Class HTMLPurifier_Injector_SafeObject
Adds important param elements to inside of object in order to make things
safe.
-
HTMLPurifier_Injector
-
HTMLPurifier_Injector_SafeObject
Methods summary
public
|
|
public
|
|
public
|
#
handleEnd( mixed & $token )
Handler that is called when an end token is processed
Handler that is called when an end token is processed
Overrides
|
Properties summary
public
string
|
$name
|
'SafeObject' |
|
public
array
|
$needed
|
array('object', 'param') |
|
protected
array
|
$objectStack
|
array() |
|
protected
array
|
$paramStack
|
array() |
|
protected
array
|
$addParam
|
array(
'allowScriptAccess' => 'never',
'allowNetworking' => 'internal',
) |
#
Keep this synchronized with AttrTransform/SafeParam.php.
Keep this synchronized with AttrTransform/SafeParam.php.
Type
array
|
protected
array
|
$allowedParam
|
array(
'wmode' => true,
'movie' => true,
'flashvars' => true,
'src' => true,
'allowFullScreen' => true,
) |
|