html_sanitize_ex

defmodule HtmlSanitizeEx.Scrubber.CSS do
  @moduledoc """
  Scrub CSS.
  """

  def scrub(nil), do: ""
  def scrub(text) do
    text = String.replace(text, ~r/(\/\*|\*\/|<!--|-->)/, " ")
    Regex.replace(~r/([-\w]+)\s*:\s*([^:;]*)/, text, fn _all, a, b ->
      case scrub_css(a, b) do
        {property, value} -> "#{property}: #{value}"
        nil -> ""
      end
    end)
  end

  defp scrub_css("azimuth", val), do: validate {"azimuth", scrub_val(val)}
  defp scrub_css("background-color", val), do: validate {"background-color", scrub_val(val)}
  defp scrub_css("border-bottom-color", val), do: validate {"border-bottom-color", scrub_val(val)}
  defp scrub_css("border-collapse", val), do: validate {"border-collapse", scrub_val(val)}
  defp scrub_css("border-color", val), do: validate {"border-color", scrub_val(val)}
  defp scrub_css("border-left-color", val), do: validate {"border-left-color", scrub_val(val)}
  defp scrub_css("border-right-color", val), do: validate {"border-right-color", scrub_val(val)}
  defp scrub_css("border-top-color", val), do: validate {"border-top-color", scrub_val(val)}
  defp scrub_css("clear", val), do: validate {"clear", scrub_val(val)}
  defp scrub_css("color", val), do: validate {"color", scrub_val(val)}
  defp scrub_css("cursor", val), do: validate {"cursor", scrub_val(val)}
  defp scrub_css("direction", val), do: validate {"direction", scrub_val(val)}
  defp scrub_css("display", val), do: validate {"display", scrub_val(val)}
  defp scrub_css("elevation", val), do: validate {"elevation", scrub_val(val)}
  defp scrub_css("float", val), do: validate {"float", scrub_val(val)}
  defp scrub_css("font", val), do: validate {"font", scrub_val(val)}
  defp scrub_css("font-family", val), do: validate {"font-family", scrub_val(val)}
  defp scrub_css("font-size", val), do: validate {"font-size", scrub_val(val)}
  defp scrub_css("font-style", val), do: validate {"font-style", scrub_val(val)}
  defp scrub_css("font-variant", val), do: validate {"font-variant", scrub_val(val)}
  defp scrub_css("font-weight", val), do: validate {"font-weight", scrub_val(val)}
  defp scrub_css("height", val), do: validate {"height", scrub_val(val)}
  defp scrub_css("letter-spacing", val), do: validate {"letter-spacing", scrub_val(val)}
  defp scrub_css("line-height", val), do: validate {"line-height", scrub_val(val)}
  defp scrub_css("overflow", val), do: validate {"overflow", scrub_val(val)}
  defp scrub_css("pause", val), do: validate {"pause", scrub_val(val)}
  defp scrub_css("pause-after", val), do: validate {"pause-after", scrub_val(val)}
  defp scrub_css("pause-before", val), do: validate {"pause-before", scrub_val(val)}
  defp scrub_css("pitch", val), do: validate {"pitch", scrub_val(val)}
  defp scrub_css("pitch-range", val), do: validate {"pitch-range", scrub_val(val)}
  defp scrub_css("richness", val), do: validate {"richness", scrub_val(val)}
  defp scrub_css("speak", val), do: validate {"speak", scrub_val(val)}
  defp scrub_css("speak-header", val), do: validate {"speak-header", scrub_val(val)}
  defp scrub_css("speak-numeral", val), do: validate {"speak-numeral", scrub_val(val)}
  defp scrub_css("speak-punctuation", val), do: validate {"speak-punctuation", scrub_val(val)}
  defp scrub_css("speech-rate", val), do: validate {"speech-rate", scrub_val(val)}
  defp scrub_css("stress", val), do: validate {"stress", scrub_val(val)}
  defp scrub_css("text-align", val), do: validate {"text-align", scrub_val(val)}
  defp scrub_css("text-decoration", val), do: validate {"text-decoration", scrub_val(val)}
  defp scrub_css("text-indent", val), do: validate {"text-indent", scrub_val(val)}
  defp scrub_css("unicode-bidi", val), do: validate {"unicode-bidi", scrub_val(val)}
  defp scrub_css("vertical-align", val), do: validate {"vertical-align", scrub_val(val)}
  defp scrub_css("voice-family", val), do: validate {"voice-family", scrub_val(val)}
  defp scrub_css("volume", val), do: validate {"volume", scrub_val(val)}
  defp scrub_css("white-space", val), do: validate {"white-space", scrub_val(val)}
  defp scrub_css("width", val), do: validate {"width", scrub_val(val)}

  defp scrub_css("background", val), do: validate {"background", scrub_val(val)}
  defp scrub_css("background-" <> prop, val), do: validate {"background-#{prop}", scrub_val(val)}
  defp scrub_css("border", val), do: validate {"border", scrub_val(val)}
  defp scrub_css("border-" <> prop, val), do: validate {"border-#{prop}", scrub_val(val)}
  defp scrub_css("margin", val), do: validate {"margin", scrub_val(val)}
  defp scrub_css("margin-" <> prop, val), do: validate {"margin-#{prop}", scrub_val(val)}
  defp scrub_css("padding", val), do: validate {"padding", scrub_val(val)}
  defp scrub_css("padding-" <> prop, val), do: validate {"padding-#{prop}", scrub_val(val)}

  defp scrub_css(_, _), do: nil

  defp validate({_property, ""}), do: nil
  defp validate({property, val}), do: {property, val}

  defp scrub_val(val) do
    val = if String.match?(val, ~r/(\\|&)/), do: "", else: val

    Regex.replace(~r/(\S+)/, val, fn _all, a ->
      if(allowed_keyword?(a) || measured_unit?(a), do: a, else: "")
    end)
  end

  @allowed_keywords ["auto", "aqua", "black", "block", "blue", "bold", "both", "bottom", "brown", "center", "collapse", "dashed", "dotted", "fuchsia", "gray", "green", "!important", "italic", "left", "lime", "maroon", "medium", "none", "navy", "normal", "nowrap", "olive", "pointer", "purple", "red", "right", "solid", "silver", "teal", "top", "transparent", "underline", "white", "yellow"]

  def allowed_keyword?(val) do
    Enum.member?(@allowed_keywords, String.downcase(val))
  end

  defp measured_unit?(val) do
    String.match?(val, ~r/\A(#[0-9a-f]+|rgb\(\d+%?,\d*%?,?\d*%?\)?|-?\d{0,2}\.?\d{0,2}(cm|em|ex|in|mm|pc|pt|px|%|,|\))?)\z/)
  end
end