Gecko [ 35.178.45.201 ]

Name	Size	Permission
Expression	[ DIR ]	drwxrwxr-x
AutoEscapeNode.php	855 B	-rw-rw-r--
BlockNode.php	1.01 KB	-rw-rw-r--
BlockReferenceNode.php	831 B	-rw-rw-r--
BodyNode.php	343 B	-rw-rw-r--
CheckSecurityCallNode.php	590 B	-rw-rw-r--
CheckSecurityNode.php	3.04 KB	-rw-rw-r--
CheckToStringNode.php	1.22 KB	-rw-rw-r--
DeprecatedNode.php	1.35 KB	-rw-rw-r--
DoNode.php	801 B	-rw-rw-r--
EmbedNode.php	1.38 KB	-rw-rw-r--
FlushNode.php	650 B	-rw-rw-r--
ForLoopNode.php	1.37 KB	-rw-rw-r--
ForNode.php	3.78 KB	-rw-rw-r--
IfNode.php	1.76 KB	-rw-rw-r--
ImportNode.php	1.69 KB	-rw-rw-r--
IncludeNode.php	3.05 KB	-rw-rw-r--
MacroNode.php	3.16 KB	-rw-rw-r--
ModuleNode.php	14.46 KB	-rw-rw-r--
Node.php	4.5 KB	-rw-rw-r--
NodeCaptureInterface.php	384 B	-rw-rw-r--
NodeOutputInterface.php	363 B	-rw-rw-r--
PrintNode.php	886 B	-rw-rw-r--
SandboxNode.php	1.27 KB	-rw-rw-r--
SetNode.php	3.29 KB	-rw-rw-r--
TextNode.php	781 B	-rw-rw-r--
WithNode.php	2.05 KB	-rw-rw-r--

Code Editor : CheckSecurityNode.php

<?php

/*
 * This file is part of Twig.
 *
 * (c) Fabien Potencier
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Twig\Node;

use Twig\Compiler;

/**
 * @author Fabien Potencier <fabien@symfony.com>
 */
class CheckSecurityNode extends Node
{
    private $usedFilters;
    private $usedTags;
    private $usedFunctions;

public function __construct(array $usedFilters, array $usedTags, array $usedFunctions)
    {
        $this->usedFilters = $usedFilters;
        $this->usedTags = $usedTags;
        $this->usedFunctions = $usedFunctions;

parent::__construct();
    }

public function compile(Compiler $compiler): void
    {
        $tags = $filters = $functions = [];
        foreach (['tags', 'filters', 'functions'] as $type) {
            foreach ($this->{'used'.ucfirst($type)} as $name => $node) {
                if ($node instanceof Node) {
                    ${$type}[$name] = $node->getTemplateLine();
                } else {
                    ${$type}[$node] = null;
                }
            }
        }

$compiler
            ->write("\n")
            ->write("public function checkSecurity()\n")
            ->write("{\n")
            ->indent()
            ->write('static $tags = ')->repr(array_filter($tags))->raw(";\n")
            ->write('static $filters = ')->repr(array_filter($filters))->raw(";\n")
            ->write('static $functions = ')->repr(array_filter($functions))->raw(";\n\n")
            ->write("try {\n")
            ->indent()
            ->write("\$this->sandbox->checkSecurity(\n")
            ->indent()
            ->write(!$tags ? "[],\n" : "['".implode("', '", array_keys($tags))."'],\n")
            ->write(!$filters ? "[],\n" : "['".implode("', '", array_keys($filters))."'],\n")
            ->write(!$functions ? "[]\n" : "['".implode("', '", array_keys($functions))."']\n")
            ->outdent()
            ->write(");\n")
            ->outdent()
            ->write("} catch (SecurityError \$e) {\n")
            ->indent()
            ->write("\$e->setSourceContext(\$this->source);\n\n")
            ->write("if (\$e instanceof SecurityNotAllowedTagError && isset(\$tags[\$e->getTagName()])) {\n")
            ->indent()
            ->write("\$e->setTemplateLine(\$tags[\$e->getTagName()]);\n")
            ->outdent()
            ->write("} elseif (\$e instanceof SecurityNotAllowedFilterError && isset(\$filters[\$e->getFilterName()])) {\n")
            ->indent()
            ->write("\$e->setTemplateLine(\$filters[\$e->getFilterName()]);\n")
            ->outdent()
            ->write("} elseif (\$e instanceof SecurityNotAllowedFunctionError && isset(\$functions[\$e->getFunctionName()])) {\n")
            ->indent()
            ->write("\$e->setTemplateLine(\$functions[\$e->getFunctionName()]);\n")
            ->outdent()
            ->write("}\n\n")
            ->write("throw \$e;\n")
            ->outdent()
            ->write("}\n\n")
            ->outdent()
            ->write("}\n")
        ;
    }
}

${this.title}

Code Editor : CheckSecurityNode.php