Seditio Source
Root |
./othercms/phpBB3/vendor/s9e/text-formatter/src/Configurator/TemplateChecks/DisallowDynamicElementNames.php
<?php

/**
* @package   s9e\TextFormatter
* @copyright Copyright (c) 2010-2021 The s9e authors
* @license   http://www.opensource.org/licenses/mit-license.php The MIT License
*/
namespace s9e\TextFormatter\Configurator\TemplateChecks;

use
DOMElement;
use
s9e\TextFormatter\Configurator\Exceptions\UnsafeTemplateException;
use
s9e\TextFormatter\Configurator\Items\Tag;
use
s9e\TextFormatter\Configurator\TemplateCheck;

class
DisallowDynamicElementNames extends TemplateCheck
{
   
/**
    * Test for the presence of an <xsl:element/> node using a dynamic name
    *
    * @param  DOMElement $template <xsl:template/> node
    * @param  Tag        $tag      Tag this template belongs to
    * @return void
    */
   
public function check(DOMElement $template, Tag $tag)
    {
       
$nodes = $template->getElementsByTagNameNS(self::XMLNS_XSL, 'element');
        foreach (
$nodes as $node)
        {
            if (
strpos($node->getAttribute('name'), '{') !== false)
            {
                throw new
UnsafeTemplateException('Dynamic <xsl:element/> names are disallowed', $node);
            }
        }
    }
}