Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /var/www/html/back/vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/

File / Folder	Size	Action
.	-
AlphaValue.php	0.774KB	edt ren
Background.php	3.235KB	edt ren
BackgroundPosition.php	4.068KB	edt ren
Border.php	1.554KB	edt ren
Color.php	4.57KB	edt ren
Composite.php	1.301KB	edt ren
DenyElementDecorator.php	1.05KB	edt ren
Filter.php	2.271KB	edt ren
Font.php	6.454KB	edt ren
FontFamily.php	9.127KB	edt ren
Ident.php	0.707KB	edt ren
ImportantDecorator.php	1.56KB	edt ren
Length.php	1.853KB	edt ren
ListStyle.php	2.843KB	edt ren
Multiple.php	2.043KB	edt ren
Number.php	2.233KB	edt ren
Percentage.php	1.249KB	edt ren
Ratio.php	1.201KB	edt ren
TextDecoration.php	1.129KB	edt ren
URI.php	2.508KB	edt ren

<?php

/**
 * Validates a number as defined by the CSS spec.
 */
class HTMLPurifier_AttrDef_CSS_Number extends HTMLPurifier_AttrDef
{

/**
     * Indicates whether or not only positive values are allowed.
     * @type bool
     */
    protected $non_negative = false;

/**
     * @param bool $non_negative indicates whether negatives are forbidden
     */
    public function __construct($non_negative = false)
    {
        $this->non_negative = $non_negative;
    }

/**
     * @param string $number
     * @param HTMLPurifier_Config $config
     * @param HTMLPurifier_Context $context
     * @return string|bool
     * @warning Some contexts do not pass $config, $context. These
     *          variables should not be used without checking HTMLPurifier_Length
     */
    public function validate($number, $config, $context)
    {
        $number = $this->parseCDATA($number);

if ($number === '') {
            return false;
        }
        if ($number === '0') {
            return '0';
        }

$sign = '';
        switch ($number[0]) {
            case '-':
                if ($this->non_negative) {
                    return false;
                }
                $sign = '-';
            case '+':
                $number = substr($number, 1);
        }

if (ctype_digit($number)) {
            $number = ltrim($number, '0');
            return $number ? $sign . $number : '0';
        }

// Period is the only non-numeric character allowed
        if (strpos($number, '.') === false) {
            return false;
        }

list($left, $right) = explode('.', $number, 2);

if ($left === '' && $right === '') {
            return false;
        }
        if ($left !== '' && !ctype_digit($left)) {
            return false;
        }

// Remove leading zeros until positive number or a zero stays left
        if (ltrim($left, '0') != '') {
            $left = ltrim($left, '0');
        } else {
            $left = '0';
        }

$right = rtrim($right, '0');

if ($right === '') {
            return $left ? $sign . $left : '0';
        } elseif (!ctype_digit($right)) {
            return false;
        }
        return $sign . $left . '.' . $right;
    }
}

// vim: et sw=4 sts=4

<=Back