Changeset 9

Timestamp:

02/06/06 20:26:08 (3 years ago)

Author:

bradfitz

Message:

slap more stuff

Files:

• trunk/lib/CSS/Cleaner.pm (modified) (1 diff)

trunk/lib/CSS/Cleaner.pm

@@ -46 +46 @@
-sub _stupid_clean {
-    my ($self, $ref) = @_;
-
+
+
+
-    $reduced =~ s/\s+//g;
-    $reduced =~ s/\\//g;
-    $reduced =~ s/&\#(\d+);?/chr($1)/eg;
-    $reduced =~ s/&\#x(\w+);?/chr(hex($1))/eg;
-
-
-
-
+
+
-        return;
-    }
+
+    if ($reduced =~ /&\#/) {
+        $$ref = "/* suspect CSS: found irregular &# */";
+        return;
+    }
+
+    if ($reduced =~ /[\x00-\x08\x0B\x0C\x0E-\x1F]/) {
+        $$ref = "/* suspect CSS: low bytes */";
+        return;
+    }
+
+    if ($reduced =~ /[\x7f-\xff]/) {
+        $$ref = "/* suspect CSS: high bytes */";
+        return;
+    }
+
+    if ($reduced =~ m!</!) {
+        $$ref = "/* suspect CSS: close HTML tag */";
+        return;-
+    }
+
+    if ($reduced =~ m/\bdata:\b|javascript|vbscript|expression|eval|cookie
+        |\bwindow\b|\bparent\b|\bthis\b|behaviou?r|moz-binding/ix) {
+        my $what = lc $&;
+        $$ref = "/* suspect CSS: potential scripting: $what */";
+        return;
+    }
+
-}
-