?HAMA

Edit File Size: 3.10 KB

/home/nshryvcy/radiantskinclinics.org/wp-content/plugins/woocommerce/src/Internal/Utilities/HtmlSanitizer.php

Text Base64

<?php

namespace Automattic\WooCommerce\Internal\Utilities;

/**
 * Utility for re-using WP Kses-based sanitization rules.
 */
class HtmlSanitizer {
	/**
	 * Rules for allowing minimal HTML (breaks, images, paragraphs and spans) without any links.
	 */
	public const LOW_HTML_BALANCED_TAGS_NO_LINKS = array(
		'pre_processors'  => array(
			'stripslashes',
			'force_balance_tags',
		),
		'wp_kses_rules'   => array(
			'br'   => true,
			'img'  => array(
				'alt'   => true,
				'class' => true,
				'src'   => true,
				'title' => true,
			),
			'p'    => array(
				'class' => true,
			),
			'span' => array(
				'class' => true,
				'title' => true,
			),
		),
	);

/**
	 * Sanitizes a chunk of HTML, by following the same rules as `wp_kses_post()` but also allowing
	 * the style element to be supplied.
	 *
	 * @param string $html The HTML to be sanitized.
	 *
	 * @return string
	 */
	public function styled_post_content( string $html ): string {
		$rules          = wp_kses_allowed_html( 'post' );
		$rules['style'] = true;
		return wp_kses( $html, $rules );
	}

/**
	 * Sanitizes the HTML according to the provided rules.
	 *
	 * @see wp_kses()
	 *
	 * @param string $html HTML string to be sanitized.
	 * @param array  $sanitizer_rules {
	 *     Optional and defaults to self::TRIMMED_BALANCED_LOW_HTML_NO_LINKS. Otherwise, one or more of the following
	 *     keys should be set.
	 *
	 *     @type array $pre_processors  Callbacks to run before invoking `wp_kses()`.
	 *     @type array $wp_kses_rules   Element names and attributes to allow, per `wp_kses()`.
	 * }
	 *
	 * @return string
	 */
	public function sanitize( string $html, array $sanitizer_rules = self::LOW_HTML_BALANCED_TAGS_NO_LINKS ): string {
		if ( isset( $sanitizer_rules['pre_processors'] ) && is_array( $sanitizer_rules['pre_processors'] ) ) {
			$html = $this->apply_string_callbacks( $sanitizer_rules['pre_processors'], $html );
		}

// If no KSES rules are specified, assume all HTML should be stripped.
		$kses_rules = isset( $sanitizer_rules['wp_kses_rules'] ) && is_array( $sanitizer_rules['wp_kses_rules'] )
			? $sanitizer_rules['wp_kses_rules']
			: array();

return wp_kses( $html, $kses_rules );
	}

/**
	 * Applies callbacks used to process the string before and after wp_kses().
	 *
	 * If a callback is invalid we will short-circuit and return an empty string, on the grounds that it is better to
	 * output nothing than risky HTML. We also call the problem out via _doing_it_wrong() to highlight the problem (and
	 * increase the chances of this being caught during development).
	 *
	 * @param callable[] $callbacks The callbacks used to mutate the string.
	 * @param string     $string    The string being processed.
	 *
	 * @return string
	 */
	private function apply_string_callbacks( array $callbacks, string $string ): string {
		foreach ( $callbacks as $callback ) {
			if ( ! is_callable( $callback ) ) {
				_doing_it_wrong( __CLASS__ . '::apply', esc_html__( 'String processors must be an array of valid callbacks.', 'woocommerce' ), esc_html( WC()->version ) );
				return '';
			}

$string = (string) $callback( $string );
		}

return $string;
	}
}

Exit & Reset Text mode: syntax highlighting auto-detects file type.

Name	Size	Perms	Modified	Actions
ArrayUtil.php	3.07 KB	lrw-r--r--	2025-11-24 23:10:10	Edit Download recursive recursive
BlocksUtil.php	2.36 KB	lrw-r--r--	2026-01-26 10:40:36	Edit Download recursive recursive
COTMigrationUtil.php	6.04 KB	lrw-r--r--	2025-05-12 21:07:28	Edit Download recursive recursive
DatabaseUtil.php	16.10 KB	lrw-r--r--	2024-09-23 20:44:04	Edit Download recursive recursive
FilesystemUtil.php	7.63 KB	lrw-r--r--	2026-03-30 17:12:24	Edit Download recursive recursive
HtmlSanitizer.php	3.10 KB	lrw-r--r--	2024-04-30 19:35:34	Edit Download recursive recursive
LegacyRestApiStub.php	6.65 KB	lrw-r--r--	2024-12-18 22:19:16	Edit Download recursive recursive
PluginInstaller.php	14.01 KB	lrw-r--r--	2024-12-18 22:19:16	Edit Download recursive recursive
ProductUtil.php	1.16 KB	lrw-r--r--	2025-10-06 17:56:06	Edit Download recursive recursive
Types.php	1.97 KB	lrw-r--r--	2024-12-16 15:24:32	Edit Download recursive recursive
URL.php	13.10 KB	lrw-r--r--	2024-12-16 15:24:32	Edit Download recursive recursive
URLException.php	191 B	lrw-r--r--	2022-04-20 06:50:54	Edit Download recursive recursive
Users.php	9.47 KB	lrw-r--r--	2026-02-23 17:58:34	Edit Download recursive recursive
WebhookUtil.php	5.37 KB	lrw-r--r--	2024-12-18 22:19:16	Edit Download recursive recursive

Directory Contents