<?php
/**
* @brief Wrapper class for managing DOMDocument objects
* @author <a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
* @copyright (c) Invision Power Services, Inc.
* @license https://www.invisioncommunity.com/legal/standards/
* @package Invision Community
* @since 5 July 2016
*/
namespace IPS\Xml;
/* To prevent PHP errors (extending class does not exist) revealing path */
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
{
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
exit;
}
/**
* Wrapper class for managing DOMDocument objects
*/
class _DOMDocument extends \DOMDocument
{
/**
* Load XML from a file
*
* @param string $filename The filename
* @param int $options Bitmask of LIBXML_* constants
* @return bool
* @note We are disabling the entity loader after opening the content to prevent XXE
*/
public function load( $filename, $options=0 )
{
libxml_use_internal_errors(TRUE);
$entityLoaderValue = libxml_disable_entity_loader( false );
$opened = parent::load( $filename, $options );
libxml_disable_entity_loader( $entityLoaderValue );
return $opened;
}
/**
* Load HTML from a string
*
* @param string $source The HTML to open
* @param int $options Bitmask of LIBXML_* constants
* @return bool
* @note We are disabling the entity loader after opening the content to prevent XXE
*/
public function loadHTML( $source, $options=0 )
{
libxml_use_internal_errors(TRUE);
$entityLoaderValue = libxml_disable_entity_loader( false );
$opened = parent::loadHTML( $source, $options );
libxml_disable_entity_loader( $entityLoaderValue );
return $opened;
}
/**
* Load HTML from a file
*
* @param string $filename The filename
* @param int $options Bitmask of LIBXML_* constants
* @return bool
* @note We are disabling the entity loader after opening the content to prevent XXE
*/
public function loadHTMLFile( $filename, $options=0 )
{
libxml_use_internal_errors(TRUE);
$entityLoaderValue = libxml_disable_entity_loader( false );
$opened = parent::loadHTMLFile( $filename, $options );
libxml_disable_entity_loader( $entityLoaderValue );
return $opened;
}
/**
* Load XML from a string
*
* @param string $source The HTML to open
* @param int $options Bitmask of LIBXML_* constants
* @return bool
* @note We are disabling the entity loader after opening the content to prevent XXE
*/
public function loadXML( $source, $options=0 )
{
libxml_use_internal_errors(TRUE);
$entityLoaderValue = libxml_disable_entity_loader( false );
$opened = parent::loadXML( $source, $options );
libxml_disable_entity_loader( $entityLoaderValue );
return $opened;
}
/**
* Prefix HTML content with certain HTML to force DOMDocument to treat the content as UTF-8-encoded HTML
*
* @param string $content HTML content to prefix
* @return string
*/
static public function wrapHtml( $content )
{
return "<!DOCTYPE html><head><meta http-equiv='Content-Type' content='text/html; charset=utf-8'/></head>" . $content;
}
}