<h2>File Contents: /home/planet5/public_html/wp-content/plugins/amp/includes/sanitizers/class-amp-iframe-sanitizer.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/public_html/wp-content/plugins/amp/includes/sanitizers/class-amp-iframe-sanitizer.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
/**
 * Class AMP_Iframe_Sanitizer
 *
 * @package AMP
 */

use AmpProject\AmpWP\ValidationExemption;
use AmpProject\DevMode;
use AmpProject\Html\Attribute;
use AmpProject\Layout;

/**
 * Class AMP_Iframe_Sanitizer
 *
 * Converts &lt;iframe&gt; tags to &lt;amp-iframe&gt;
 *
 * @internal
 */
class AMP_Iframe_Sanitizer extends AMP_Base_Sanitizer {
	use AMP_Noscript_Fallback;

	/**
	 * Default values for sandboxing IFrame.
	 *
	 * | Sandbox Token                             | Included | Rationale
	 * |-------------------------------------------|----------|----------
	 * | `allow-downloads`                         | Yes      | Useful for downloading documents, etc.
	 * | `allow-downloads-without-user-activation` | No       | Experimental per MDN. Bad UX.
	 * | `allow-forms`                             | Yes      | For embeds like polls.
	 * | `allow-modals`                            | Yes      | For apps to show `confirm()`, etc.
	 * | `allow-orientation-lock`                  | Yes      | Since we `allowfullscreen`, useful for games, etc.
	 * | `allow-pointer-lock`                      | Yes      | Useful for games.
	 * | `allow-popups`                            | Yes      | To open YouTube video in new window, for example.
	 * | `allow-popups-to-escape-sandbox`          | Yes      | Useful for ads.
	 * | `allow-presentation`                      | Yes      | To cast YouTube videos, for example.
	 * | `allow-same-origin`                       | Yes      | Removed if iframe is same origin.
	 * | `allow-scripts`                           | Yes      | An iframe&#039;s primary use case is custom JS.
	 * | `allow-storage-access-by-user-activation` | No       | Experimental per MDN.
	 * | `allow-top-navigation`                    | No       | Poor user experience.
	 * | `allow-top-navigation-by-user-activation` | Yes      | Key for clicking `target=_top` links in iframes.
	 *
	 * @since 0.2
	 * @since 2.0.5 Updated to include majority of other sandbox values which are included by default if sandbox is not provided.
	 * @link https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-sandbox
	 *
	 * @const string
	 */
	const SANDBOX_DEFAULTS = &#039;allow-downloads allow-forms allow-modals allow-orientation-lock allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-presentation allow-same-origin allow-scripts allow-top-navigation-by-user-activation&#039;;

	/**
	 * Tag.
	 *
	 * @since 0.2
	 *
	 * @var string HTML &lt;iframe&gt; tag to identify and replace with AMP version.
	 */
	public static $tag = &#039;iframe&#039;;

	/**
	 * Default args.
	 *
	 * @var array {
	 *     Default args.
	 *
	 *     @type bool   $add_placeholder       Whether to add a placeholder element.
	 *     @type bool   $add_noscript_fallback Whether to add a noscript fallback.
	 *     @type string $current_origin        The current origin serving the page. Normally this will be the $_SERVER[HTTP_HOST].
	 *     @type string $alias_origin          An alternative origin which can be supplied which is used when encountering same-origin iframes.
	 *     @type bool   $native_iframe_used    Whether an HTML5 iframe element should be used instead of amp-iframe.
	 * }
	 */
	protected $DEFAULT_ARGS = [
		&#039;add_placeholder&#039;       =&gt; false,
		&#039;add_noscript_fallback&#039; =&gt; true,
		&#039;current_origin&#039;        =&gt; null,
		&#039;alias_origin&#039;          =&gt; null,
		&#039;native_iframe_used&#039;    =&gt; false,
	];

	/**
	 * Get mapping of HTML selectors to the AMP component selectors which they may be converted into.
	 *
	 * @return array Mapping.
	 */
	public function get_selector_conversion_mapping() {
		if ( $this-&gt;args[&#039;native_iframe_used&#039;] ) {
			return [];
		}
		return [
			&#039;iframe&#039; =&gt; [
				&#039;amp-iframe&#039;,
			],
		];
	}

	/**
	 * Sanitize the &lt;iframe&gt; elements from the HTML contained in this instance&#039;s Dom\Document.
	 *
	 * @since 0.2
	 */
	public function sanitize() {
		$nodes     = $this-&gt;dom-&gt;getElementsByTagName( self::$tag );
		$num_nodes = $nodes-&gt;length;
		if ( 0 === $num_nodes ) {
			return;
		}

		if ( $this-&gt;args[&#039;add_noscript_fallback&#039;] ) {
			$this-&gt;initialize_noscript_allowed_attributes( self::$tag );
		}

		// Ensure origins are normalized.
		$this-&gt;args[&#039;current_origin&#039;] = $this-&gt;get_origin_from_url( $this-&gt;args[&#039;current_origin&#039;] );
		if ( ! empty( $this-&gt;args[&#039;alias_origin&#039;] ) ) {
			$this-&gt;args[&#039;alias_origin&#039;] = $this-&gt;get_origin_from_url( $this-&gt;args[&#039;alias_origin&#039;] );
		}

		for ( $i = $num_nodes - 1; $i &gt;= 0; $i-- ) {
			/**
			 * Iframe element.
			 *
			 * @var DOMElement $node
			 */
			$node = $nodes-&gt;item( $i );

			// Skip element if already inside of an AMP element as a noscript fallback, or if it has a dev mode exemption.
			if ( $this-&gt;is_inside_amp_noscript( $node ) || DevMode::hasExemptionForNode( $node ) ) {
				continue;
			}

			// If using native &lt;iframe&gt; instead of converting to &lt;amp-iframe&gt;, just mark the element as being unvalidated.
			if ( $this-&gt;args[&#039;native_iframe_used&#039;] ) {
				ValidationExemption::mark_node_as_px_verified( $node );
				continue;
			}

			$normalized_attributes = AMP_DOM_Utils::get_node_attributes_as_assoc_array( $node );
			$normalized_attributes = $this-&gt;set_layout( $normalized_attributes );
			$normalized_attributes = $this-&gt;normalize_attributes( $normalized_attributes );

			/**
			 * If the src doesn&#039;t exist, remove the node. Either it never
			 * existed or was invalidated while filtering attributes above.
			 *
			 * @todo: add an arg to allow for a fallback element in this instance (note that filter cannot be used inside a sanitizer).
			 * @see: https://github.com/ampproject/amphtml/issues/2261
			 */
			if ( empty( $normalized_attributes[&#039;src&#039;] ) ) {
				$this-&gt;remove_invalid_child(
					$node,
					[
						&#039;code&#039;       =&gt; AMP_Tag_And_Attribute_Sanitizer::ATTR_REQUIRED_BUT_MISSING,
						&#039;attributes&#039; =&gt; [ &#039;src&#039; ],
						&#039;spec_name&#039;  =&gt; &#039;amp-iframe&#039;,
					]
				);
				continue;
			}

			$this-&gt;did_convert_elements = true;
			if ( empty( $normalized_attributes[ Attribute::LAYOUT ] ) &amp;&amp; ! empty( $normalized_attributes[ Attribute::HEIGHT ] ) &amp;&amp; ! empty( $normalized_attributes[ Attribute::WIDTH ] ) ) {

				// Set layout to responsive if the iframe is aligned to full width.
				$figure_node = null;
				if ( $node-&gt;parentNode instanceof DOMElement &amp;&amp; &#039;figure&#039; === $node-&gt;parentNode-&gt;tagName ) {
					$figure_node = $node-&gt;parentNode;
				}
				if ( $node-&gt;parentNode-&gt;parentNode instanceof DOMElement &amp;&amp; &#039;figure&#039; === $node-&gt;parentNode-&gt;parentNode-&gt;tagName ) {
					$figure_node = $node-&gt;parentNode-&gt;parentNode;
				}

				if (
					! empty( $this-&gt;args[&#039;align_wide_support&#039;] )
					&amp;&amp; $figure_node
					&amp;&amp; preg_match( &#039;/(^|\s)(alignwide|alignfull)(\s|$)/&#039;, $figure_node-&gt;getAttribute( Attribute::CLASS_ ) )
				) {
					$normalized_attributes[ Attribute::LAYOUT ] = Layout::RESPONSIVE;
				} else {
					$normalized_attributes[ Attribute::LAYOUT ] = Layout::INTRINSIC;
				}

				$this-&gt;add_or_append_attribute( $normalized_attributes, &#039;class&#039;, &#039;amp-wp-enforced-sizes&#039; );
			}

			// Remove the ID from the original node so that PHP DOM doesn&#039;t fail to set it on the replacement element.
			$node-&gt;removeAttribute( Attribute::ID );

			$new_node = AMP_DOM_Utils::create_node( $this-&gt;dom, &#039;amp-iframe&#039;, $normalized_attributes );

			// Find existing placeholder/overflow.
			$placeholder_node = null;
			$overflow_node    = null;
			foreach ( iterator_to_array( $node-&gt;childNodes ) as $child ) {
				if ( ! ( $child instanceof DOMElement ) ) {
					continue;
				}
				if ( $child-&gt;hasAttribute( &#039;placeholder&#039; ) ) {
					$placeholder_node = $node-&gt;removeChild( $child );
				} elseif ( $child-&gt;hasAttribute( &#039;overflow&#039; ) ) {
					$overflow_node = $node-&gt;removeChild( $child );
				}
			}

			// Add placeholder.
			if ( $placeholder_node || true === $this-&gt;args[&#039;add_placeholder&#039;] ) {
				if ( ! $placeholder_node ) {
					$placeholder_node = $this-&gt;build_placeholder(); // @todo Can a better placeholder default be devised?
				}
				$new_node-&gt;appendChild( $placeholder_node );
			}

			// Add overflow.
			if ( $new_node-&gt;hasAttribute( &#039;resizable&#039; ) &amp;&amp; ! $overflow_node ) {
				$overflow_node = $this-&gt;dom-&gt;createElement( &#039;button&#039; );
				$overflow_node-&gt;setAttribute( &#039;overflow&#039;, &#039;&#039; );
				if ( $node-&gt;hasAttribute( &#039;data-amp-overflow-text&#039; ) ) {
					$overflow_text = $node-&gt;getAttribute( &#039;data-amp-overflow-text&#039; );
				} else {
					$overflow_text = __( &#039;Show all&#039;, &#039;amp&#039; );
				}
				$overflow_node-&gt;appendChild( $this-&gt;dom-&gt;createTextNode( $overflow_text ) );
			}
			if ( $overflow_node ) {
				$new_node-&gt;appendChild( $overflow_node );
			}

			$node-&gt;parentNode-&gt;replaceChild( $new_node, $node );

			if ( $this-&gt;args[&#039;add_noscript_fallback&#039;] ) {
				$node-&gt;setAttribute( &#039;src&#039;, $normalized_attributes[&#039;src&#039;] );

				// AMP is stricter than HTML5 for this attribute, so make sure we use a normalized value.
				if ( $node-&gt;hasAttribute( &#039;frameborder&#039; ) ) {
					$node-&gt;setAttribute( &#039;frameborder&#039;, $normalized_attributes[&#039;frameborder&#039;] );
				}

				// Preserve original node in noscript for no-JS environments.
				$this-&gt;append_old_node_noscript( $new_node, $node, $this-&gt;dom );
			}
		}
	}

	/**
	 * Normalize HTML attributes for &lt;amp-iframe&gt; elements.
	 *
	 * @param string[] $attributes {
	 *      Attributes.
	 *
	 *      @type string $src IFrame URL - Empty if HTTPS required per $this-&gt;args[&#039;require_https_src&#039;]
	 *      @type int $width &lt;iframe&gt; width attribute - Set to numeric value if px or %
	 *      @type int $height &lt;iframe&gt; height attribute - Set to numeric value if px or %
	 *      @type string $sandbox &lt;iframe&gt; `sandbox` attribute - Pass along if found; default to value of self::SANDBOX_DEFAULTS
	 *      @type string $class &lt;iframe&gt; `class` attribute - Pass along if found
	 *      @type string $sizes &lt;iframe&gt; `sizes` attribute - Pass along if found
	 *      @type string $id &lt;iframe&gt; `id` attribute - Pass along if found
	 *      @type int $frameborder &lt;iframe&gt; `frameborder` attribute - Filter to &#039;0&#039; or &#039;1&#039;; default to &#039;0&#039;
	 *      @type bool $allowfullscreen &lt;iframe&gt; `allowfullscreen` attribute - Convert &#039;false&#039; to empty string &#039;&#039;
	 *      @type bool $allowtransparency &lt;iframe&gt; `allowtransparency` attribute - Convert &#039;false&#039; to empty string &#039;&#039;
	 *      @type string $type &lt;iframe&gt; `type` attribute - Pass along if value is not `text/html`
	 * }
	 * @return array Returns HTML attributes; normalizes src, dimensions, frameborder, sandbox, allowtransparency and allowfullscreen
	 */
	private function normalize_attributes( $attributes ) {
		$out = [];

		$remove_allow_same_origin = false;
		foreach ( $attributes as $name =&gt; $value ) {
			switch ( $name ) {
				case &#039;src&#039;:
					// Make the URL absolute since relative URLs are not allowed in amp-iframe.
					if ( &#039;/&#039; === substr( $value, 0, 1 ) &amp;&amp; &#039;/&#039; !== substr( $value, 1, 1 ) ) {
						$value = untrailingslashit( $this-&gt;args[&#039;current_origin&#039;] ) . $value;
					}

					$value = $this-&gt;maybe_enforce_https_src( $value, true );

					// Handle case where iframe source origin is the same as the host page&#039;s origin.
					if ( $this-&gt;get_origin_from_url( $value ) === $this-&gt;args[&#039;current_origin&#039;] ) {
						if ( ! empty( $this-&gt;args[&#039;alias_origin&#039;] ) ) {
							$value = preg_replace( &#039;#^\w+://[^/]+#&#039;, $this-&gt;args[&#039;alias_origin&#039;], $value );
						} else {
							$remove_allow_same_origin = true;
						}
					}

					$out[ $name ] = $value;
					break;

				case &#039;width&#039;:
				case &#039;height&#039;:
					$out[ $name ] = $this-&gt;sanitize_dimension( $value, $name );
					break;

				case &#039;frameborder&#039;:
					$out[ $name ] = $this-&gt;sanitize_boolean_digit( $value );
					break;

				case &#039;allowfullscreen&#039;:
				case &#039;allowtransparency&#039;:
					if ( &#039;false&#039; !== strtolower( $value ) ) {
						$out[ $name ] = &#039;&#039;;
					}
					break;

				case &#039;mozallowfullscreen&#039;:
				case &#039;webkitallowfullscreen&#039;:
					// Omit these since amp-iframe will add them if needed if the `allowfullscreen` attribute is present.
					break;

				case &#039;loading&#039;:
					/*
					 * The `amp-iframe` component already does lazy-loading by default; trigger a validation error only
					 * if the value is not `lazy`.
					 */
					if ( &#039;lazy&#039; !== strtolower( $value ) ) {
						$out[ $name ] = $value;
					}
					break;

				case &#039;security&#039;:
					/*
					 * Omit the `security` attribute as it now been superseded by the `sandbox` attribute. It is
					 * (apparently) only supported by IE &lt;https://stackoverflow.com/a/20071528&gt;.
					 */
					break;

				case &#039;marginwidth&#039;:
				case &#039;marginheight&#039;:
					// These attributes have been obsolete since HTML5. If they have the value `0` they can be omitted.
					if ( &#039;0&#039; !== $value ) {
						$out[ $name ] = $value;
					}
					break;

				case &#039;data-amp-resizable&#039;:
					$out[&#039;resizable&#039;] = &#039;&#039;;
					break;

				case &#039;data-amp-overflow-text&#039;:
					// No need to copy.
					break;

				case &#039;type&#039;:
					/*
					 * Omit the `type` attribute if its value is `text/html`. Popular embed providers such as Amazon
					 * Kindle use this non-standard attribute, which is apparently a vestige from usage on &lt;object&gt;.
					 */
					if ( &#039;text/html&#039; !== strtolower( $value ) ) {
						$out[ $name ] = $value;
					}
					break;

				default:
					$out[ $name ] = $value;
					break;
			}
		}

		if ( ! isset( $out[&#039;sandbox&#039;] ) ) {
			$out[&#039;sandbox&#039;] = self::SANDBOX_DEFAULTS;
		}

		// Remove allow-same-origin from sandbox if required.
		if ( $remove_allow_same_origin ) {
			$out[&#039;sandbox&#039;] = trim( preg_replace( &#039;/(^|\s)allow-same-origin(\s|$)/&#039;, &#039; &#039;, $out[&#039;sandbox&#039;] ) );
		}

		return $out;
	}

	/**
	 * Obtain the origin part of a given URL (scheme, host, port).
	 *
	 * @param string $url URL.
	 * @return string|null Origin URL or null if parse failed.
	 */
	private function get_origin_from_url( $url ) {
		$parsed_url = wp_parse_url( $url );
		if ( ! isset( $parsed_url[&#039;host&#039;] ) ) {
			return null;
		}
		if ( ! isset( $parsed_url[&#039;scheme&#039;] ) ) {
			$parsed_url[&#039;scheme&#039;] = wp_parse_url( $this-&gt;args[&#039;current_origin&#039;], PHP_URL_SCHEME );
		}
		$origin  = $parsed_url[&#039;scheme&#039;] . &#039;://&#039;;
		$origin .= $parsed_url[&#039;host&#039;];
		if ( isset( $parsed_url[&#039;port&#039;] ) ) {
			$origin .= &#039;:&#039; . $parsed_url[&#039;port&#039;];
		}
		return $origin;
	}

	/**
	 * Builds a DOMElement to use as a placeholder for an &lt;iframe&gt;.
	 *
	 * Important: The element returned must not be block-level (e.g. div) as the PHP DOM parser
	 * will move it out from inside any containing paragraph. So this is why a span is used.
	 *
	 * @since 0.2
	 *
	 * @return DOMElement|false
	 */
	private function build_placeholder() {
		return AMP_DOM_Utils::create_node(
			$this-&gt;dom,
			&#039;span&#039;,
			[
				&#039;placeholder&#039; =&gt; &#039;&#039;,
				&#039;class&#039;       =&gt; &#039;amp-wp-iframe-placeholder&#039;,
			]
		);
	}

	/**
	 * Sanitizes a boolean character (or string) into a &#039;0&#039; or &#039;1&#039; character.
	 *
	 * @param mixed $value A boolean character to sanitize. If a string containing more than a single
	 *                     character is provided, only the first character is taken into account.
	 *
	 * @return string Returns either &#039;0&#039; or &#039;1&#039;.
	 */
	private function sanitize_boolean_digit( $value ) {

		// Default to false if the value was forgotten.
		if ( empty( $value ) ) {
			return &#039;0&#039;;
		}

		// Default to false if the value has an unexpected type.
		if ( ! is_string( $value ) &amp;&amp; ! is_numeric( $value ) ) {
			return &#039;0&#039;;
		}

		// See: https://github.com/ampproject/amp-wp/issues/2335#issuecomment-493209861.
		switch ( substr( (string) $value, 0, 1 ) ) {
			case &#039;1&#039;:
			case &#039;y&#039;:
			case &#039;Y&#039;:
				return &#039;1&#039;;
		}

		return &#039;0&#039;;
	}
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fpublic_html%2Fwp-content%2Fplugins%2Famp%2Fincludes%2Fsanitizers'>⬅ Back to Directory</a>