PHP rcube_utils::mod_css_styles示例

function rcmail_mod_css_styles($source, $container_id, $allow_remote = false)
{
    return rcube_utils::mod_css_styles($source, $container_id, $allow_remote);
}

示例#2

显示文件

文件： Utils.php 项目： netcon-source/roundcubemail

 /**
  * rcube_utils::mod_css_styles()
  */
 function test_mod_css_styles_xss()
 {
     $mod = rcube_utils::mod_css_styles("body.main2cols { background-image: url('../images/leftcol.png'); }", 'rcmbody');
     $this->assertEquals("/* evil! */", $mod, "No url() values allowed");
     $mod = rcube_utils::mod_css_styles("@import url('http://localhost/somestuff/css/master.css');", 'rcmbody');
     $this->assertEquals("/* evil! */", $mod, "No import statements");
     $mod = rcube_utils::mod_css_styles("left:expression(document.body.offsetWidth-20)", 'rcmbody');
     $this->assertEquals("/* evil! */", $mod, "No expression properties");
     $mod = rcube_utils::mod_css_styles("left:exp/*  */ression( alert(&#039;xss3&#039;) )", 'rcmbody');
     $this->assertEquals("/* evil! */", $mod, "Don't allow encoding quirks");
     $mod = rcube_utils::mod_css_styles("background:\\0075\\0072\\006c( javascript:alert(&#039;xss&#039;) )", 'rcmbody');
     $this->assertEquals("/* evil! */", $mod, "Don't allow encoding quirks (2)");
 }

示例#3

显示文件

文件： bc.php 项目： JotapePinheiro/roundcubemail

function rcmail_mod_css_styles($source, $container_id, $allow_remote = false)
{
    _deprecation_warning(__FUNCTION__);
    return rcube_utils::mod_css_styles($source, $container_id, $allow_remote);
}