';
- } else {
- $codeblocks[] = '' . htmlspecialchars($matches[2], ENT_NOQUOTES, 'UTF-8') . '';
- }
-
- return $return;
- },
- $text
- );
-
- // Hide all [noparse] contained bbtags by spacefying them
- // POSSIBLE BUG --> Will the 'preg' functions crash if there's an embedded image?
+ $text = self::performWithEscapedTags($text, ['code'], function ($text) use ($try_oembed, $simple_html, $for_plaintext, $a) {
+ $text = self::performWithEscapedTags($text, ['noparse', 'nobb', 'pre'], function ($text) use ($try_oembed, $simple_html, $for_plaintext, $a) {
+ /*
+ * preg_match_callback function to replace potential Oembed tags with Oembed content
+ *
+ * $match[0] = [tag]$url[/tag] or [tag=$url]$title[/tag]
+ * $match[1] = $url
+ * $match[2] = $title or absent
+ */
+ $try_oembed_callback = function ($match)
+ {
+ $url = $match[1];
+ $title = $match[2] ?? null;
- $text = preg_replace_callback("/\[noparse\](.*?)\[\/noparse\]/ism", 'self::escapeNoparseCallback', $text);
- $text = preg_replace_callback("/\[nobb\](.*?)\[\/nobb\]/ism", 'self::escapeNoparseCallback', $text);
- $text = preg_replace_callback("/\[pre\](.*?)\[\/pre\]/ism", 'self::escapeNoparseCallback', $text);
+ try {
+ $return = OEmbed::getHTML($url, $title);
+ } catch (Exception $ex) {
+ $return = $match[0];
+ }
- // Remove the abstract element. It is a non visible element.
- $text = self::stripAbstract($text);
+ return $return;
+ };
- // Move all spaces out of the tags
- $text = preg_replace("/\[(\w*)\](\s*)/ism", '$2[$1]', $text);
- $text = preg_replace("/(\s*)\[\/(\w*)\]/ism", '[/$2]$1', $text);
- // Extract the private images which use data urls since preg has issues with
- // large data sizes. Stash them away while we do bbcode conversion, and then put them back
- // in after we've done all the regex matching. We cannot use any preg functions to do this.
- $extracted = self::extractImagesFromItemBody($text);
- $text = $extracted['body'];
- $saved_image = $extracted['images'];
+ // Remove the abstract element. It is a non visible element.
+ $text = self::stripAbstract($text);
- // If we find any event code, turn it into an event.
- // After we're finished processing the bbcode we'll
- // replace all of the event code with a reformatted version.
+ // Move all spaces out of the tags
+ $text = preg_replace("/\[(\w*)\](\s*)/ism", '$2[$1]', $text);
+ $text = preg_replace("/(\s*)\[\/(\w*)\]/ism", '[/$2]$1', $text);
- $ev = Event::fromBBCode($text);
+ // Extract the private images which use data urls since preg has issues with
+ // large data sizes. Stash them away while we do bbcode conversion, and then put them back
+ // in after we've done all the regex matching. We cannot use any preg functions to do this.
- // Replace any html brackets with HTML Entities to prevent executing HTML or script
- // Don't use strip_tags here because it breaks [url] search by replacing & with amp
+ $extracted = self::extractImagesFromItemBody($text);
+ $text = $extracted['body'];
+ $saved_image = $extracted['images'];
- $text = str_replace("<", "<", $text);
- $text = str_replace(">", ">", $text);
+ // If we find any event code, turn it into an event.
+ // After we're finished processing the bbcode we'll
+ // replace all of the event code with a reformatted version.
- // remove some newlines before the general conversion
- $text = preg_replace("/\s?\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", "[share$1]$2[/share]", $text);
- $text = preg_replace("/\s?\[quote(.*?)\]\s?(.*?)\s?\[\/quote\]\s?/ism", "[quote$1]$2[/quote]", $text);
+ $ev = Event::fromBBCode($text);
- // when the content is meant exporting to other systems then remove the avatar picture since this doesn't really look good on these systems
- if (!$try_oembed) {
- $text = preg_replace("/\[share(.*?)avatar\s?=\s?'.*?'\s?(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", "\n[share$1$2]$3[/share]", $text);
- }
+ // Replace any html brackets with HTML Entities to prevent executing HTML or script
+ // Don't use strip_tags here because it breaks [url] search by replacing & with amp
- // Convert new line chars to html tags
+ $text = str_replace("<", "<", $text);
+ $text = str_replace(">", ">", $text);
- // nlbr seems to be hopelessly messed up
- // $Text = nl2br($Text);
+ // remove some newlines before the general conversion
+ $text = preg_replace("/\s?\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", "[share$1]$2[/share]", $text);
+ $text = preg_replace("/\s?\[quote(.*?)\]\s?(.*?)\s?\[\/quote\]\s?/ism", "[quote$1]$2[/quote]", $text);
- // We'll emulate it.
+ // when the content is meant exporting to other systems then remove the avatar picture since this doesn't really look good on these systems
+ if (!$try_oembed) {
+ $text = preg_replace("/\[share(.*?)avatar\s?=\s?'.*?'\s?(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", "\n[share$1$2]$3[/share]", $text);
+ }
- $text = trim($text);
- $text = str_replace("\r\n", "\n", $text);
-
- // Remove linefeeds inside of the table elements. See issue #6799
- $search = ["\n[th]", "[th]\n", " [th]", "\n[/th]", "[/th]\n", "[/th] ",
- "\n[td]", "[td]\n", " [td]", "\n[/td]", "[/td]\n", "[/td] ",
- "\n[tr]", "[tr]\n", " [tr]", "[tr] ", "\n[/tr]", "[/tr]\n", " [/tr]", "[/tr] ",
- "[table]\n", "[table] ", " [table]", "\n[/table]", " [/table]", "[/table] "];
- $replace = ["[th]", "[th]", "[th]", "[/th]", "[/th]", "[/th]",
- "[td]", "[td]", "[td]", "[/td]", "[/td]", "[/td]",
- "[tr]", "[tr]", "[tr]", "[tr]", "[/tr]", "[/tr]", "[/tr]", "[/tr]",
- "[table]", "[table]", "[table]", "[/table]", "[/table]", "[/table]"];
- do {
- $oldtext = $text;
- $text = str_replace($search, $replace, $text);
- } while ($oldtext != $text);
-
- // Replace these here only once
- $search = ["\n[table]", "[/table]\n"];
- $replace = ["[table]", "[/table]"];
- $text = str_replace($search, $replace, $text);
-
- // removing multiplicated newlines
- if (DI::config()->get('system', 'remove_multiplicated_lines')) {
- $search = ["\n\n\n", "\n ", " \n", "[/quote]\n\n", "\n[/quote]", "[/li]\n", "\n[li]", "\n[ul]", "[/ul]\n", "\n\n[share ", "[/attachment]\n",
- "\n[h1]", "[/h1]\n", "\n[h2]", "[/h2]\n", "\n[h3]", "[/h3]\n", "\n[h4]", "[/h4]\n", "\n[h5]", "[/h5]\n", "\n[h6]", "[/h6]\n"];
- $replace = ["\n\n", "\n", "\n", "[/quote]\n", "[/quote]", "[/li]", "[li]", "[ul]", "[/ul]", "\n[share ", "[/attachment]",
- "[h1]", "[/h1]", "[h2]", "[/h2]", "[h3]", "[/h3]", "[h4]", "[/h4]", "[h5]", "[/h5]", "[h6]", "[/h6]"];
- do {
- $oldtext = $text;
+ // Convert new line chars to html tags
+
+ // nlbr seems to be hopelessly messed up
+ // $Text = nl2br($Text);
+
+ // We'll emulate it.
+
+ $text = trim($text);
+ $text = str_replace("\r\n", "\n", $text);
+
+ // Remove linefeeds inside of the table elements. See issue #6799
+ $search = ["\n[th]", "[th]\n", " [th]", "\n[/th]", "[/th]\n", "[/th] ",
+ "\n[td]", "[td]\n", " [td]", "\n[/td]", "[/td]\n", "[/td] ",
+ "\n[tr]", "[tr]\n", " [tr]", "[tr] ", "\n[/tr]", "[/tr]\n", " [/tr]", "[/tr] ",
+ "[table]\n", "[table] ", " [table]", "\n[/table]", " [/table]", "[/table] "];
+ $replace = ["[th]", "[th]", "[th]", "[/th]", "[/th]", "[/th]",
+ "[td]", "[td]", "[td]", "[/td]", "[/td]", "[/td]",
+ "[tr]", "[tr]", "[tr]", "[tr]", "[/tr]", "[/tr]", "[/tr]", "[/tr]",
+ "[table]", "[table]", "[table]", "[/table]", "[/table]", "[/table]"];
+ do {
+ $oldtext = $text;
+ $text = str_replace($search, $replace, $text);
+ } while ($oldtext != $text);
+
+ // Replace these here only once
+ $search = ["\n[table]", "[/table]\n"];
+ $replace = ["[table]", "[/table]"];
$text = str_replace($search, $replace, $text);
- } while ($oldtext != $text);
- }
-
- /// @todo Have a closer look at the different html modes
- // Handle attached links or videos
- if ($simple_html == self::ACTIVITYPUB) {
- $text = self::removeAttachment($text);
- } elseif (!in_array($simple_html, [self::INTERNAL, self::CONNECTORS])) {
- $text = self::removeAttachment($text, true);
- } else {
- $text = self::convertAttachment($text, $simple_html, $try_oembed);
- }
-
- // leave open the posibility of [map=something]
- // this is replaced in Item::prepareBody() which has knowledge of the item location
- if (strpos($text, '[/map]') !== false) {
- $text = preg_replace_callback(
- "/\[map\](.*?)\[\/map\]/ism",
- function ($match) use ($simple_html) {
- return str_replace($match[0], '
', $text);
- // Check for colored text
- $text = preg_replace("(\[color=(.*?)\](.*?)\[\/color\])ism", "$2", $text);
+ // Check for paragraph
+ $text = preg_replace("(\[p\](.*?)\[\/p\])ism", '
$1
', $text);
- // Check for sized text
- // [size=50] --> font-size: 50px (with the unit).
- if ($simple_html != self::DIASPORA) {
- $text = preg_replace("(\[size=(\d*?)\](.*?)\[\/size\])ism", "$2", $text);
- $text = preg_replace("(\[size=(.*?)\](.*?)\[\/size\])ism", "$2", $text);
- } else {
- // Issue 2199: Diaspora doesn't interpret the construct above, nor the or element
- $text = preg_replace("(\[size=(.*?)\](.*?)\[\/size\])ism", "$2", $text);
- }
+ // Check for bold text
+ $text = preg_replace("(\[b\](.*?)\[\/b\])ism", '$1', $text);
+ // Check for Italics text
+ $text = preg_replace("(\[i\](.*?)\[\/i\])ism", '$1', $text);
- // Check for centered text
- $text = preg_replace("(\[center\](.*?)\[\/center\])ism", "
$1
", $text);
+ // Check for Underline text
+ $text = preg_replace("(\[u\](.*?)\[\/u\])ism", '$1', $text);
- // Check for list text
- $text = str_replace("[*]", "
", $text);
+ // oembed tag
+ $text = OEmbed::BBCode2HTML($text);
- // If we found an event earlier, strip out all the event code and replace with a reformatted version.
- // Replace the event-start section with the entire formatted event. The other bbcode is stripped.
- // Summary (e.g. title) is required, earlier revisions only required description (in addition to
- // start which is always required). Allow desc with a missing summary for compatibility.
+ // Avoid triple linefeeds through oembed
+ $text = str_replace("
", "
", $text);
- if ((!empty($ev['desc']) || !empty($ev['summary'])) && !empty($ev['start'])) {
- $sub = Event::getHTML($ev, $simple_html);
+ // If we found an event earlier, strip out all the event code and replace with a reformatted version.
+ // Replace the event-start section with the entire formatted event. The other bbcode is stripped.
+ // Summary (e.g. title) is required, earlier revisions only required description (in addition to
+ // start which is always required). Allow desc with a missing summary for compatibility.
- $text = preg_replace("/\[event\-summary\](.*?)\[\/event\-summary\]/ism", '', $text);
- $text = preg_replace("/\[event\-description\](.*?)\[\/event\-description\]/ism", '', $text);
- $text = preg_replace("/\[event\-start\](.*?)\[\/event\-start\]/ism", $sub, $text);
- $text = preg_replace("/\[event\-finish\](.*?)\[\/event\-finish\]/ism", '', $text);
- $text = preg_replace("/\[event\-location\](.*?)\[\/event\-location\]/ism", '', $text);
- $text = preg_replace("/\[event\-adjust\](.*?)\[\/event\-adjust\]/ism", '', $text);
- $text = preg_replace("/\[event\-id\](.*?)\[\/event\-id\]/ism", '', $text);
- }
+ if ((!empty($ev['desc']) || !empty($ev['summary'])) && !empty($ev['start'])) {
+ $sub = Event::getHTML($ev, $simple_html);
- // Replace non graphical smilies for external posts
- if (!$nosmile && !$for_plaintext) {
- $oldtext = $text;
- $text = Smilies::replace($text);
- if (DI::config()->get('system', 'big_emojis') && ($simple_html != self::DIASPORA) && ($oldtext != $text)) {
- $conv = html_entity_decode(str_replace([' ', "\n", "\r"], '', $text));
- // Emojis are always 4 byte Unicode characters
- if (strlen($conv) / mb_strlen($conv) == 4) {
- $text = '' . $text . '';
+ $text = preg_replace("/\[event\-summary\](.*?)\[\/event\-summary\]/ism", '', $text);
+ $text = preg_replace("/\[event\-description\](.*?)\[\/event\-description\]/ism", '', $text);
+ $text = preg_replace("/\[event\-start\](.*?)\[\/event\-start\]/ism", $sub, $text);
+ $text = preg_replace("/\[event\-finish\](.*?)\[\/event\-finish\]/ism", '', $text);
+ $text = preg_replace("/\[event\-location\](.*?)\[\/event\-location\]/ism", '', $text);
+ $text = preg_replace("/\[event\-adjust\](.*?)\[\/event\-adjust\]/ism", '', $text);
+ $text = preg_replace("/\[event\-id\](.*?)\[\/event\-id\]/ism", '', $text);
}
- }
- }
- if (!$for_plaintext) {
- if (in_array($simple_html, [self::OSTATUS, self::ACTIVITYPUB])) {
- $text = preg_replace_callback("/\[url\](.*?)\[\/url\]/ism", 'self::convertUrlForActivityPubCallback', $text);
- $text = preg_replace_callback("/\[url\=(.*?)\](.*?)\[\/url\]/ism", 'self::convertUrlForActivityPubCallback', $text);
- }
- } else {
- $text = preg_replace("(\[url\](.*?)\[\/url\])ism", " $1 ", $text);
- $text = preg_replace_callback("&\[url=([^\[\]]*)\]\[img\](.*)\[\/img\]\[\/url\]&Usi", 'self::removePictureLinksCallback', $text);
- }
-
- $text = str_replace(["\r","\n"], [' ', ' '], $text);
-
- // Remove all hashtag addresses
- if ($simple_html && !in_array($simple_html, [self::DIASPORA, self::OSTATUS, self::ACTIVITYPUB])) {
- $text = preg_replace("/([#@!])\[url\=(.*?)\](.*?)\[\/url\]/ism", '$1$3', $text);
- } elseif ($simple_html == self::DIASPORA) {
- // The ! is converted to @ since Diaspora only understands the @
- $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
- '@$3',
- $text);
- } elseif (in_array($simple_html, [self::OSTATUS, self::ACTIVITYPUB])) {
- $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
- '$1$3',
- $text);
- } elseif (!$simple_html) {
- $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
- '$1$3',
- $text);
- }
+ // Replace non graphical smilies for external posts
+ if (!$nosmile && !$for_plaintext) {
+ $text = Smilies::replace($text);
+ }
- // Bookmarks in red - will be converted to bookmarks in friendica
- $text = preg_replace("/#\^\[url\](.*?)\[\/url\]/ism", '[bookmark=$1]$1[/bookmark]', $text);
- $text = preg_replace("/#\^\[url\=(.*?)\](.*?)\[\/url\]/ism", '[bookmark=$1]$2[/bookmark]', $text);
- $text = preg_replace("/#\[url\=.*?\]\^\[\/url\]\[url\=(.*?)\](.*?)\[\/url\]/i",
- "[bookmark=$1]$2[/bookmark]", $text);
+ if (!$for_plaintext && DI::config()->get('system', 'big_emojis') && ($simple_html != self::DIASPORA)) {
+ $conv = html_entity_decode(str_replace([' ', "\n", "\r"], '', $text));
+ // Emojis are always 4 byte Unicode characters
+ if (!empty($conv) && (strlen($conv) / mb_strlen($conv) == 4)) {
+ $text = '' . $text . '';
+ }
+ }
- if (in_array($simple_html, [self::API, self::OSTATUS, self::TWITTER])) {
- $text = preg_replace_callback("/([^#@!])\[url\=([^\]]*)\](.*?)\[\/url\]/ism", "self::expandLinksCallback", $text);
- //$Text = preg_replace("/[^#@!]\[url\=([^\]]*)\](.*?)\[\/url\]/ism", ' $2 [url]$1[/url]', $Text);
- $text = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", ' $2 [url]$1[/url]',$text);
- }
+ if (!$for_plaintext) {
+ if (in_array($simple_html, [self::OSTATUS, self::ACTIVITYPUB])) {
+ $text = preg_replace_callback("/\[url\](.*?)\[\/url\]/ism", 'self::convertUrlForActivityPubCallback', $text);
+ $text = preg_replace_callback("/\[url\=(.*?)\](.*?)\[\/url\]/ism", 'self::convertUrlForActivityPubCallback', $text);
+ }
+ } else {
+ $text = preg_replace("(\[url\](.*?)\[\/url\])ism", " $1 ", $text);
+ $text = preg_replace_callback("&\[url=([^\[\]]*)\]\[img\](.*)\[\/img\]\[\/url\]&Usi", 'self::removePictureLinksCallback', $text);
+ }
- // Perform URL Search
- if ($try_oembed) {
- $text = preg_replace_callback("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $try_oembed_callback, $text);
- }
+ $text = str_replace(["\r","\n"], [' ', ' '], $text);
+
+ // Remove all hashtag addresses
+ if ($simple_html && !in_array($simple_html, [self::DIASPORA, self::OSTATUS, self::ACTIVITYPUB])) {
+ $text = preg_replace("/([#@!])\[url\=(.*?)\](.*?)\[\/url\]/ism", '$1$3', $text);
+ } elseif ($simple_html == self::DIASPORA) {
+ // The ! is converted to @ since Diaspora only understands the @
+ $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
+ '@$3',
+ $text);
+ } elseif (in_array($simple_html, [self::OSTATUS, self::ACTIVITYPUB])) {
+ $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
+ '$1$3',
+ $text);
+ } elseif (!$simple_html) {
+ $text = preg_replace("/([@!])\[url\=(.*?)\](.*?)\[\/url\]/ism",
+ '$1$3',
+ $text);
+ }
- $text = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", '[url=$1]$2[/url]', $text);
+ // Bookmarks in red - will be converted to bookmarks in friendica
+ $text = preg_replace("/#\^\[url\](.*?)\[\/url\]/ism", '[bookmark=$1]$1[/bookmark]', $text);
+ $text = preg_replace("/#\^\[url\=(.*?)\](.*?)\[\/url\]/ism", '[bookmark=$1]$2[/bookmark]', $text);
+ $text = preg_replace("/#\[url\=.*?\]\^\[\/url\]\[url\=(.*?)\](.*?)\[\/url\]/i",
+ "[bookmark=$1]$2[/bookmark]", $text);
- // Handle Diaspora posts
- $text = preg_replace_callback(
- "&\[url=/?posts/([^\[\]]*)\](.*)\[\/url\]&Usi",
- function ($match) {
- return "[url=" . DI::baseUrl() . "/display/" . $match[1] . "]" . $match[2] . "[/url]";
- }, $text
- );
+ if (in_array($simple_html, [self::API, self::OSTATUS, self::TWITTER])) {
+ $text = preg_replace_callback("/([^#@!])\[url\=([^\]]*)\](.*?)\[\/url\]/ism", "self::expandLinksCallback", $text);
+ //$Text = preg_replace("/[^#@!]\[url\=([^\]]*)\](.*?)\[\/url\]/ism", ' $2 [url]$1[/url]', $Text);
+ $text = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", ' $2 [url]$1[/url]',$text);
+ }
- $text = preg_replace_callback(
- "&\[url=/people\?q\=(.*)\](.*)\[\/url\]&Usi",
- function ($match) {
- return "[url=" . DI::baseUrl() . "/search?search=%40" . $match[1] . "]" . $match[2] . "[/url]";
- }, $text
- );
+ // Perform URL Search
+ if ($try_oembed) {
+ $text = preg_replace_callback("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $try_oembed_callback, $text);
+ }
- // Server independent link to posts and comments
- // See issue: https://github.com/diaspora/diaspora_federation/issues/75
- $expression = "=diaspora://.*?/post/([0-9A-Za-z\-_@.:]{15,254}[0-9A-Za-z])=ism";
- $text = preg_replace($expression, DI::baseUrl()."/display/$1", $text);
+ $text = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", '[url=$1]$2[/url]', $text);
+
+ // Handle Diaspora posts
+ $text = preg_replace_callback(
+ "&\[url=/?posts/([^\[\]]*)\](.*)\[\/url\]&Usi",
+ function ($match) {
+ return "[url=" . DI::baseUrl() . "/display/" . $match[1] . "]" . $match[2] . "[/url]";
+ }, $text
+ );
+
+ $text = preg_replace_callback(
+ "&\[url=/people\?q\=(.*)\](.*)\[\/url\]&Usi",
+ function ($match) {
+ return "[url=" . DI::baseUrl() . "/search?search=%40" . $match[1] . "]" . $match[2] . "[/url]";
+ }, $text
+ );
+
+ // Server independent link to posts and comments
+ // See issue: https://github.com/diaspora/diaspora_federation/issues/75
+ $expression = "=diaspora://.*?/post/([0-9A-Za-z\-_@.:]{15,254}[0-9A-Za-z])=ism";
+ $text = preg_replace($expression, DI::baseUrl()."/display/$1", $text);
+
+ /* Tag conversion
+ * Supports:
+ * - #[url=][/url]
+ * - [url=]#[/url]
+ */
+ $text = preg_replace_callback("/(?:#\[url\=[^\[\]]*\]|\[url\=[^\[\]]*\]#)(.*?)\[\/url\]/ism", function($matches) use ($simple_html) {
+ if ($simple_html == BBCode::ACTIVITYPUB) {
+ return '#'
+ . XML::escape($matches[1]) . '';
+ } else {
+ return '#'
+ . XML::escape($matches[1]) . '';
+ }
+ }, $text);
- /* Tag conversion
- * Supports:
- * - #[url=][/url]
- * - [url=]#[/url]
- */
- $text = preg_replace_callback("/(?:#\[url\=[^\[\]]*\]|\[url\=[^\[\]]*\]#)(.*?)\[\/url\]/ism", function($matches) use ($simple_html) {
- if ($simple_html == BBCode::ACTIVITYPUB) {
- return '#'
- . XML::escape($matches[1]) . '';
- } else {
- return '#'
- . XML::escape($matches[1]) . '';
- }
- }, $text);
+ // We need no target="_blank" rel="noopener noreferrer" for local links
+ // convert links start with DI::baseUrl() as local link without the target="_blank" rel="noopener noreferrer" attribute
+ $escapedBaseUrl = preg_quote(DI::baseUrl(), '/');
+ $text = preg_replace("/\[url\](".$escapedBaseUrl.".*?)\[\/url\]/ism", '$1', $text);
+ $text = preg_replace("/\[url\=(".$escapedBaseUrl.".*?)\](.*?)\[\/url\]/ism", '$2', $text);
- // We need no target="_blank" rel="noopener noreferrer" for local links
- // convert links start with DI::baseUrl() as local link without the target="_blank" rel="noopener noreferrer" attribute
- $escapedBaseUrl = preg_quote(DI::baseUrl(), '/');
- $text = preg_replace("/\[url\](".$escapedBaseUrl.".*?)\[\/url\]/ism", '$1', $text);
- $text = preg_replace("/\[url\=(".$escapedBaseUrl.".*?)\](.*?)\[\/url\]/ism", '$2', $text);
+ $text = preg_replace("/\[url\](.*?)\[\/url\]/ism", '$1', $text);
+ $text = preg_replace("/\[url\=(.*?)\](.*?)\[\/url\]/ism", '$2', $text);
- $text = preg_replace("/\[url\](.*?)\[\/url\]/ism", '$1', $text);
- $text = preg_replace("/\[url\=(.*?)\](.*?)\[\/url\]/ism", '$2', $text);
+ // Red compatibility, though the link can't be authenticated on Friendica
+ $text = preg_replace("/\[zrl\=(.*?)\](.*?)\[\/zrl\]/ism", '$2', $text);
- // Red compatibility, though the link can't be authenticated on Friendica
- $text = preg_replace("/\[zrl\=(.*?)\](.*?)\[\/zrl\]/ism", '$2', $text);
+ // we may need to restrict this further if it picks up too many strays
+ // link acct:user@host to a webfinger profile redirector
- // we may need to restrict this further if it picks up too many strays
- // link acct:user@host to a webfinger profile redirector
+ $text = preg_replace('/acct:([^@]+)@((?!\-)(?:[a-zA-Z\d\-]{0,62}[a-zA-Z\d]\.){1,126}(?!\d+)[a-zA-Z\d]{1,63})/', 'acct:$1@$2', $text);
- $text = preg_replace('/acct:([^@]+)@((?!\-)(?:[a-zA-Z\d\-]{0,62}[a-zA-Z\d]\.){1,126}(?!\d+)[a-zA-Z\d]{1,63})/', 'acct:$1@$2', $text);
+ // Perform MAIL Search
+ $text = preg_replace("/\[mail\](.*?)\[\/mail\]/", '$1', $text);
+ $text = preg_replace("/\[mail\=(.*?)\](.*?)\[\/mail\]/", '$2', $text);
- // Perform MAIL Search
- $text = preg_replace("/\[mail\](.*?)\[\/mail\]/", '$1', $text);
- $text = preg_replace("/\[mail\=(.*?)\](.*?)\[\/mail\]/", '$2', $text);
+ /// @todo What is the meaning of these lines?
+ $text = preg_replace('/\[\&\;([#a-z0-9]+)\;\]/', '&$1;', $text);
+ $text = preg_replace('/\&\#039\;/', '\'', $text);
- // Unhide all [noparse] contained bbtags unspacefying them
- // and triming the [noparse] tag.
+ // Currently deactivated, it made problems with " inside of alt texts.
+ //$text = preg_replace('/\"\;/', '"', $text);
- $text = preg_replace_callback("/\[noparse\](.*?)\[\/noparse\]/ism", 'self::unescapeNoparseCallback', $text);
- $text = preg_replace_callback("/\[nobb\](.*?)\[\/nobb\]/ism", 'self::unescapeNoparseCallback', $text);
- $text = preg_replace_callback("/\[pre\](.*?)\[\/pre\]/ism", 'self::unescapeNoparseCallback', $text);
+ // fix any escaped ampersands that may have been converted into links
+ $text = preg_replace('/\<([^>]*?)(src|href)=(.*?)\&\;(.*?)\>/ism', '<$1$2=$3&$4>', $text);
- /// @todo What is the meaning of these lines?
- $text = preg_replace('/\[\&\;([#a-z0-9]+)\;\]/', '&$1;', $text);
- $text = preg_replace('/\&\#039\;/', '\'', $text);
+ // sanitizes src attributes (http and redir URLs for displaying in a web page, cid used for inline images in emails)
+ $allowed_src_protocols = ['//', 'http://', 'https://', 'redir/', 'cid:'];
- // Currently deactivated, it made problems with " inside of alt texts.
- //$text = preg_replace('/\"\;/', '"', $text);
+ array_walk($allowed_src_protocols, function(&$value) { $value = preg_quote($value, '#');});
- // fix any escaped ampersands that may have been converted into links
- $text = preg_replace('/\<([^>]*?)(src|href)=(.*?)\&\;(.*?)\>/ism', '<$1$2=$3&$4>', $text);
+ $text = preg_replace('#<([^>]*?)(src)="(?!' . implode('|', $allowed_src_protocols) . ')(.*?)"(.*?)>#ism',
+ '<$1$2=""$4 data-original-src="$3" class="invalid-src" title="' . DI::l10n()->t('Invalid source protocol') . '">', $text);
- // sanitizes src attributes (http and redir URLs for displaying in a web page, cid used for inline images in emails)
- $allowed_src_protocols = ['//', 'http://', 'https://', 'redir/', 'cid:'];
+ // sanitize href attributes (only allowlisted protocols URLs)
+ // default value for backward compatibility
+ $allowed_link_protocols = DI::config()->get('system', 'allowed_link_protocols', []);
- array_walk($allowed_src_protocols, function(&$value) { $value = preg_quote($value, '#');});
+ // Always allowed protocol even if config isn't set or not including it
+ $allowed_link_protocols[] = '//';
+ $allowed_link_protocols[] = 'http://';
+ $allowed_link_protocols[] = 'https://';
+ $allowed_link_protocols[] = 'redir/';
- $text = preg_replace('#<([^>]*?)(src)="(?!' . implode('|', $allowed_src_protocols) . ')(.*?)"(.*?)>#ism',
- '<$1$2=""$4 data-original-src="$3" class="invalid-src" title="' . DI::l10n()->t('Invalid source protocol') . '">', $text);
+ array_walk($allowed_link_protocols, function(&$value) { $value = preg_quote($value, '#');});
- // sanitize href attributes (only whitelisted protocols URLs)
- // default value for backward compatibility
- $allowed_link_protocols = DI::config()->get('system', 'allowed_link_protocols', []);
+ $regex = '#<([^>]*?)(href)="(?!' . implode('|', $allowed_link_protocols) . ')(.*?)"(.*?)>#ism';
+ $text = preg_replace($regex, '<$1$2="javascript:void(0)"$4 data-original-href="$3" class="invalid-href" title="' . DI::l10n()->t('Invalid link protocol') . '">', $text);
- // Always allowed protocol even if config isn't set or not including it
- $allowed_link_protocols[] = '//';
- $allowed_link_protocols[] = 'http://';
- $allowed_link_protocols[] = 'https://';
- $allowed_link_protocols[] = 'redir/';
+ // Shared content
+ $text = self::convertShare(
+ $text,
+ function (array $attributes, array $author_contact, $content, $is_quote_share) use ($simple_html) {
+ return self::convertShareCallback($attributes, $author_contact, $content, $is_quote_share, $simple_html);
+ }
+ );
- array_walk($allowed_link_protocols, function(&$value) { $value = preg_quote($value, '#');});
+ $text = self::interpolateSavedImagesIntoItemBody($text, $saved_image);
- $regex = '#<([^>]*?)(href)="(?!' . implode('|', $allowed_link_protocols) . ')(.*?)"(.*?)>#ism';
- $text = preg_replace($regex, '<$1$2="javascript:void(0)"$4 data-original-href="$3" class="invalid-href" title="' . DI::l10n()->t('Invalid link protocol') . '">', $text);
+ return $text;
+ }); // Escaped noparse, nobb, pre
- // Shared content
- $text = self::convertShare(
- $text,
- function (array $attributes, array $author_contact, $content, $is_quote_share) use ($simple_html) {
- return self::convertShareCallback($attributes, $author_contact, $content, $is_quote_share, $simple_html);
- }
- );
+ // Remove escaping tags
+ $text = preg_replace("/\[noparse\](.*?)\[\/noparse\]/ism", '\1', $text);
+ $text = preg_replace("/\[nobb\](.*?)\[\/nobb\]/ism", '\1', $text);
+ $text = preg_replace("/\[pre\](.*?)\[\/pre\]/ism", '\1', $text);
- if ($saved_image) {
- $text = self::interpolateSavedImagesIntoItemBody($text, $saved_image);
- }
+ return $text;
+ }); // Escaped code
- // Restore code blocks
- $text = preg_replace_callback('/#codeblock-([0-9]+)#/iU',
- function ($matches) use ($codeblocks) {
- $return = $matches[0];
- if (isset($codeblocks[intval($matches[1])])) {
- $return = $codeblocks[$matches[1]];
+ $text = preg_replace_callback("#\[code(?:=([^\]]*))?\](.*?)\[\/code\]#ism",
+ function ($matches) {
+ if (strpos($matches[2], "\n") !== false) {
+ $return = '