# HTMLPurifier for Laravel 5 >製作:Tinn >參考:Google各位大神... [github位置](https://github.com/mewebstudio/Purifier) --- ## Install Require this package with composer: ```composer require mews/purifier``` ## Configuration To use your own settings, publish config. ```$ php artisan vendor:publish --provider="Mews\Purifier\PurifierServiceProvider"``` Config file config/purifier.php should like this ```php= return [ 'encoding' => 'UTF-8', 'finalize' => true, 'cachePath' => storage_path('app/purifier'), 'cacheFileMode' => 0755, 'settings' => [ 'default' => [ 'HTML.Doctype' => 'HTML 4.01 Transitional', 'HTML.Allowed' => 'div,b,strong,i,em,u,a[href|title],ul,ol,li,p[style],br,span[style],img[width|height|alt|src]', 'CSS.AllowedProperties' => 'font,font-size,font-weight,font-style,font-family,text-decoration,padding-left,color,background-color,text-align', 'AutoFormat.AutoParagraph' => true, 'AutoFormat.RemoveEmpty' => true, ], 'test' => [ 'Attr.EnableID' => 'true', ], "youtube" => [ "HTML.SafeIframe" => 'true', "URI.SafeIframeRegexp" => "%^(http://|https://|//)(www.youtube.com/embed/|player.vimeo.com/video/)%", ], 'custom_definition' => [ 'id' => 'html5-definitions', 'rev' => 1, 'debug' => false, 'elements' => [ // http://developers.whatwg.org/sections.html ['section', 'Block', 'Flow', 'Common'], ['nav', 'Block', 'Flow', 'Common'], ['article', 'Block', 'Flow', 'Common'], ['aside', 'Block', 'Flow', 'Common'], ['header', 'Block', 'Flow', 'Common'], ['footer', 'Block', 'Flow', 'Common'], // Content model actually excludes several tags, not modelled here ['address', 'Block', 'Flow', 'Common'], ['hgroup', 'Block', 'Required: h1 | h2 | h3 | h4 | h5 | h6', 'Common'], // http://developers.whatwg.org/grouping-content.html ['figure', 'Block', 'Optional: (figcaption, Flow) | (Flow, figcaption) | Flow', 'Common'], ['figcaption', 'Inline', 'Flow', 'Common'], // http://developers.whatwg.org/the-video-element.html#the-video-element ['video', 'Block', 'Optional: (source, Flow) | (Flow, source) | Flow', 'Common', [ 'src' => 'URI', 'type' => 'Text', 'width' => 'Length', 'height' => 'Length', 'poster' => 'URI', 'preload' => 'Enum#auto,metadata,none', 'controls' => 'Bool', ]], ['source', 'Block', 'Flow', 'Common', [ 'src' => 'URI', 'type' => 'Text', ]], // http://developers.whatwg.org/text-level-semantics.html ['s', 'Inline', 'Inline', 'Common'], ['var', 'Inline', 'Inline', 'Common'], ['sub', 'Inline', 'Inline', 'Common'], ['sup', 'Inline', 'Inline', 'Common'], ['mark', 'Inline', 'Inline', 'Common'], ['wbr', 'Inline', 'Empty', 'Core'], // http://developers.whatwg.org/edits.html ['ins', 'Block', 'Flow', 'Common', ['cite' => 'URI', 'datetime' => 'CDATA']], ['del', 'Block', 'Flow', 'Common', ['cite' => 'URI', 'datetime' => 'CDATA']], ], 'attributes' => [ ['iframe', 'allowfullscreen', 'Bool'], ['table', 'height', 'Text'], ['td', 'border', 'Text'], ['th', 'border', 'Text'], ['tr', 'width', 'Text'], ['tr', 'height', 'Text'], ['tr', 'border', 'Text'], ], ], 'custom_attributes' => [ ['a', 'target', 'Enum#_blank,_self,_target,_top'], ], 'custom_elements' => [ ['u', 'Inline', 'Inline', 'Common'], ], ], ]; ``` --- ## Example default ```clean(Input::get('inputname'));``` or ```Purifier::clean(Input::get('inputname'));``` dynamic config ```clean('This is my H1 title', 'titles');``` ```clean('This is my H1 title', array('Attr.EnableID' => true));``` or ```Purifier::clean('This is my H1 title', 'titles');``` ```Purifier::clean('This is my H1 title', array('Attr.EnableID' => true));``` --- ## 使用情例 :+1: 今天允許表格的樣式寫入 其中 Table以 ```<table></table>``` ```<tbody></tbody>``` ```<tr></tr>``` ```<td></td>``` ```<th></th>```組成 其中 ```<table><td>```標籤裡又會有 **style**、**class**、**width**、**border** 等樣式 於底下 **HTML.Allowed** 修改成 標籤的字串 如標籤內含有多個樣式請使用 **[]** 並於裡面使用 **|** 分隔 並於**CSS.AllowedProperties**中設定會使用到的**css**樣式名稱 ```php= [ 'settings' =>[ default' => [ 'HTML.Allowed'=> 'table[border|width|style|class],tbody,tr,td[border|width|style|class],th', 'CSS.AllowedProperties' => 'background-color,text-align,width,height,vertical-align', ], ] ] ``` --- ## Thanks you :santa: ###### tags: `Laravel` `HTMLPurifier`