htmlpurifier 질문요 채택완료

</p>

<p>// <a href="http://htmlpurifier.org/" target="_blank" rel="noopener noreferrer">http://htmlpurifier.org/</a>

// Standards-Compliant HTML Filtering

// Safe  : HTML Purifier defeats XSS with an audited whitelist

// Clean : HTML Purifier ensures standards-compliant output

// Open  : HTML Purifier is open-source and highly customizable

function html_purifier($html)

{

    $f = file(G5_PLUGIN_PATH.'/htmlpurifier/safeiframe.txt');

    $domains = array();

    foreach($f as $domain){

        // 첫행이 # 이면 주석 처리

        if (!preg_match("/^#/", $domain)) {

            $domain = trim($domain);

            if ($domain)

                array_push($domains, $domain);

        }

    }

    // 내 도메인도 추가

    array_push($domains, $_SERVER['HTTP_HOST'].'/');

    $safeiframe = implode('|', $domains);</p>

<p>    include_once(G5_PLUGIN_PATH.'/htmlpurifier/HTMLPurifier.standalone.php');

    include_once(G5_PLUGIN_PATH.'/htmlpurifier/extend.video.php');

    $config = HTMLPurifier_Config::createDefault();

    // data/cache 디렉토리에 CSS, HTML, URI 디렉토리 등을 만든다.

    $config->set('Cache.SerializerPath', G5_DATA_PATH.'/cache');

    $config->set('HTML.SafeEmbed', false);

    $config->set('HTML.SafeObject', false);

    $config->set('Output.FlashCompat', false);

    $config->set('HTML.SafeIframe', true);

    if( (function_exists('check_html_link_nofollow') && check_html_link_nofollow('html_purifier')) ){

        $config->set('HTML.Nofollow', true);    // rel=nofollow 으로 스팸유입을 줄임

    }

    $config->set('URI.SafeIframeRegexp','%^(https?:)?//('.$safeiframe.')%');

    $config->set('Attr.AllowedFrameTargets', array('_blank'));

    //유튜브, 비메오 전체화면 가능하게 하기

    $config->set('Filter.Custom', array(new HTMLPurifier_Filter_Iframevideo()));

    $purifier = new HTMLPurifier($config);

    return $purifier->purify($html);

}</p>

<p>