This bundle integrates HTMLPurifier into Symfony2.
Require the bundle in your composer.json file:
{
"require": {
"exercise/htmlpurifier-bundle": "*",
}
}
Install the bundle:
$ composer update exercise/htmlpurifier-bundle
Register the bundle:
// app/AppKernel.php public function registerBundles() { return array( new Exercise\HTMLPurifierBundle\ExerciseHTMLPurifierBundle(), // ... ); }
Add HTMLPurifier and this bundle to your vendor/ directory:
$ git submodule add git://github.com/Exercise/HTMLPurifierBundle.git vendor/bundles/Exercise/HTMLPurifierBundle
$ git submodule add git://github.com/ezyang/htmlpurifier.git vendor/htmlpurifier
Register "HTMLPurifier" and the "Exercise" namespace prefix in your project's
autoload.php:
# app/autoload.php
$loader->registerNamespaces(array(
'Exercise' => __DIR__ . '/../vendor/bundles',
));
$loader->registerPrefixes(array(
'HTMLPurifier' => __DIR__ . '/../vendor//htmlpurifier/library',
));
Add HTMLPurifierBundle to the registerBundles() method of your application
kernel:
# app/AppKernel.php
public function registerBundles()
{
return array(
// ...
new Exercise\HTMLPurifierBundle\ExerciseHTMLPurifierBundle(),
// ...
);
}
If you do not explicitly configure this bundle, an HTMLPurifier service will be
defined as exercise_html_purifier.default. This behavior is the same as if you
had specified the following configuration:
# app/config.yml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
The default profile is special in that it is used as the configuration for the
exercise_html_purifier.default service as well as the base configuration for
other profiles you might define.
# app/config.yml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
custom:
Core.Encoding: 'ISO-8859-1'
In this example, a exercise_html_purifier.custom service will also be defined,
which includes both the cache and encoding options. Available configuration
options may be found in HTMLPurifier's configuration documentation.
Note: If you define a default profile but omit Cache.SerializerPath, it
will still default to the path above. You can specify a value of null for the
option to suppress the default path.
When a path is supplied for HTMLPurifier's Cache.SerializerPath configuration
option, an error is raised if the directory is not writable. This bundle defines
a cache warmer service that will collect all Cache.SerializerPath options and
ensure those directories exist and are writeable.
This bundles provides a data transformer class for filtering form fields with
HTMLPurifier. Purification is done during the reverseTransform() method, which
means that client data will be filtered during binding to the form.
The following example demonstrates one possible way to integrate an HTMLPurifier transformer into a form by way of a custom field type:
<?php namespace Acme\MainBundle\Form\Type; use Symfony\Component\Form\AbstractType; use Symfony\Component\Form\DataTransformerInterface; use Symfony\Component\Form\FormBuilderInterface; use Symfony\Component\OptionsResolver\OptionsResolverInterface; class PurifiedTextareaType extends AbstractType { private $purifierTransformer; public function __construct(DataTransformerInterface $purifierTransformer) { $this->purifierTransformer = $purifierTransformer; } public function buildForm(FormBuilderInterface $builder, array $options) { $builder->addViewTransformer($this->purifierTransformer); } public function getParent() { return 'textarea'; } public function setDefaultOptions(OptionsResolverInterface $resolver) { $resolver->setDefaults(array( 'compound' => false, )); } public function getName() { return 'purified_textarea'; } }
Then define both the field type and transformer in the service container:
<services> <service id="acme.form.type.purified_textarea" class="Acme\MainBundle\Form\Type\PurifiedTextareaType"> <argument type="service" id="acme.form.transformer.html_purifier" /> <tag name="form.type" alias="purified_textarea" /> </service> <service id="acme.form.transformer.html_purifier" class="Exercise\HTMLPurifierBundle\Form\HTMLPurifierTransformer"> <argument type="service" id="exercise_html_purifier.default" /> </service> </services>
Additional documentation on data transformers may be found in the Symfony2 documentation.
This bundles registers a purify filter with Twig. Output from this filter is
marked safe for HTML, much like Twig's built-in escapers. The filter may be used
as follows:
{# Filters text's value through the "default" HTMLPurifier service #} {{ text|purify }} {# Filters text's value through the "custom" HTMLPurifier service #} {{ text|purify('custom') }}