googleapps.php — Jetpack – WP Security, Backup, Speed, & Growth 15.9-a.7

jetpack / modules / shortcodes / googleapps.php

jetpack / modules / shortcodes Last commit date

css 2 weeks ago images 1 year ago img 4 weeks ago js 6 months ago archiveorg-book.php 6 months ago archiveorg.php 6 months ago archives.php 2 weeks ago bandcamp.php 6 months ago brightcove.php 5 months ago cartodb.php 6 months ago class.filter-embedded-html-objects.php 6 months ago codepen.php 6 months ago crowdsignal.php 5 months ago dailymotion.php 6 months ago descript.php 6 months ago facebook.php 6 months ago flatio.php 6 months ago flickr.php 5 months ago getty.php 6 months ago gist.php 6 months ago googleapps.php 6 months ago googlemaps.php 3 weeks ago googleplus.php 6 months ago gravatar.php 6 months ago houzz.php 6 months ago inline-pdfs.php 6 months ago instagram.php 6 months ago kickstarter.php 6 months ago mailchimp.php 5 months ago medium.php 6 months ago mixcloud.php 6 months ago others.php 6 months ago pinterest.php 6 months ago presentations.php 6 months ago quiz.php 6 months ago recipe.php 6 months ago scribd.php 6 months ago shortcode-utils.php 6 months ago sitemap.php 6 months ago slideshare.php 6 months ago slideshow.php 4 weeks ago smartframe.php 6 months ago soundcloud.php 6 months ago spotify.php 6 months ago ted.php 6 months ago tweet.php 6 months ago twitchtv.php 6 months ago twitter-timeline.php 6 months ago twitter.php 6 months ago unavailable.php 6 months ago untappd-menu.php 6 months ago upcoming-events.php 6 months ago ustream.php 6 months ago videopress.php 6 months ago vimeo.php 1 week ago vine.php 6 months ago vr.php 1 week ago wufoo.php 6 months ago youtube.php 3 months ago

googleapps.php

263 lines

1	<?php
2	/**
3	* Google Docs and Google Calendar Shortcode
4	*
5	* Presentation:
6	* <iframe src="https://docs.google.com/present/embed?id=dhfhrphh_123drp8s65c&interval=15&autoStart=true&loop=true&size=l" frameborder="0" width="700" height="559"></iframe>
7	* <iframe src="https://docs.google.com/presentation/embed?id=13ItX4jV0SOSdr-ZjHarcpTh9Lr4omfsHAp87jpxv8-0&start=false&loop=false&delayms=3000" frameborder="0" width="960" height="749" allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true"></iframe>
8	*
9	* Document:
10	* <iframe src="https://docs.google.com/document/pub?id=1kDatklacdZ_tZUOpWtt_ONzY97Ldj2zFcuO9LBY2Ln4&embedded=true"></iframe>
11	* <iframe src="https://docs.google.com/document/d/1kDatklacdZ_tZUOpWtt_ONzY97Ldj2zFcuO9LBY2Ln4/pub?embedded=true"></iframe>
12	* <iframe src="https://docs.google.com/document/d/e/2PACX-1vRkpIdasKL-eKXDjJgpEONduUspZTz0YmKaajfie0eJYnzikuyusuG1_V8X8T9XflN9l8A1oCM2sgEA/pub?embedded=true"></iframe>
13	*
14	* External document:
15	* <iframe width=100% height=560px frameborder=0 src=https://docs.google.com/a/pranab.in/viewer?a=v&pid=explorer&chrome=false&embedded=true&srcid=1VTMwdgGiDMt8MCr75-YkQP-4u9WmEp1Qvf6C26KYBgFilxU2qndpd-VHhBIn&hl=en></iframe>
16	*
17	* Spreadsheet Form:
18	* <iframe src="https://spreadsheets.google.com/embeddedform?formkey=dEVOYnMzZG5jMUpGbjFMYjFYNVB3NkE6MQ" width="760" height="710" frameborder="0" marginheight="0" marginwidth="0">Loading...</iframe>
19	*
20	* Spreadsheet Widget:
21	* <iframe width='500' height='300' frameborder='0' src='https://spreadsheets1.google.com/a/petedavies.com/pub?hl=en&hl=en&key=0AjSij7nlnXvKdHNsNjRSWG12YmVfOEFwdlMxQ3J1S1E&single=true&gid=0&output=html&widget=true'></iframe>
22	* <iframe width='500' height='300' frameborder='0' src='https://spreadsheets.google.com/spreadsheet/pub?hl=en&hl=en&key=0AhInIwfvYrIUdGJiTXhtUEhBSFVPUzdRZU5OMDlqdnc&output=html&widget=true'></iframe>
23	*
24	* Calendar:
25	* <iframe src="https://www.google.com/calendar/embed?src=serjant%40gmail.com&ctz=Europe/Sofia" style="border: 0" width="800" height="600" frameborder="0" scrolling="no"></iframe>
26	* <iframe src="http://www.google.com/calendar/hosted/belcastro.com/embed?src=n8nr8sd6v9hnus3nmlk7ed1238%40group.calendar.google.com&ctz=Europe/Zurich" style="border: 0" width="800" height="600" frameborder="0" scrolling="no"></iframe>
27	*
28	* Customized calendar:
29	* <iframe src="https://www.google.com/calendar/embed?title=asdf&showTitle=0&showNav=0&showDate=0&showPrint=0&showTabs=0&showCalendars=0&
30	* showTz=0&mode=AGENDA&height=300&wkst=2&hl=fi&bgcolor=%23ffcccc&src=m52gdmbgelo3itf00u1v44g0ns%40group.calendar.google.com&color=%234E5D6C&
31	* src=serjant%40gmail.com&color=%235229A3&ctz=Europe%2FRiga" style=" border:solid 1px #777 " width="500" height="300" frameborder="0" scrolling="no"></iframe>
32	*
33	* Generic
34	* <iframe src="https://docs.google.com/file/d/0B0SIdZW7iu-zX1RWREJpMXVHZVU/preview" width="640" height="480"></iframe>
35	*
36	* @package automattic/jetpack
37	*/
38
39	if ( ! defined( 'ABSPATH' ) ) {
40	exit( 0 );
41	}
42
43	if ( jetpack_shortcodes_should_hook_pre_kses() ) {
44	add_filter( 'pre_kses', 'googleapps_embed_to_shortcode' );
45	}
46
47	add_shortcode( 'googleapps', 'googleapps_shortcode' );
48
49	/**
50	* Reverse iframe embed to shortcode mapping HTML attributes to shortcode attributes.
51	*
52	* @since 4.5.0
53	*
54	* @param string $content Post content.
55	*
56	* @return mixed
57	*/
58	function googleapps_embed_to_shortcode( $content ) {
59	if (
60	! is_string( $content )
61	\|\| false === stripos( $content, '<iframe' )
62	&& false === stripos( $content, '.google.com' )
63	) {
64	return $content;
65	}
66
67	$regexp = '#<iframe((?:\s+\w+="[^"]")?)\ssrc="https?://(docs\|drive\|spreadsheets\d\|calendar\|www)\.google\.com/(?!maps)([-\w\./]+)(?:\?)?([^"]+)?"\s((?:\s+\w+="[^"]")?)>.*?</iframe>#i';
68	$regexp_ent = str_replace( '&#058;', '&#058;\|&#0*58;', htmlspecialchars( $regexp, ENT_NOQUOTES ) );
69	$regexp_squot = str_replace( '"', "'", $regexp );
70	$regexp_ent_squot = str_replace( '"', "'", $regexp_ent );
71	$regexp_noquot = '!<iframe(.?)src=https://(docs\|drive)\.google\.com/[-\.\w/]?(viewer)\?(.?)>(.?)</iframe>!';
72	$regexp_ent_noquot = str_replace( '&#058;', '&#058;\|&#0*58;', htmlspecialchars( $regexp_noquot, ENT_NOQUOTES ) );
73
74	foreach ( compact( 'regexp', 'regexp_ent', 'regexp_squot', 'regexp_ent_squot', 'regexp_noquot', 'regexp_ent_noquot' ) as $reg => $regexp ) {
75	if ( ! preg_match_all( $regexp, $content, $matches, PREG_SET_ORDER ) ) {
76	continue;
77	}
78
79	foreach ( $matches as $match ) {
80	$params = $match[1] . $match[5];
81	if ( in_array( $reg, array( 'regexp_ent', 'regexp_ent_squot' ), true ) ) {
82	$params = html_entity_decode( $params, ENT_QUOTES \| ENT_SUBSTITUTE \| ENT_HTML401 );
83	}
84
85	$params = wp_kses_hair( $params, array( 'http' ) );
86
87	$width = 0;
88	$height = 0;
89
90	if ( isset( $params['width'] ) ) {
91	$width = (int) $params['width']['value'];
92	}
93
94	if ( isset( $params['height'] ) ) {
95	$height = (int) $params['height']['value'];
96	}
97
98	// allow the user to specify width greater than 200 inside text widgets.
99	if (
100	$width > 400
101	// We don't need to check a nonce here. A nonce is already checked "further up" in most code paths.
102	// In the case where no nonce is ever checked, setting this $_POST parameter doesn't do anything the submitter couldn't already do (set the width/height).
103	&& isset( $_POST['widget-text'] ) // phpcs:ignore WordPress.Security.NonceVerification.Missing
104	) {
105	$width = 200;
106	$height = 200;
107	}
108
109	$attributes = '';
110	if ( isset( $params['width'] ) && '100%' === $params['width']['value'] ) {
111	$width = '100%';
112	}
113
114	if ( $width ) {
115	$attributes = ' width="' . $width . '"';
116	}
117
118	if ( $height ) {
119	$attributes .= ' height="' . $height . '"';
120	}
121
122	$domain = 'spreadsheets';
123	if ( in_array( $match[2], array( 'docs', 'drive', 'www', 'calendar' ), true ) ) {
124	$domain = $match[2];
125	}
126
127	// Make sure this is actually something that the shortcode supports. If it's not, leave the HTML alone.
128	if ( ! googleapps_validate_domain_and_dir( $domain, $match[3] ) ) {
129	continue;
130	}
131
132	/** This action is documented in modules/widgets/social-media-icons.php */
133	do_action( 'jetpack_bump_stats_extras', 'html_to_shortcode', googleapps_service_name( $domain, $match[3] ) );
134
135	$content = str_replace( $match[0], '[googleapps domain="' . $domain . '" dir="' . $match[3] . '" query="' . esc_attr( $match[4] ) . '"' . $attributes . ' /]', $content );
136	}
137	}
138
139	return $content;
140	}
141
142	/**
143	* Parse shortcode attributes and output a Google Docs embed.
144	*
145	* @since 4.5.0
146	*
147	* @param array $atts Shortcode attributes.
148	*
149	* @return string
150	*/
151	function googleapps_shortcode( $atts ) {
152	global $content_width;
153
154	$attr = shortcode_atts(
155	array(
156	'width' => '100%',
157	'height' => '560',
158	'domain' => 'docs',
159	'dir' => 'document',
160	'query' => '',
161	'src' => '',
162	),
163	$atts
164	);
165
166	if ( is_numeric( $content_width ) && $content_width > 0 && is_numeric( $attr['width'] ) && $attr['width'] > $content_width ) {
167	$attr['width'] = $content_width;
168	}
169
170	if ( is_numeric( $content_width ) && $content_width > 0 && '560' === $attr['height'] ) {
171	$attr['height'] = floor( $content_width * 3 / 4 );
172	}
173
174	if ( isset( $atts[0] ) && $atts[0] ) {
175	$attr['src'] = $atts[0];
176	}
177
178	if ( $attr['src'] && preg_match( '!https?://(docs\|drive\|spreadsheets\d\|calendar\|www)\.google\.com/([-\w\./]+)\?([^"]+)!', $attr['src'], $matches ) ) {
179	$attr['domain'] = $matches[1];
180	$attr['dir'] = $matches[2];
181	parse_str( htmlspecialchars_decode( $matches[3], ENT_QUOTES \| ENT_SUBSTITUTE \| ENT_HTML401 ), $query_ar );
182	$query_ar['chrome'] = 'false';
183	$query_ar['embedded'] = 'true';
184	$attr['query'] = http_build_query( $query_ar );
185	}
186
187	if ( ! googleapps_validate_domain_and_dir( $attr['domain'], $attr['dir'] ) ) {
188	return '<!-- Unsupported URL -->';
189	}
190
191	$attr['query'] = $attr['dir'] . '?' . $attr['query'];
192
193	/** This action is documented in modules/widgets/social-media-icons.php */
194	do_action( 'jetpack_bump_stats_extras', 'embeds', googleapps_service_name( $attr['domain'], $attr['dir'] ) );
195
196	return sprintf(
197	'<iframe src="%s" frameborder="0" width="%s" height="%s" marginheight="0" marginwidth="0" allowfullscreen="true" mozallowfullscreen="true" webkitallowfullscreen="true"></iframe>',
198	esc_url( 'https://' . $attr['domain'] . '.google.com/' . $attr['query'] ),
199	esc_attr( $attr['width'] ),
200	esc_attr( $attr['height'] )
201	);
202	}
203
204	/**
205	* Check that the domain blogs to a Google Apps domain.
206	*
207	* @since 4.5.0
208	*
209	* @param string $domain Google subdomain.
210	* @param string $dir Subdirectory of the shared URL.
211	*
212	* @return bool
213	*/
214	function googleapps_validate_domain_and_dir( $domain, $dir ) {
215	if ( ! in_array( $domain, array( 'docs', 'drive', 'www', 'spreadsheets', 'calendar' ), true ) ) {
216	return false;
217	}
218
219	// Calendars.
220	if ( ( 'www' === $domain \|\| 'calendar' === $domain ) && ! str_starts_with( $dir, 'calendar/' ) ) {
221	return false;
222	}
223
224	// Docs.
225	if ( in_array( $domain, array( 'docs', 'drive' ), true ) && ! preg_match( '![-\.\w/](presentation/embed\|presentation/d/(.)\|present/embed\|document/pub\|spreadsheets/d/(.)\|document/d/(e/)?[\w-]+/pub\|file/d/[\w-]+/preview\|viewer\|forms/d/(.)/viewform\|spreadsheet/\w+)$!', $dir ) ) {
226	return false;
227	}
228
229	// Spreadsheets.
230	if ( 'spreadsheets' === $domain && ! preg_match( '!^([-\.\w/]+/pub\|[-\.\w/]*embeddedform)$!', $dir ) ) {
231	return false;
232	}
233
234	return true;
235	}
236
237	/**
238	* Get the name of the service we'll be embedding.
239	*
240	* @since 4.5.0
241	*
242	* @param string $domain Google subdomain.
243	* @param string $dir Subdirectory of the shared URL.
244	*
245	* @return string
246	*/
247	function googleapps_service_name( $domain, $dir ) {
248	switch ( $domain ) {
249	case 'drive':
250	case 'docs':
251	$service_name = ( 'present/embed' === $dir ) ? 'googledocs_presentation' : 'googledocs_document';
252	break;
253	case 'spreadsheets':
254	$service_name = ( 'embeddedform' === $dir ) ? 'googledocs_form' : 'googledocs_spreadsheet';
255	break;
256	case 'calendar':
257	default:
258	$service_name = 'google_calendar';
259	}
260
261	return $service_name;
262	}
263