Function startClean has a Cognitive Complexity of 39 (exceeds 5 allowed). Consider refactoring.

Open

    protected function startClean(\DOMNodeList $elements, array $elementsToRemove)
    {
        // loop through all elements
        // we do this backwards so we don't skip anything if we delete a node
        // see comments at: http://php.net/manual/en/class.domnamednodemap.php

• Read up
  Read up

File Sanitizer.php has 363 lines of code (exceeds 250 allowed). Consider refactoring.

Open

<?php
namespace enshrined\svgSanitize;

use enshrined\svgSanitize\data\AllowedAttributes;
use enshrined\svgSanitize\data\AllowedTags;

Sanitizer has 32 functions (exceeds 20 allowed). Consider refactoring.

Open

class Sanitizer
{

    /**
     * @var \DOMDocument

Method startClean has 57 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    protected function startClean(\DOMNodeList $elements, array $elementsToRemove)
    {
        // loop through all elements
        // we do this backwards so we don't skip anything if we delete a node
        // see comments at: http://php.net/manual/en/class.domnamednodemap.php

Function cleanAttributesOnWhitelist has a Cognitive Complexity of 14 (exceeds 5 allowed). Consider refactoring.

Open

    protected function cleanAttributesOnWhitelist(\DOMElement $element)
    {
        for ($x = $element->attributes->length - 1; $x >= 0; $x--) {
            // get attribute name
            $attrName = $element->attributes->item($x)->nodeName;

• Read up
  Read up

Method isHrefSafeValue has 34 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    protected function isHrefSafeValue($value) {

        // Allow empty values
        if (empty($value)) {
            return true;

Method cleanAttributesOnWhitelist has 29 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    protected function cleanAttributesOnWhitelist(\DOMElement $element)
    {
        for ($x = $element->attributes->length - 1; $x >= 0; $x--) {
            // get attribute name
            $attrName = $element->attributes->item($x)->nodeName;

Method sanitize has 29 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    public function sanitize($dirty)
    {
        // Don't run on an empty string
        if (empty($dirty)) {
            return '';

Avoid deeply nested control flow statements.

Open

                        if (in_array(strtolower($attrName), ['face', 'color', 'size'])) {
                            $breaksOutOfForeignContent = true;
                        }

Function isHrefSafeValue has a Cognitive Complexity of 7 (exceeds 5 allowed). Consider refactoring.

Open

    protected function isHrefSafeValue($value) {

        // Allow empty values
        if (empty($value)) {
            return true;

• Read up
  Read up

Avoid too many return statements within this method.

Open

            return true;

Avoid too many return statements within this method.

Open

            return true;

Avoid too many return statements within this method.

Open

            return true;

Avoid too many return statements within this method.

Open

        return false;

Function cleanUnsafeNodes has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.

Open

    protected function cleanUnsafeNodes(\DOMNode $currentElement) {
        // Replace CDATA node with encoded text node
        if ($currentElement instanceof \DOMCdataSection) {
            $textNode = $currentElement->ownerDocument->createTextNode($currentElement->nodeValue);
            $currentElement->parentNode->replaceChild($textNode, $currentElement);

• Read up
  Read up