Major revamps to the template parser. Fixed a few security holes that could allow PHP to be injected in untimely places in TPL code. Improved Ux for XSS attempt in tplWikiFormat. Documented many functions. Backported much cleaner parser from 2.0 branch. Beautified a lot of code in the depths of the template class. Pretty much a small-scale Extreme Makeover.
/**
* $Id: editor_plugin_src.js 201 2007-02-12 15:56:56Z spocke $
*
* @author Moxiecode
* @copyright Copyright © 2004-2007, Moxiecode Systems AB, All rights reserved.
*/
/* Import plugin specific language pack */
tinyMCE.importPluginLanguagePack('fullpage');
var TinyMCE_FullPagePlugin = {
getInfo : function() {
return {
longname : 'Fullpage',
author : 'Moxiecode Systems AB',
authorurl : 'http://tinymce.moxiecode.com',
infourl : 'http://wiki.moxiecode.com/index.php/TinyMCE:Plugins/fullpage',
version : tinyMCE.majorVersion + "." + tinyMCE.minorVersion
};
},
getControlHTML : function(cn) {
switch (cn) {
case "fullpage":
return tinyMCE.getButtonHTML(cn, 'lang_fullpage_desc', '{$pluginurl}/images/fullpage.gif', 'mceFullPageProperties');
}
return "";
},
execCommand : function(editor_id, element, command, user_interface, value) {
// Handle commands
switch (command) {
case "mceFullPageProperties":
var template = new Array();
template['file'] = '../../plugins/fullpage/fullpage.htm';
template['width'] = 430;
template['height'] = 485 + (tinyMCE.isOpera ? 5 : 0);
template['width'] += tinyMCE.getLang('lang_fullpage_delta_width', 0);
template['height'] += tinyMCE.getLang('lang_fullpage_delta_height', 0);
tinyMCE.openWindow(template, {editor_id : editor_id, inline : "yes"});
return true;
case "mceFullPageUpdate":
TinyMCE_FullPagePlugin._addToHead(tinyMCE.getInstanceById(editor_id));
return true;
}
// Pass to next handler in chain
return false;
},
cleanup : function(type, content, inst) {
switch (type) {
case "insert_to_editor":
var tmp = content.toLowerCase();
var pos = tmp.indexOf('<body'), pos2;
// Split page in header and body chunks
if (pos != -1) {
pos = tmp.indexOf('>', pos);
pos2 = tmp.lastIndexOf('</body>');
inst.fullpageTopContent = content.substring(0, pos + 1);
content = content.substring(pos + 1, pos2);
// tinyMCE.debug(inst.fullpageTopContent, content);
} else {
if (!inst.fullpageTopContent) {
var docType = tinyMCE.getParam("fullpage_default_doctype", '<!DOCTYPE html PUBLIC "-/'+'/W3C//DTD XHTML 1.0 Transitional/'+'/EN" "http:/'+'/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">');
var enc = tinyMCE.getParam("fullpage_default_encoding", 'utf-8');
var title = tinyMCE.getParam("fullpage_default_title", 'Untitled document');
var lang = tinyMCE.getParam("fullpage_default_langcode", 'en');
var pi = tinyMCE.getParam("fullpage_default_xml_pi", true);
var ff = tinyMCE.getParam("fullpage_default_font_family", "");
var fz = tinyMCE.getParam("fullpage_default_font_size", "");
var ds = tinyMCE.getParam("fullpage_default_style", "");
var dtc = tinyMCE.getParam("fullpage_default_text_color", "");
// Xml encode it
title = title.replace(/&/g, '&');
title = title.replace(/\"/g, '"');
title = title.replace(/</g, '<');
title = title.replace(/>/g, '>');
tmp = '';
// Make default chunk
if (pi)
tmp += '<?xml version="1.0" encoding="' + enc + '"?>\n';
tmp += docType + '\n';
tmp += '<html xmlns="http:/'+'/www.w3.org/1999/xhtml" lang="' + lang + '" xml:lang="' + lang + '">\n';
tmp += '<head>\n';
tmp += '\t<title>' + title + '</title>\n';
tmp += '\t<meta http-equiv="Content-Type" content="text/html; charset=' + enc + '" />\n';
tmp += '</head>\n';
tmp += '<body';
if (ff != '' || fz != '') {
tmp += ' style="';
if (ds != '')
tmp += ds + ";";
if (ff != '')
tmp += 'font-family: ' + ff + ";";
if (fz != '')
tmp += 'font-size: ' + fz + ";";
tmp += '"';
}
if (dtc != '')
tmp += ' text="' + dtc + '"';
tmp += '>\n';
inst.fullpageTopContent = tmp;
}
}
this._addToHead(inst);
break;
case "get_from_editor":
if (inst.fullpageTopContent)
content = inst.fullpageTopContent + content + "\n</body>\n</html>";
break;
}
// Pass through to next handler in chain
return content;
},
// Private plugin internal methods
_addToHead : function(inst) {
var doc = inst.getDoc();
var head = doc.getElementsByTagName("head")[0];
var body = doc.body;
var h = inst.fullpageTopContent;
var e = doc.createElement("body");
var nl, i, le, tmp;
// Remove stuff we don't want
h = h.replace(/(\r|\n)/gi, '');
h = h.replace(/<\?[^\>]*\>/gi, '');
h = h.replace(/<\/?(!DOCTYPE|head|html)[^\>]*\>/gi, '');
h = h.replace(/<script(.*?)<\/script>/gi, '');
h = h.replace(/<title(.*?)<\/title>/gi, '');
h = h.replace(/<(meta|base)[^>]*>/gi, '');
// Make link and style elements into pre
h = h.replace(/<link([^>]*)\/>/gi, '<pre mce_type="link" $1></pre>');
//h = h.replace(/<style([^>]*)>(.*?)<\/style>/gi, '<pre mce_type="style" $1>$2</pre>');
// Make body a div
h = h.replace(/<body/gi, '<div mce_type="body"');
h += '</div>';
// Now crapy MSIE can parse it
e.innerHTML = h;
// Reset all body attributes
body.vLink = body.aLink = body.link = body.text = '';
body.style.cssText = '';
// Delete all old links
nl = head.getElementsByTagName('link');
for (i=0; i<nl.length; i++) {
if (tinyMCE.getAttrib(nl[i], 'mce_head') == "true")
nl[i].parentNode.removeChild(nl[i]);
}
// Add link elements
nl = e.getElementsByTagName('pre');
for (i=0; i<nl.length; i++) {
tmp = tinyMCE.getAttrib(nl[i], 'media');
if (tinyMCE.getAttrib(nl[i], 'mce_type') == "link" && (tmp == "" || tmp == "screen" || tmp == "all") && tinyMCE.getAttrib(nl[i], 'rel') == "stylesheet") {
le = doc.createElement("link");
le.rel = "stylesheet";
le.href = tinyMCE.getAttrib(nl[i], 'href');
le.setAttribute("mce_head", "true");
head.appendChild(le);
}
}
// Add body attributes
nl = e.getElementsByTagName('div');
if (nl.length > 0) {
body.style.cssText = tinyMCE.getAttrib(nl[0], 'style');
if ((tmp = tinyMCE.getAttrib(nl[0], 'leftmargin')) != '' && body.style.marginLeft == '')
body.style.marginLeft = tmp + "px";
if ((tmp = tinyMCE.getAttrib(nl[0], 'rightmargin')) != '' && body.style.marginRight == '')
body.style.marginRight = tmp + "px";
if ((tmp = tinyMCE.getAttrib(nl[0], 'topmargin')) != '' && body.style.marginTop == '')
body.style.marginTop = tmp + "px";
if ((tmp = tinyMCE.getAttrib(nl[0], 'bottommargin')) != '' && body.style.marginBottom == '')
body.style.marginBottom = tmp + "px";
body.dir = tinyMCE.getAttrib(nl[0], 'dir');
body.vLink = tinyMCE.getAttrib(nl[0], 'vlink');
body.aLink = tinyMCE.getAttrib(nl[0], 'alink');
body.link = tinyMCE.getAttrib(nl[0], 'link');
body.text = tinyMCE.getAttrib(nl[0], 'text');
if ((tmp = tinyMCE.getAttrib(nl[0], 'background')) != '')
body.style.backgroundImage = "url('" + tmp + "')";
if ((tmp = tinyMCE.getAttrib(nl[0], 'bgcolor')) != '')
body.style.backgroundColor = tmp;
}
}
};
tinyMCE.addPlugin("fullpage", TinyMCE_FullPagePlugin);