PKPString::stripUnsafeHtml PHP Method

stripUnsafeHtml() static public method

..) attributes, javascript: urls, and special characters.
static public stripUnsafeHtml ( $input ) : string
$input string input string
return string
    static function stripUnsafeHtml($input)
    {
        require_once 'lib/pkp/lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier.path.php';
        require_once 'HTMLPurifier.includes.php';
        static $purifier;
        if (!isset($purifier)) {
            $config = HTMLPurifier_Config::createDefault();
            $config->set('Core.Encoding', Config::getVar('i18n', 'client_charset'));
            $config->set('HTML.Doctype', 'HTML 4.01 Transitional');
            $config->set('HTML.Allowed', Config::getVar('security', 'allowed_html'));
            $config->set('Cache.SerializerPath', 'cache');
            $purifier = new HTMLPurifier($config);
        }
        return $purifier->purify($input);
    }

Usage Example

 /**
  * Extracts variables for a given column from a data element
  * so that they may be assigned to template before rendering.
  * @param $row GridRow
  * @param $column GridColumn
  * @return array
  */
 function getTemplateVarsFromRowColumn($row, $column)
 {
     $element =& $row->getData();
     $columnId = $column->getId();
     assert(!empty($columnId));
     switch ($columnId) {
         case 'url':
             return array('label' => '<a href="' . PKPString::stripUnsafeHtml($element['url']) . '" target="_blank">' . PKPString::stripUnsafeHtml($element['url']) . '</a>');
         case 'shares':
             return array('label' => $element['shares']);
     }
 }
All Usage Examples Of PKPString::stripUnsafeHtml