| 1 |
<?php |
| 2 |
|
| 3 |
namespace WebPConvert\Helpers; |
| 4 |
|
| 5 |
class Sanitize |
| 6 |
{ |
| 7 |
|
| 8 |
/** |
| 9 |
* The NUL character is a demon, because it can be used to bypass other tests |
| 10 |
* See https://st-g.de/2011/04/doing-filename-checks-securely-in-PHP. |
| 11 |
* |
| 12 |
* @param string $string string remove NUL characters in |
| 13 |
*/ |
| 14 |
public static function removeNUL($string) |
| 15 |
{ |
| 16 |
return str_replace(chr(0), '', $string); |
| 17 |
} |
| 18 |
|
| 19 |
public static function removeStreamWrappers($string) |
| 20 |
{ |
| 21 |
return preg_replace('#^\\w+://#', '', $string); |
| 22 |
} |
| 23 |
|
| 24 |
public static function path($string) |
| 25 |
{ |
| 26 |
$string = self::removeNUL($string); |
| 27 |
$string = self::removeStreamWrappers($string); |
| 28 |
return $string; |
| 29 |
} |
| 30 |
} |
| 31 |
|