Re: Prevent XSS using DOM Extension and/or SimpleXML

[Rob <rrichards@xxxxxxxxxxxxxxxx>]

Raphael Martins wrote:

> But I don´t know how to loop over every attribute for each tag in the 
> DomTree.

Not sure if you need to do this element by element or just want all 
attributes, but here are two ways using DOM. They assume $dom is an 
already loaded DOMDocument.

1 - Use XPath:

$xPath = new DOMXPath($dom);
$nodelist = $xPath->query("//@*");
foreach ($nodelist AS $attr) {
	print $attr->nodeName." ".$attr->nodeValue."\n";
}


2 - Walk the tree manually:

function checkElement($node) {
	$attlist = $node->attributes;
	foreach ($attlist AS $attr) {
		print $attr->nodeName." ".$attr->nodeValue."\n";
	}
	if ($node->hasChildNodes()) {
		foreach ($node->childNodes AS $child) {
			if ($child->nodeType == XML_ELEMENT_NODE) {
				checkElement($child);
			}
		}
	}
}

$root = $dom->documentElement;
checkElement($root);

Rob

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php