valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

no_iframes: remove everything except good iframes

This commit is contained in:
Andrew Dolgov 2014-11-25 18:40:19 +03:00
parent 2c30a62e77
commit e8a0d290c0
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
plugins/no_iframes/init.php
View File

@ -4,7 +4,7 @@ class No_Iframes extends Plugin {
function about() { function about() {
return array(1.0, return array(1.0,
"Remove embedded iframes", "Remove embedded iframes (unless whitelisted)",
"fox"); "fox");
} }
@ -16,7 +16,13 @@ class No_Iframes extends Plugin {
function hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes) { function hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes) {
$allowed_elements = array_diff($allowed_elements, array("iframe")); $xpath = new DOMXpath($doc);
$entries = $xpath->query('//iframe');
foreach ($entries as $entry) {
if (!iframe_whitelisted($entry))
$entry->parentNode->removeChild($entry);
}
return array($doc, $allowed_elements, $disallowed_attributes); return array($doc, $allowed_elements, $disallowed_attributes);
} }