Server IP : 104.21.14.103 / Your IP : 3.15.26.145 Web Server : LiteSpeed System : Linux business53.web-hosting.com 4.18.0-553.lve.el8.x86_64 #1 SMP Mon May 27 15:27:34 UTC 2024 x86_64 User : giankuin ( 1871) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /proc/self/root/proc/thread-self/root/home/giankuin/thietke365.net/wp-content/plugins/mailpoet/lib/Form/ |
Upload File : |
<?php // phpcs:ignore SlevomatCodingStandard.TypeHints.DeclareStrictTypes.DeclareStrictTypesMissing namespace MailPoet\Form; if (!defined('ABSPATH')) exit; use MailPoet\WP\Functions as WPFunctions; class FormHtmlSanitizer { /** * @var array * Configuration of allowed tags for form blocks that may contain some html. * Covers all tags available in the form editor's Rich Text component and which we allow in checkbox label. * This doesn't cover CustomHTML block. */ const ALLOWED_HTML = [ 'a' => [ 'href' => true, 'title' => true, 'data-id' => true, 'data-type' => true, 'target' => true, 'rel' => true, ], 'br' => [], 'code' => [], 'em' => [], 'img' => [ 'class' => true, 'style' => true, 'src' => true, 'alt' => true, ], 'kbd' => [], 'span' => [ 'style' => true, 'data-font' => true, 'class' => true, ], 'mark' => [ 'style' => true, 'class' => true, ], 'strong' => [], 'sub' => [], 'sup' => [], 's' => [], ]; /** @var WPFunctions */ private $wp; public function __construct( WPFunctions $wp ) { $this->wp = $wp; } public function sanitize(string $html): string { return $this->wp->wpKses($html, self::ALLOWED_HTML); } }