abadd5bc38
Modified some paths to be more generic and not require rewrite. Some instances of phase names have been changed, others are still in process.
79 lines
2.9 KiB
PHP
79 lines
2.9 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Twig.
|
|
*
|
|
* (c) 2015 Fabien Potencier
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
/**
|
|
* @author Fabien Potencier <fabien@symfony.com>
|
|
*/
|
|
class Twig_Node_CheckSecurity extends Twig_Node
|
|
{
|
|
protected $usedFilters;
|
|
protected $usedTags;
|
|
protected $usedFunctions;
|
|
|
|
public function __construct(array $usedFilters, array $usedTags, array $usedFunctions)
|
|
{
|
|
$this->usedFilters = $usedFilters;
|
|
$this->usedTags = $usedTags;
|
|
$this->usedFunctions = $usedFunctions;
|
|
|
|
parent::__construct();
|
|
}
|
|
|
|
public function compile(Twig_Compiler $compiler)
|
|
{
|
|
$tags = $filters = $functions = array();
|
|
foreach (array('tags', 'filters', 'functions') as $type) {
|
|
foreach ($this->{'used'.ucfirst($type)} as $name => $node) {
|
|
if ($node instanceof Twig_Node) {
|
|
${$type}[$name] = $node->getLine();
|
|
} else {
|
|
${$type}[$node] = null;
|
|
}
|
|
}
|
|
}
|
|
|
|
$compiler
|
|
->write('$tags = ')->repr(array_filter($tags))->raw(";\n")
|
|
->write('$filters = ')->repr(array_filter($filters))->raw(";\n")
|
|
->write('$functions = ')->repr(array_filter($functions))->raw(";\n\n")
|
|
->write("try {\n")
|
|
->indent()
|
|
->write("\$this->env->getExtension('sandbox')->checkSecurity(\n")
|
|
->indent()
|
|
->write(!$tags ? "array(),\n" : "array('".implode("', '", array_keys($tags))."'),\n")
|
|
->write(!$filters ? "array(),\n" : "array('".implode("', '", array_keys($filters))."'),\n")
|
|
->write(!$functions ? "array()\n" : "array('".implode("', '", array_keys($functions))."')\n")
|
|
->outdent()
|
|
->write(");\n")
|
|
->outdent()
|
|
->write("} catch (Twig_Sandbox_SecurityError \$e) {\n")
|
|
->indent()
|
|
->write("\$e->setTemplateFile(\$this->getTemplateName());\n\n")
|
|
->write("if (\$e instanceof Twig_Sandbox_SecurityNotAllowedTagError && isset(\$tags[\$e->getTagName()])) {\n")
|
|
->indent()
|
|
->write("\$e->setTemplateLine(\$tags[\$e->getTagName()]);\n")
|
|
->outdent()
|
|
->write("} elseif (\$e instanceof Twig_Sandbox_SecurityNotAllowedFilterError && isset(\$filters[\$e->getFilterName()])) {\n")
|
|
->indent()
|
|
->write("\$e->setTemplateLine(\$filters[\$e->getFilterName()]);\n")
|
|
->outdent()
|
|
->write("} elseif (\$e instanceof Twig_Sandbox_SecurityNotAllowedFunctionError && isset(\$functions[\$e->getFunctionName()])) {\n")
|
|
->indent()
|
|
->write("\$e->setTemplateLine(\$functions[\$e->getFunctionName()]);\n")
|
|
->outdent()
|
|
->write("}\n\n")
|
|
->write("throw \$e;\n")
|
|
->outdent()
|
|
->write("}\n\n")
|
|
;
|
|
}
|
|
}
|