Microweber\Utils\Format::strip_unsafe PHP Method

strip_unsafe() public method

public strip_unsafe ( $string, $img = false )
    public function strip_unsafe($string, $img = false)
    {
        if (is_array($string)) {
            foreach ($string as $key => $val) {
                $string[$key] = $this->strip_unsafe($val, $img);
            }
            return $string;
        } else {
            // Unsafe HTML tags that members may abuse
            $unsafe = array('/<iframe(.*?)<\\/iframe>/is', '/<title(.*?)<\\/title>/is', '/<audio(.*?)<\\/audio>/is', '/<video(.*?)<\\/video>/is', '/<frame(.*?)<\\/frame>/is', '/<frameset(.*?)<\\/frameset>/is', '/<object(.*?)<\\/object>/is', '/<script(.*?)<\\/script>/is', '/<embed(.*?)<\\/embed>/is', '/<applet(.*?)<\\/applet>/is', '/<meta(.*?)>/is', '/<!doctype(.*?)>/is', '/<link(.*?)>/is', '/<style(.*?)<\\/style>/is', '/<body(.*?)>/is', '/<\\/body>/is', '/<head(.*?)>/is', '/<\\/head>/is', '/onload="(.*?)"/is', '/onunload="(.*?)"/is', '/onafterprint="(.*?)"/is', '/onbeforeprint="(.*?)"/is', '/onbeforeunload="(.*?)"/is', '/onerrorNew="(.*?)"/is', '/onhaschange="(.*?)"/is', '/onoffline="(.*?)"/is', '/ononline="(.*?)"/is', '/onpagehide="(.*?)"/is', '/onpageshow="(.*?)"/is', '/onpopstate="(.*?)"/is', '/onredo="(.*?)"/is', '/onresize="(.*?)"/is', '/onstorage="(.*?)"/is', '/onundo="(.*?)"/is', '/onunload="(.*?)"/is', '/onblur="(.*?)"/is', '/onchange="(.*?)"/is', '/oncontextmenu="(.*?)"/is', '/onfocus="(.*?)"/is', '/onformchange="(.*?)"/is', '/onforminput="(.*?)"/is', '/oninput="(.*?)"/is', '/oninvalid="(.*?)"/is', '/onreset="(.*?)"/is', '/onselect="(.*?)"/is', '/onblur="(.*?)"/is', '/onsubmit="(.*?)"/is', '/onkeydown="(.*?)"/is', '/onkeypress="(.*?)"/is', '/onkeyup="(.*?)"/is', '/onclick="(.*?)"/is', '/ondblclick="(.*?)"/is', '/ondrag="(.*?)"/is', '/ondragend="(.*?)"/is', '/ondragenter="(.*?)"/is', '/ondragleave="(.*?)"/is', '/ondragover="(.*?)"/is', '/ondragstart="(.*?)"/is', '/ondrop="(.*?)"/is', '/onmousedown="(.*?)"/is', '/onmousemove="(.*?)"/is', '/onmouseout="(.*?)"/is', '/onmouseover="(.*?)"/is', '/onmousewheel="(.*?)"/is', '/onmouseup="(.*?)"/is', '/ondragleave="(.*?)"/is', '/onabort="(.*?)"/is', '/oncanplay="(.*?)"/is', '/oncanplaythrough="(.*?)"/is', '/ondurationchange="(.*?)"/is', '/onended="(.*?)"/is', '/onerror="(.*?)"/is', '/onloadedmetadata="(.*?)"/is', '/onloadstart="(.*?)"/is', '/onpause="(.*?)"/is', '/onplay="(.*?)"/is', '/onabort="(.*?)"/is', '/onplaying="(.*?)"/is', '/onprogress="(.*?)"/is', '/onratechange="(.*?)"/is', '/onreadystatechange="(.*?)"/is', '/onseeked="(.*?)"/is', '/onseeking="(.*?)"/is', '/onstalled="(.*?)"/is', '/onsuspend="(.*?)"/is', '/ontimeupdate="(.*?)"/is', '/onvolumechange="(.*?)"/is', '/onwaiting="(.*?)"/is', '/href="javascript:[^"]+"/', '/href=javascript:/is', '/<html(.*?)>/is', '/<iframe(.*?)>/is', '/<iframe(.*?)/is', '/<\\/html>/is');
            // Remove graphic too if the user wants
            if ($img == true) {
                $unsafe[] = '/<img(.*?)>/is';
            }
            // Remove these tags and all parameters within them
            $string = preg_replace($unsafe, '', $string);
            return $string;
        }
    }