2e24a40d68
- Fix: Notifiable-Trait zum User-Model hinzugefuegt (behebt notify()-500er) - Installer: SMTP-Verbindungstest mit EsmtpTransport + Ueberspringen-Link - Admin: Neuer E-Mail-Tab mit SMTP-Konfiguration + Verbindungstest - Admin: Lazy Quill-Initialisierung (nur sichtbare Locale wird geladen) - Uebersetzungen: 17 neue Mail-Keys in allen 6 Sprachen Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
38 lines
1022 B
PHP
Executable File
38 lines
1022 B
PHP
Executable File
<?php
|
|
|
|
// must be called POST validation
|
|
|
|
/**
|
|
* Adds rel="noopener" to any links which target a different window
|
|
* than the current one. This is used to prevent malicious websites
|
|
* from silently replacing the original window, which could be used
|
|
* to do phishing.
|
|
* This transform is controlled by %HTML.TargetNoopener.
|
|
*/
|
|
class HTMLPurifier_AttrTransform_TargetNoopener extends HTMLPurifier_AttrTransform
|
|
{
|
|
/**
|
|
* @param array $attr
|
|
* @param HTMLPurifier_Config $config
|
|
* @param HTMLPurifier_Context $context
|
|
* @return array
|
|
*/
|
|
public function transform($attr, $config, $context)
|
|
{
|
|
if (isset($attr['rel'])) {
|
|
$rels = explode(' ', $attr['rel']);
|
|
} else {
|
|
$rels = array();
|
|
}
|
|
if (isset($attr['target']) && !in_array('noopener', $rels)) {
|
|
$rels[] = 'noopener';
|
|
}
|
|
if (!empty($rels) || isset($attr['rel'])) {
|
|
$attr['rel'] = implode(' ', $rels);
|
|
}
|
|
|
|
return $attr;
|
|
}
|
|
}
|
|
|