Admin Control Panel v2.0

✎ Editing: preserveYouTube.php ← Back

<?php

require_once 'common.php';

echo '<?xml version="1.0" encoding="UTF-8" ?>';

?><!DOCTYPE html

PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"

"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<head>

<title>HTML Purifier Preserve YouTube Smoketest</title>

</head>

<body>

<h1>HTML Purifier Preserve YouTube Smoketest</h1>

<?php

$string = '<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/BdU--T8rLns"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/BdU--T8rLns" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>

<object

classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

id="ooyalaPlayer_229z0_gbps1mrs" width="630" height="354"

codebase="http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab"><param

name="movie" value="http://player.ooyala.com/player.swf?embedCode=FpZnZwMTo1wqBF-ed2__OUBb3V4HR6za&version=2"

/><param name="bgcolor" value="#000000" /><param

name="allowScriptAccess" value="always" /><param

name="allowFullScreen" value="true" /><param name="flashvars"

value="embedType=noscriptObjectTag&embedCode=pteGRrMTpcKMyQ052c8NwYZ5M5FdSV3j"

/><embed src="http://player.ooyala.com/player.swf?embedCode=FpZnZwMTo1wqBF-ed2__OUBb3V4HR6za&version=2"

bgcolor="#000000" width="630" height="354"

name="ooyalaPlayer_229z0_gbps1mrs" align="middle" play="true"

loop="false" allowscriptaccess="always" allowfullscreen="true"

type="application/x-shockwave-flash"

flashvars="&embedCode=FpZnZwMTo1wqBF-ed2__OUBb3V4HR6za"

pluginspage="http://www.adobe.com/go/getflashplayer"></embed></object>

$regular_purifier = new HTMLPurifier();

$safeobject_purifier = new HTMLPurifier(array(

'HTML.SafeObject' => true,

'Output.FlashCompat' => true,

));

<h2>Unpurified</h2>

<p><a href="?break">Click here to see the unpurified version (breaks validation).</a></p>

<div><?php

if (isset($_GET['break'])) echo $string;

?></div>

<h2>Without YouTube exception</h2>

<div><?php

echo $regular_purifier->purify($string);

?></div>

<h2>With SafeObject exception and flash compatibility</h2>

<div><?php

echo $safeobject_purifier->purify($string);

?></div>

</body>

</html>

<?php

// vim: et sw=4 sts=4

Cancel