jetpack / modules / shortcodes / facebook.php

facebook.php in Jetpack – WP Security, Backup, Speed, & Growth 14.9, at modules/shortcodes/facebook.php

196 lines 7.0 KB

Raw Download Zip

1	<?php
2	/**
3	* Facebook embeds
4	*
5	* @package automattic/jetpack
6	*/
7
8	define( 'JETPACK_FACEBOOK_EMBED_REGEX', '#^https?://(www.)?facebook\.com/([^/]+)/(posts\|photos)/([^/]+)?#' );
9	define( 'JETPACK_FACEBOOK_ALTERNATE_EMBED_REGEX', '#^https?://(www.)?facebook\.com/permalink.php\?([^\s]+)#' );
10	define( 'JETPACK_FACEBOOK_PHOTO_EMBED_REGEX', '#^https?://(www.)?facebook\.com/photo.php\?([^\s]+)#' );
11	define( 'JETPACK_FACEBOOK_PHOTO_ALTERNATE_EMBED_REGEX', '#^https?://(www.)?facebook\.com/([^/]+)/photos/([^/]+)?#' );
12	define( 'JETPACK_FACEBOOK_VIDEO_EMBED_REGEX', '#^https?://(www.)?facebook\.com/(?:video.php\|watch\/?)\?([^\s]+)#' );
13	define( 'JETPACK_FACEBOOK_VIDEO_ALTERNATE_EMBED_REGEX', '#^https?://(www.)?facebook\.com/([^/]+)/videos/([^/]+)?#' );
14
15	/*
16	* Example URL: https://www.facebook.com/VenusWilliams/posts/10151647007373076
17	*/
18	wp_embed_register_handler( 'facebook', JETPACK_FACEBOOK_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
19
20	/*
21	* Example URL: https://www.facebook.com/permalink.php?id=222622504529111&story_fbid=559431180743788
22	*/
23	wp_embed_register_handler( 'facebook-alternate', JETPACK_FACEBOOK_ALTERNATE_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
24
25	/*
26	* Photos are handled on a different endpoint; e.g. https://www.facebook.com/photo.php?fbid=10151609960150073&set=a.398410140072.163165.106666030072&type=1
27	*/
28	wp_embed_register_handler( 'facebook-photo', JETPACK_FACEBOOK_PHOTO_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
29
30	/*
31	* Photos (from pages for example) can be at
32	*/
33	wp_embed_register_handler( 'facebook-alternate-photo', JETPACK_FACEBOOK_PHOTO_ALTERNATE_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
34
35	/*
36	* Videos
37	*
38	* Formats:
39	* https://www.facebook.com/video.php?v=2836814009877992
40	* https://www.facebook.com/watch/?v=2836814009877992
41	*/
42	wp_embed_register_handler( 'facebook-video', JETPACK_FACEBOOK_VIDEO_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
43
44	/*
45	* Videos https://www.facebook.com/WhiteHouse/videos/10153398464269238/
46	*/
47	wp_embed_register_handler( 'facebook-alternate-video', JETPACK_FACEBOOK_VIDEO_ALTERNATE_EMBED_REGEX, 'jetpack_facebook_embed_handler' );
48
49	/**
50	* Callback to modify output of embedded Facebook posts.
51	*
52	* @param array $matches Regex partial matches against the URL passed.
53	* @param array $attr Attributes received in embed response.
54	* @param string $url Requested URL to be embedded.
55	* @return string Facebook embed markup.
56	*/
57	function jetpack_facebook_embed_handler( $matches, $attr, $url ) {
58	// This is a stop-gap solution until Facebook hopefully resolves this ticket
59	// https://developers.facebook.com/community/threads/1675075423353415/?post_id=1675075426686748
60	$extra_styles = 'style="background-color: #fff; display: inline-block;"';
61
62	if (
63	str_contains( $url, 'video.php' )
64	\|\| str_contains( $url, '/videos/' )
65	\|\| str_contains( $url, '/watch' )
66	) {
67	$embed = sprintf(
68	'<div class="fb-video" data-allowfullscreen="true" data-href="%1$s" %2$s></div>',
69	esc_url( $url ),
70	$extra_styles
71	);
72	} else {
73	$width = 552; // As of 01/2017, the default width of Facebook embeds when no width attribute provided.
74
75	global $content_width;
76	if ( is_numeric( $content_width ) && $content_width > 0 ) {
77	$width = min( $width, $content_width );
78	}
79
80	$embed = sprintf(
81	'<div class="fb-post" data-href="%1$s" data-width="%2$s" %3$s></div>',
82	esc_url( $url ),
83	esc_attr( $width ),
84	$extra_styles
85	);
86	}
87
88	// Skip rendering scripts in an AMP context.
89	if ( class_exists( 'Jetpack_AMP_Support' ) && Jetpack_AMP_Support::is_amp_request() ) {
90	return $embed;
91	}
92
93	// since Facebook is a faux embed, we need to load the JS SDK in the wpview embed iframe.
94	if (
95	defined( 'DOING_AJAX' )
96	&& DOING_AJAX
97	// No need to check for a nonce here, that's already handled by Core further up.
98	&& ! empty( $_POST['action'] ) // phpcs:ignore WordPress.Security.NonceVerification.Missing
99	&& 'parse-embed' === $_POST['action'] // phpcs:ignore WordPress.Security.NonceVerification.Missing
100	) {
101	ob_start();
102	wp_scripts()->do_items( array( 'jetpack-facebook-embed' ) );
103	$scripts = ob_get_clean();
104	return $embed . $scripts;
105	} else {
106	wp_enqueue_script( 'jetpack-facebook-embed' );
107	return $embed;
108	}
109	}
110
111	/**
112	* Shortcode handler.
113	*
114	* @param array $atts Shortcode attributes.
115	*/
116	function jetpack_facebook_shortcode_handler( $atts ) {
117	global $wp_embed;
118
119	if ( empty( $atts['url'] ) ) {
120	return;
121	}
122
123	if ( ! preg_match( JETPACK_FACEBOOK_EMBED_REGEX, $atts['url'] )
124	&& ! preg_match( JETPACK_FACEBOOK_PHOTO_EMBED_REGEX, $atts['url'] )
125	&& ! preg_match( JETPACK_FACEBOOK_VIDEO_EMBED_REGEX, $atts['url'] )
126	&& ! preg_match( JETPACK_FACEBOOK_VIDEO_ALTERNATE_EMBED_REGEX, $atts['url'] ) ) {
127	return;
128	}
129
130	return $wp_embed->shortcode( $atts, $atts['url'] );
131	}
132	add_shortcode( 'facebook', 'jetpack_facebook_shortcode_handler' );
133
134	/**
135	* Embed Reversal for Facebook
136	*
137	* Hooked to pre_kses, converts an embed code from www.facebook.com to an oEmbeddable URL.
138	*
139	* @param string $content Post content.
140	*
141	* @return string The filtered or the original content.
142	**/
143	function jetpack_facebook_embed_reversal( $content ) {
144	if ( ! is_string( $content ) \|\| false === stripos( $content, 'https://www.facebook.com/plugins/post.php' ) ) {
145	return $content;
146	}
147
148	/*
149	* Sample embed code:
150	* <iframe src="https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Ftechcrunch%2Fposts%2Fpfbid0997g1PXQKfyFNHNTiCgaCFevt3PRFMaUBBB9eEFPR5NsXCv8EXxBw3p9bBYezWkHl&show_text=true&width=500" width="500" height="504" style="border:none;overflow:hidden" scrolling="no" frameborder="0" allowfullscreen="true" allow="autoplay; clipboard-write; encrypted-media; picture-in-picture; web-share"></iframe>
151	*/
152
153	$regexes = array();
154	$regexes[] = '#<iframe[^>]+?src="((?:https?:)?//(?:www\.)?facebook\.com/plugins/post\.php\?[^"]+)"[^>]?>\s?</iframe>#i';
155	$regexes[] = '#<iframe[^&]+?src="((?:https?:)?//(?:www\.)?facebook\.com/plugins/post\.php\?[^"]+)"[^&]?>\s?</iframe>#i';
156
157	foreach ( $regexes as $regex ) {
158	if ( ! preg_match_all( $regex, $content, $matches, PREG_SET_ORDER ) ) {
159	continue;
160	}
161
162	foreach ( $matches as $match ) {
163	if ( ! preg_match( '#(https?:)?//(?:www\.)?facebook\.com/plugins/post.php([^/]*)#i', $match[1], $url_matches ) ) {
164	continue;
165	}
166
167	$src_url = $url_matches[0];
168	$parsed_url = wp_parse_url( $src_url );
169	if ( empty( $parsed_url['query'] ) ) {
170	continue;
171	}
172
173	$query_args = array();
174	wp_parse_str( $parsed_url['query'], $query_args );
175	if ( empty( $query_args['href'] ) ) {
176	continue;
177	}
178
179	// Since we support Facebook via oEmbed, we simply leave a link on a line by itself.
180	$replace_regex = sprintf( '#\s%s\s#', preg_quote( $match[0], '#' ) );
181	$url = esc_url( $query_args['href'] );
182
183	$content = preg_replace( $replace_regex, sprintf( "\n\n%s\n\n", $url ), $content );
184	/** This action is documented in modules/shortcodes/youtube.php */
185	do_action( 'jetpack_embed_to_shortcode', 'facebook', $url );
186	}
187	}
188
189	return $content;
190	}
191
192	/**
193	* Embed reversal: Convert an embed code from Facebook.com to an oEmbeddable URL.
194	*/
195	add_filter( 'pre_kses', 'jetpack_facebook_embed_reversal' );
196