This bundle integrates HTMLPurifier into Symfony.
Require the bundle in your composer.json file:
{
"require": {
"exercise/htmlpurifier-bundle": "*"
}
}
Install the bundle:
$ composer require exercise/htmlpurifier-bundle
Register the bundle in Symfony 3:
// app/AppKernel.php
public function registerBundles()
{
return array(
new Exercise\HTMLPurifierBundle\ExerciseHTMLPurifierBundle(),
// ...
);
}
If you do not explicitly configure this bundle, an HTMLPurifier service will be
defined as exercise_html_purifier.default
. This behavior is the same as if you
had specified the following configuration:
# app/config.yml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
The default
profile is special in that it is used as the configuration for the
exercise_html_purifier.default
service as well as the base configuration for
other profiles you might define.
# app/config.yml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
custom:
Core.Encoding: 'ISO-8859-1'
In this example, a exercise_html_purifier.custom
service will also be defined,
which includes both the cache and encoding options. Available configuration
options may be found in HTMLPurifier's configuration documentation.
Note: If you define a default
profile but omit Cache.SerializerPath
, it
will still default to the path above. You can specify a value of null
for the
option to suppress the default path.
If you do not explicitly configure this bundle, an HTMLPurifier service will be
defined as exercise_html_purifier.default
. This behavior is the same as if you
had specified the following configuration:
# config/packages/exercise_html_purifier.yaml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
The default
profile is special in that it is used as the configuration for the
exercise_html_purifier.default
service as well as the base configuration for
other profiles you might define.
# config/packages/exercise_html_purifier.yaml
exercise_html_purifier:
default:
Cache.SerializerPath: '%kernel.cache_dir%/htmlpurifier'
custom:
Core.Encoding: 'ISO-8859-1'
By default type hinting \HtmlPurifier
in your services will autowire
the exercise_html_purifier.default
service.
To override it and use your own config as default autowired services just add
this in you app/config/services.yml
or config/services.yaml
:
services:
# ...
\HTMLPurifier:
alias: exercise_html_purifier.custom
# or the equivalent as of Symfony 3.3
\HTMLPurifier: '@exercise_html_purifier.custom'
This bundles provides a form type extension for filtering form fields with HTMLPurifier. Purification is done during the PRE_SUBMIT event, which means that client data will be filtered before binding to the form.
The following example demonstrates one possible way to integrate an HTMLPurifier transformer into a form by way of a custom field type:
<?php
namespace App\Form\Type;
use Symfony\Component\Form\AbstractType;
use Symfony\Component\Form\Extension\Core\Type\TextType;
use Symfony\Component\Form\Extension\Core\Type\TextareaType;
use Symfony\Component\Form\FormBuilderInterface;
class ArticleType extends AbstractType
{
public function buildForm(FormBuilderInterface $builder, array $options)
{
$builder
->add('content', TextareaType::class, ['purify_html' => 'true']) // will use default profile
->add('sneek_peak', TextType::class, ['purify_html' => 'true', 'purify_html_profile' => 'sneak_peak'])
// ...
;
}
// ...
}
Every type extending TextType
(i.e: TextareaType
) inherit these options.
It also means that if you use a type such as CKEditorType, you will benefit
from these options without configuring anything.
This bundles registers a purify
filter with Twig. Output from this filter is
marked safe for HTML, much like Twig's built-in escapers. The filter may be used
as follows:
{# Filters text's value through the "default" HTMLPurifier service #}
{{ text|purify }}
{# Filters text's value through the "custom" HTMLPurifier service #}
{{ text|purify('custom') }}
A Exercise\HtmlPurifierBundle\HtmlPurifiersRegistry
class is registered by default
as a service. To add your custom instance of purifier, and make it available to
the form type and Twig extensions through its profile name, you can use the tag
exercise.html_purifier
as follow:
# config/services.yaml
services:
# ...
App\HtmlPurifier\CustomPurifier:
tags:
- name: exercise.html_purifier
profile: custom
Now your purifier can be used when:
// In a form type
$builder
->add('content', TextareaType::class, [
'purify_html' => 'true',
'purify_html_profile' => 'custom',
])
// ...
{# in a template #}
{{ html_string|purify('custom') }}
Your class will inherit the default config or the one from the same profile used in the tag.