added escape css method to sanitize CSS

Model/DynamicStyle/EscapeCss.php

@@ -0,0 +1,23 @@
+<?php
+/**
+ * @author      Olegnax
+ * @package     Olegnax_Core
+ * @copyright   Copyright (c) 2024 Olegnax (http://olegnax.com/). All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+namespace Olegnax\Core\Model\DynamicStyle;
+
+class EscapeCss
+{
+    public function escapeCss($css){
+        if (!empty($css)) {
+            $css = preg_replace('/[\r\n\t]/', ' ', $css);
+            $css = preg_replace('/[\r\n\t ]{2,}/', ' ', $css);
+            $css = preg_replace('/\s+(\:|\;|\{|\})\s+/', '\1', $css);
+            $css = preg_replace('/<[^<>]+>(.*?)<\/[^<>]+>/m', '/* Forbidden tags in styles */', $css);
+            return $css;
+        }
+        return '';
+    }
+}

ViewModel/RenderCssViewModel.php

@@ -0,0 +1,35 @@
+<?php
+/**
+ * @author      Olegnax
+ * @package     Olegnax_Core
+ * @copyright   Copyright (c) 2024 Olegnax (http://olegnax.com/). All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+namespace Olegnax\Core\ViewModel;
+
+use Olegnax\Core\Model\DynamicStyle\EscapeCss;
+use Magento\Framework\View\Element\Block\ArgumentInterface;
+
+/**
+ *  RenderCssViewModel
+ */
+class RenderCssViewModel implements ArgumentInterface
+{
+    /**
+     * @var EscapeCss
+     */
+    protected $escapeCss;
+
+    /**
+     * @param EscapeCss $escapeCss
+     */
+    public function __construct(EscapeCss $escapeCss)
+    {
+        $this->escapeCss = $escapeCss;
+    }
+
+    public function escapeCss($css){
+        return $this->escapeCss->escapeCss($css);
+    }
+}

composer.json

@@ -1,7 +1,7 @@
 {
   "name": "olegnax/module-core",
   "description": "Olegnax Core. Required by all Olegnax extensions and themes.",
-  "version": "1.3.4.2",
+  "version": "1.3.4.3",
   "type": "magento2-module",
   "license": [
       "OSL-3.0"

etc/module.xml

@@ -1,6 +1,6 @@
 <config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 		xsi:noNamespaceSchemaLocation="urn:magento:framework:Module/etc/module.xsd">
-	<module name="Olegnax_Core" setup_version="1.3.4.2">
+	<module name="Olegnax_Core" setup_version="1.3.4.3">
 		<sequence>
 			<module name="Magento_AdminNotification"/>
 			<module name="Magento_Catalog"/>