->wash_attribs($node) . $dump .= '<' . $tagName . $this->wash_attribs($node) .
($content != '' || isset($this->_block_elements[$tagName]) ? ">$content</$tagName>" : ' />'); ($content === '' && isset($this->_void_elements[$tagName]) ? ' />' : ">$content</$tagName>");
} }
else if (isset($this->_ignore_elements[$tagName])) { else if (isset($this->_ignore_elements[$tagName])) {
$dump .= '<!-- ' . htmlspecialchars($tagName, ENT_QUOTES) . ' not allowed -->'; $dump .= '<!-- ' . htmlspecialchars($tagName, ENT_QUOTES) . ' not allowed -->';

@ -55,4 +55,17 @@ class Framework_Washtml extends PHPUnit_Framework_TestCase
$this->assertEquals('<!-- html ignored --><!-- body ignored --><p>test</p>', $washed, "HTML invalid comments (#1487759)"); $this->assertEquals('<!-- html ignored --><!-- body ignored --><p>test</p>', $washed, "HTML invalid comments (#1487759)");
} }
/**
* Test fixing of invalid self-closing elements (#1489137)
*/
function test_self_closing()
{
$html = "<textarea>test";
$washer = new rcube_washtml;
$washed = $washer->wash($html);
$this->assertRegExp('|<textarea>test</textarea>|', $washed, "Self-closing textarea (#1489137)");
}
} }

Loading…
Cancel
Save