Download all files FTP
This commit is contained in:
31
wp-content/plugins/webp-express/lib/classes/Sanitize.php
Normal file
31
wp-content/plugins/webp-express/lib/classes/Sanitize.php
Normal file
@@ -0,0 +1,31 @@
|
||||
<?php
|
||||
|
||||
namespace WebPExpress;
|
||||
|
||||
class Sanitize
|
||||
{
|
||||
|
||||
/**
|
||||
* The NUL character is a demon, because it can be used to bypass other tests
|
||||
* See https://st-g.de/2011/04/doing-filename-checks-securely-in-PHP.
|
||||
*
|
||||
* @param string $string string remove NUL characters in
|
||||
*/
|
||||
public static function removeNUL($string)
|
||||
{
|
||||
return str_replace(chr(0), '', $string);
|
||||
}
|
||||
|
||||
public static function removeStreamWrappers($string)
|
||||
{
|
||||
return preg_replace('#^\\w+://#', '', $string);
|
||||
}
|
||||
|
||||
public static function path($string)
|
||||
{
|
||||
$string = self::removeNUL($string);
|
||||
$string = self::removeStreamWrappers($string);
|
||||
return $string;
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user