[991] | 1 | <?php |
---|
| 2 | |
---|
| 3 | /* |
---|
| 4 | * This file is part of Twig. |
---|
| 5 | * |
---|
| 6 | * (c) 2009 Fabien Potencier |
---|
| 7 | * |
---|
| 8 | * For the full copyright and license information, please view the LICENSE |
---|
| 9 | * file that was distributed with this source code. |
---|
| 10 | */ |
---|
| 11 | class Twig_Extension_Escaper extends Twig_Extension |
---|
| 12 | { |
---|
| 13 | protected $defaultStrategy; |
---|
| 14 | |
---|
| 15 | public function __construct($defaultStrategy = 'html') |
---|
| 16 | { |
---|
| 17 | $this->setDefaultStrategy($defaultStrategy); |
---|
| 18 | } |
---|
| 19 | |
---|
| 20 | /** |
---|
| 21 | * Returns the token parser instances to add to the existing list. |
---|
| 22 | * |
---|
| 23 | * @return array An array of Twig_TokenParserInterface or Twig_TokenParserBrokerInterface instances |
---|
| 24 | */ |
---|
| 25 | public function getTokenParsers() |
---|
| 26 | { |
---|
| 27 | return array(new Twig_TokenParser_AutoEscape()); |
---|
| 28 | } |
---|
| 29 | |
---|
| 30 | /** |
---|
| 31 | * Returns the node visitor instances to add to the existing list. |
---|
| 32 | * |
---|
| 33 | * @return array An array of Twig_NodeVisitorInterface instances |
---|
| 34 | */ |
---|
| 35 | public function getNodeVisitors() |
---|
| 36 | { |
---|
| 37 | return array(new Twig_NodeVisitor_Escaper()); |
---|
| 38 | } |
---|
| 39 | |
---|
| 40 | /** |
---|
| 41 | * Returns a list of filters to add to the existing list. |
---|
| 42 | * |
---|
| 43 | * @return array An array of filters |
---|
| 44 | */ |
---|
| 45 | public function getFilters() |
---|
| 46 | { |
---|
| 47 | return array( |
---|
[1101] | 48 | new Twig_SimpleFilter('raw', 'twig_raw_filter', array('is_safe' => array('all'))), |
---|
[991] | 49 | ); |
---|
| 50 | } |
---|
| 51 | |
---|
| 52 | /** |
---|
| 53 | * Sets the default strategy to use when not defined by the user. |
---|
| 54 | * |
---|
| 55 | * The strategy can be a valid PHP callback that takes the template |
---|
| 56 | * "filename" as an argument and returns the strategy to use. |
---|
| 57 | * |
---|
| 58 | * @param mixed $defaultStrategy An escaping strategy |
---|
| 59 | */ |
---|
| 60 | public function setDefaultStrategy($defaultStrategy) |
---|
| 61 | { |
---|
| 62 | // for BC |
---|
| 63 | if (true === $defaultStrategy) { |
---|
| 64 | $defaultStrategy = 'html'; |
---|
| 65 | } |
---|
| 66 | |
---|
| 67 | $this->defaultStrategy = $defaultStrategy; |
---|
| 68 | } |
---|
| 69 | |
---|
| 70 | /** |
---|
| 71 | * Gets the default strategy to use when not defined by the user. |
---|
| 72 | * |
---|
| 73 | * @param string $filename The template "filename" |
---|
| 74 | * |
---|
| 75 | * @return string The default strategy to use for the template |
---|
| 76 | */ |
---|
| 77 | public function getDefaultStrategy($filename) |
---|
| 78 | { |
---|
| 79 | // disable string callables to avoid calling a function named html or js, |
---|
| 80 | // or any other upcoming escaping strategy |
---|
| 81 | if (!is_string($this->defaultStrategy) && is_callable($this->defaultStrategy)) { |
---|
| 82 | return call_user_func($this->defaultStrategy, $filename); |
---|
| 83 | } |
---|
| 84 | |
---|
| 85 | return $this->defaultStrategy; |
---|
| 86 | } |
---|
| 87 | |
---|
| 88 | /** |
---|
| 89 | * Returns the name of the extension. |
---|
| 90 | * |
---|
| 91 | * @return string The extension name |
---|
| 92 | */ |
---|
| 93 | public function getName() |
---|
| 94 | { |
---|
| 95 | return 'escaper'; |
---|
| 96 | } |
---|
| 97 | } |
---|
| 98 | |
---|
| 99 | /** |
---|
| 100 | * Marks a variable as being safe. |
---|
| 101 | * |
---|
| 102 | * @param string $string A PHP variable |
---|
| 103 | */ |
---|
| 104 | function twig_raw_filter($string) |
---|
| 105 | { |
---|
| 106 | return $string; |
---|
| 107 | } |
---|