如何配置HTML淨化器以允許錨點href值中的「callto：123」？

Question

有人可以指出我需要什麼來允許像這樣的錨標記通過htmlpurifier，不受影響嗎？ ：

<a href="callto:+1-800-555-1212" class="callUsBtn" style="">...</a> 

與我的配置。設置，callto:...值不被識別爲允許，因此整個href屬性被剝離。我想我需要覆蓋href值的類型（< - 或稱之爲？），從URI到CDATA（？），但不知道如何。我希望有一個比這裏找到的方向更快/更簡單的方法：http://htmlpurifier.org/docs/enduser-customize.html（如果這甚至會導致解決方案？）。

Answer 1

感謝愛德華的回答，我得到了它的工作。

試試這個：

在你相當於在這裏：​​
/htmlpurifier-4_4_0/library/HTMLPurifier/URIScheme/

添加一個名爲文件：callto.php
......這些內容：

<?php 

// replicated this class/file from '../htmlpurifier-4_4_0/library/HTMLPurifier/URIScheme/mailto.php' 

// VERY RELAXED! Shouldn't cause problems, ... but be careful! 

/** 
* Validates 'callto:' phone number in URI to included only alphanumeric, hyphens, underscore, and optional leading "+" 
*/ 

class HTMLPurifier_URIScheme_callto extends HTMLPurifier_URIScheme { 

    public $browsable = false; 
    public $may_omit_host = true; 

    public function doValidate(&$uri, $config, $context) { 
     $uri->userinfo = null; 
     $uri->host  = null; 
     $uri->port  = null; 

     /* notes: 
      where is the actual phone # parked? Answer in $uri->path. See here: 

      echo '<pre style="color:pink;">'; 
      var_dump($uri); 
      echo '</pre>'; 

      object(HTMLPurifier_URI)#490 (7) { 
       ["scheme"]=> 
       string(6) "callto" 
       ["userinfo"]=> 
       NULL 
       ["host"]=> 
       NULL 
       ["port"]=> 
       NULL 
       ["path"]=> 
       string(15) "+1-800-555-1212" 
       ["query"]=> 
       NULL 
       ["fragment"]=> 
       NULL 
      } 
     */ 

     // are the characters in the submitted <a> href's (URI) value (callto:) from amongst a legal/allowed set? 
      // my legal phone # chars: alphanumeric, underscore, hyphen, optional "+" for the first character. That's it. But you can allow whatever you want. Just change this: 
      $validCalltoPhoneNumberPattern = '/^\+?[a-zA-Z0-9_-]+$/i'; // <---whatever pattern you want to force phone numbers to match 
      $proposedPhoneNumber = $uri->path; 
      if (preg_match($validCalltoPhoneNumberPattern, $proposedPhoneNumber) !== 1) { 
       // submitted phone # inside the href attribute value looks bad; reject the phone number, and let HTMLpurifier remove the whole href attribute on the submitted <a> tag. 
       return FALSE; 
      } else { 
       // submitted phone # inside the href attribute value looks OK; accept the phone number; HTMLpurifier should NOT strip the href attribute on the submitted <a> tag. 
       return TRUE; 
      } 
    } 

} 

...和不要忘記更新您的HTMLpurifier配置，從默認情況下，包括這樣的內容：

$config->set('URI.AllowedSchemes', array ('http' => true, 'https' => true, 'mailto' => true, 'ftp' => true, 'nntp' => true, 'news' => true, 'callto' => true,)); 

Answer 2

您需要實施新的HTMLPurifier_URIScheme。 library/HTMLPurifier/URIScheme中有很多示例，並且使用正常配置很容易添加自定義URI方案。