cerc-io/solidity
11
0
Fork 0
mirror of https://github.com/ethereum/solidity synced 2023-10-03 13:03:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Restrict whiskers parameters to regular characters.

Browse Source
This commit is contained in:
chriseth
2019-06-19 18:46:16 +02:00
parent ee89a0353e
commit fc6f47e453
3 changed files with 38 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libdevcore/Whiskers.cpp
+18 -2
View File
@@ -37,6 +37,7 @@ Whiskers::Whiskers(string _template):
Whiskers& Whiskers::operator()(string _parameter, string _value)
{
checkParameterValid(_parameter);
checkParameterUnknown(_parameter);
m_parameters[move(_parameter)] = move(_value);
return *this;
@@ -44,6 +45,7 @@ Whiskers& Whiskers::operator()(string _parameter, string _value)
Whiskers& Whiskers::operator()(string _parameter, bool _value)
{
checkParameterValid(_parameter);
checkParameterUnknown(_parameter);
m_conditions[move(_parameter)] = _value;
return *this;
@@ -54,7 +56,11 @@ Whiskers& Whiskers::operator()(
vector<map<string, string>> _values
)
{
checkParameterValid(_listParameter);
checkParameterUnknown(_listParameter);
for (auto const& element: _values)
for (auto const& val: element)
checkParameterValid(val.first);
m_listParameters[move(_listParameter)] = move(_values);
return *this;
}
@@ -64,7 +70,17 @@ string Whiskers::render() const
return replace(m_template, m_parameters, m_conditions, m_listParameters);
}
void Whiskers::checkParameterUnknown(string const& _parameter)
void Whiskers::checkParameterValid(string const& _parameter) const
{
static boost::regex validParam("^" + paramRegex() + "$");
assertThrow(
boost::regex_match(_parameter, validParam),
WhiskersError,
"Parameter" + _parameter + " contains invalid characters."
);
}
void Whiskers::checkParameterUnknown(string const& _parameter) const
{
assertThrow(
!m_parameters.count(_parameter),
@@ -91,7 +107,7 @@ string Whiskers::replace(
)
{
using namespace boost;
static regex listOrTag("<([^#/?!>]+)>|<#([^>]+)>(.*?)</\\2>|<\\?([^>]+)>(.*?)(<!\\4>(.*?))?</\\4>");
static regex listOrTag("<(" + paramRegex() + ")>|<#(" + paramRegex() + ")>(.*?)</\\2>|<\\?(" + paramRegex() + ")>(.*?)(<!\\4>(.*?))?</\\4>");
return regex_replace(_template, listOrTag, [&](match_results<string::const_iterator> _match) -> string
{
string tagName(_match[1]);
libdevcore/Whiskers.h
+4 -1
View File
@@ -85,7 +85,8 @@ public:
std::string render() const;
private:
void checkParameterUnknown(std::string const& _parameter);
void checkParameterValid(std::string const& _parameter) const;
void checkParameterUnknown(std::string const& _parameter) const;
static std::string replace(
std::string const& _template,
@@ -94,6 +95,8 @@ private:
StringListMap const& _listParameters = StringListMap()
);
static std::string paramRegex() { return "[a-zA-Z0-9_$-]+"; }
/// Joins the two maps throwing an exception if two keys are equal.
static StringMap joinMaps(StringMap const& _a, StringMap const& _b);