Menu

[r1584]: / framework / trunk / src / xss.cpp  Maximize  Restore  History

Download this file

92 lines (78 with data), 2.3 kB

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
///////////////////////////////////////////////////////////////////////////////
//
// Copyright (C) 2008-2010 Artyom Beilis (Tonkikh) <artyomtnk@yahoo.com>
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Lesser General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
//
///////////////////////////////////////////////////////////////////////////////
#define CPPCMS_SOURCE
#include <cppcms/xss.h>
namespace cppcms { namespace xss {
struct rules::data {
typedef std::map<std::string,booster::regex> properties_type;
struct tag {
properties_type properties;
tag_type type;
};
typedef std::map<std::string,tag> tags_type;
tags_type tags;
std::map<std::string,std::string> entities;
html_type html;
};
booster::shared_ptr<rules::data> rules::impl() const
{
return impl_;
}
booster::shared_ptr<rules::data> rules::impl()
{
// COW semantics
if(impl_.use_count()==1)
return impl_;
pimpl tmp(new data(*impl_));
impl_.reset();
impl_ = tmp;
return impl_;
}
bool rules::valid_tag(std::string const &tag,tag_type type) const
{
pimpl dp=impl();
data const *d=dp.get();
data::tags_type::const_iterator p = d->tags.find(tag);
if(p==d->tags.end())
return false;
switch(type) {
case opening_and_closing:
switch(p->type) {
case opening_and_closing:
case any_tag:
return true;
default:
return false;
}
break;
case stand_alone:
switch(p->type) {
case stand_alone:
case any_tag:
return true;
default:
return false;
}
break;
default:
return false;
};
}
bool rules
} } // xss
MongoDB Logo MongoDB