summaryrefslogtreecommitdiff
path: root/classes/Sanitizer.php
diff options
context:
space:
mode:
authorAndrew Dolgov <fox@fakecake.org>2024-10-01 16:00:34 +0300
committerAndrew Dolgov <fox@fakecake.org>2024-10-01 16:00:34 +0300
commit884fd92f1320d17daebb772297da03fb2cfa59b8 (patch)
tree3aa80af1df6ffa1d70f21f9fc4411f451c8b6c56 /classes/Sanitizer.php
parent8fcc68baf5b0ff964a0a4a045353462586e0e316 (diff)
drop opentelemetry
Diffstat (limited to 'classes/Sanitizer.php')
-rw-r--r--classes/Sanitizer.php8
1 files changed, 5 insertions, 3 deletions
diff --git a/classes/Sanitizer.php b/classes/Sanitizer.php
index 2a5b031df..0bbb30586 100644
--- a/classes/Sanitizer.php
+++ b/classes/Sanitizer.php
@@ -9,6 +9,8 @@ class Sanitizer {
$entries = $xpath->query('//*');
foreach ($entries as $entry) {
+ /** @var DOMElement $entry */
+
if (!in_array($entry->nodeName, $allowed_elements)) {
$entry->parentNode->removeChild($entry);
}
@@ -63,9 +65,6 @@ class Sanitizer {
* @return false|string The HTML, or false if an error occurred.
*/
public static function sanitize(string $str, ?bool $force_remove_images = false, ?int $owner = null, ?string $site_url = null, ?array $highlight_words = null, ?int $article_id = null) {
- $span = OpenTelemetry\API\Trace\Span::getCurrent();
- $span->addEvent("Sanitizer::sanitize");
-
if (!$owner && isset($_SESSION["uid"]))
$owner = $_SESSION["uid"];
@@ -81,6 +80,7 @@ class Sanitizer {
$entries = $xpath->query('(//a[@href]|//img[@src]|//source[@srcset|@src]|//video[@poster])');
+ /** @var DOMElement $entry */
foreach ($entries as $entry) {
if ($entry->hasAttribute('href')) {
@@ -143,6 +143,8 @@ class Sanitizer {
}
$entries = $xpath->query('//iframe');
+
+ /** @var DOMElement $entry */
foreach ($entries as $entry) {
if (!self::iframe_whitelisted($entry)) {
$entry->setAttribute('sandbox', 'allow-scripts');