new pisilinux web sites

2026-07-01 16:44:17 +03:00
commit b58488b586
21740 changed files with 2066209 additions and 0 deletions
@@ -0,0 +1,53 @@
+<?php namespace ZN\Security;
+/**
+ * ZN PHP Web Framework
+ * 
+ * "Simplicity is the ultimate sophistication." ~ Da Vinci
+ * 
+ * @package ZN
+ * @license MIT [http://opensource.org/licenses/MIT]
+ * @author  Ozan UYKUN [ozan@znframework.com]
+ */
+
+class CrossSiteScripting
+{
+    /**
+     * Script Bad Chars
+     * 
+     * @var array
+     */
+    protected static $scriptBadChars =
+    [
+        'document\.cookie' => 'document&#46;cookie',
+        'document\.write'  => 'document&#46;write',
+        '\.parentNode'     => '&#46;parentNode',
+        '\.innerHTML'      => '&#46;innerHTML',
+        '\-moz\-binding'   => '&#150;moz&#150;binding',
+        '<'                => '&#60;',
+        '>'                => '&#62;',
+    ];
+
+    /**
+     * Encode Cross Site Scripting
+     * 
+     * @param string $string 
+     * 
+     * @return string
+     */
+    public static function encode(string $string) : string
+    {
+        $secBadChars = self::$scriptBadChars;
+
+        if( ! empty($secBadChars) )
+        {
+            foreach( $secBadChars as $badChar => $changeChar )
+            {
+                $badChar = trim($badChar, '/');
+
+                $string = preg_replace('/'.$badChar.'/xi', $changeChar, $string);
+            }
+        }
+
+        return $string;
+    }
+}