sanitize: properly handle cached content in archived articles

master
Andrew Dolgov 8 years ago
parent c4ebf01e69
commit 7818bfde0b

@ -893,29 +893,47 @@
$doc->loadHTML($charset_hack . $res); $doc->loadHTML($charset_hack . $res);
$xpath = new DOMXPath($doc); $xpath = new DOMXPath($doc);
$entries = $xpath->query('(//a[@href]|//img[@src]|//video/source[@src])');
$ttrss_uses_https = parse_url(get_self_url_prefix(), PHP_URL_SCHEME) === 'https'; $ttrss_uses_https = parse_url(get_self_url_prefix(), PHP_URL_SCHEME) === 'https';
$rewrite_base_url = $site_url ? $site_url : SELF_URL_PATH;
$entries = $xpath->query('(//a[@href]|//img[@src]|//video/source[@src])');
foreach ($entries as $entry) { foreach ($entries as $entry) {
if ($site_url) { if ($entry->hasAttribute('href')) {
$entry->setAttribute('href',
rewrite_relative_url($rewrite_base_url, $entry->getAttribute('href')));
$entry->setAttribute('rel', 'noopener noreferrer');
}
if ($entry->hasAttribute('src')) {
$src = rewrite_relative_url($rewrite_base_url, $entry->getAttribute('src'));
$extension = $entry->tagName == 'source' ? '.mp4' : '.png';
$cached_filename = CACHE_DIR . '/images/' . sha1($src) . $extension;
if ($entry->hasAttribute('href')) { if (file_exists($cached_filename)) {
$entry->setAttribute('href', $src = SELF_URL_PATH . '/public.php?op=cached_image&hash=' . sha1($src) . $extension;
rewrite_relative_url($site_url, $entry->getAttribute('href')));
if ($entry->hasAttribute('srcset')) {
$entry->removeAttribute('srcset');
}
$entry->setAttribute('rel', 'noopener noreferrer'); if ($entry->hasAttribute('sizes')) {
$entry->removeAttribute('sizes');
}
} }
if ($entry->hasAttribute('src')) { $entry->setAttribute('src', $src);
$src = rewrite_relative_url($site_url, $entry->getAttribute('src')); }
$extension = $entry->tagName == 'source' ? '.mp4' : '.png'; if ($entry->nodeName == 'img') {
$cached_filename = CACHE_DIR . '/images/' . sha1($src) . $extension;
if (file_exists($cached_filename)) { if ($entry->hasAttribute('src')) {
$src = SELF_URL_PATH . '/public.php?op=cached_image&hash=' . sha1($src) . $extension; $is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';
if ($ttrss_uses_https && !$is_https_url) {
if ($entry->hasAttribute('srcset')) { if ($entry->hasAttribute('srcset')) {
$entry->removeAttribute('srcset'); $entry->removeAttribute('srcset');
@ -925,42 +943,22 @@
$entry->removeAttribute('sizes'); $entry->removeAttribute('sizes');
} }
} }
$entry->setAttribute('src', $src);
} }
if ($entry->nodeName == 'img') { if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
$force_remove_images || $_SESSION["bw_limit"]) {
if ($entry->hasAttribute('src')) { $p = $doc->createElement('p');
$is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';
if ($ttrss_uses_https && !$is_https_url) { $a = $doc->createElement('a');
$a->setAttribute('href', $entry->getAttribute('src'));
if ($entry->hasAttribute('srcset')) { $a->appendChild(new DOMText($entry->getAttribute('src')));
$entry->removeAttribute('srcset'); $a->setAttribute('target', '_blank');
}
if ($entry->hasAttribute('sizes')) { $p->appendChild($a);
$entry->removeAttribute('sizes');
}
}
}
if (($owner && get_pref("STRIP_IMAGES", $owner)) || $entry->parentNode->replaceChild($p, $entry);
$force_remove_images || $_SESSION["bw_limit"]) {
$p = $doc->createElement('p');
$a = $doc->createElement('a');
$a->setAttribute('href', $entry->getAttribute('src'));
$a->appendChild(new DOMText($entry->getAttribute('src')));
$a->setAttribute('target', '_blank');
$p->appendChild($a);
$entry->parentNode->replaceChild($p, $entry);
}
} }
} }

Loading…
Cancel
Save