[345] | 1 | <?php |
---|
| 2 | |
---|
| 3 | /* |
---|
| 4 | * This file is part of Twig. |
---|
| 5 | * |
---|
| 6 | * (c) 2009 Fabien Potencier |
---|
| 7 | * |
---|
| 8 | * For the full copyright and license information, please view the LICENSE |
---|
| 9 | * file that was distributed with this source code. |
---|
| 10 | */ |
---|
| 11 | class Twig_Extension_Sandbox extends Twig_Extension |
---|
| 12 | { |
---|
| 13 | protected $sandboxedGlobally; |
---|
| 14 | protected $sandboxed; |
---|
| 15 | protected $policy; |
---|
| 16 | |
---|
| 17 | public function __construct(Twig_Sandbox_SecurityPolicyInterface $policy, $sandboxed = false) |
---|
| 18 | { |
---|
| 19 | $this->policy = $policy; |
---|
| 20 | $this->sandboxedGlobally = $sandboxed; |
---|
| 21 | } |
---|
| 22 | |
---|
| 23 | /** |
---|
| 24 | * Returns the token parser instances to add to the existing list. |
---|
| 25 | * |
---|
| 26 | * @return array An array of Twig_TokenParserInterface or Twig_TokenParserBrokerInterface instances |
---|
| 27 | */ |
---|
| 28 | public function getTokenParsers() |
---|
| 29 | { |
---|
| 30 | return array(new Twig_TokenParser_Sandbox()); |
---|
| 31 | } |
---|
| 32 | |
---|
| 33 | /** |
---|
| 34 | * Returns the node visitor instances to add to the existing list. |
---|
| 35 | * |
---|
| 36 | * @return array An array of Twig_NodeVisitorInterface instances |
---|
| 37 | */ |
---|
| 38 | public function getNodeVisitors() |
---|
| 39 | { |
---|
| 40 | return array(new Twig_NodeVisitor_Sandbox()); |
---|
| 41 | } |
---|
| 42 | |
---|
| 43 | public function enableSandbox() |
---|
| 44 | { |
---|
| 45 | $this->sandboxed = true; |
---|
| 46 | } |
---|
| 47 | |
---|
| 48 | public function disableSandbox() |
---|
| 49 | { |
---|
| 50 | $this->sandboxed = false; |
---|
| 51 | } |
---|
| 52 | |
---|
| 53 | public function isSandboxed() |
---|
| 54 | { |
---|
| 55 | return $this->sandboxedGlobally || $this->sandboxed; |
---|
| 56 | } |
---|
| 57 | |
---|
| 58 | public function isSandboxedGlobally() |
---|
| 59 | { |
---|
| 60 | return $this->sandboxedGlobally; |
---|
| 61 | } |
---|
| 62 | |
---|
| 63 | public function setSecurityPolicy(Twig_Sandbox_SecurityPolicyInterface $policy) |
---|
| 64 | { |
---|
| 65 | $this->policy = $policy; |
---|
| 66 | } |
---|
| 67 | |
---|
| 68 | public function getSecurityPolicy() |
---|
| 69 | { |
---|
| 70 | return $this->policy; |
---|
| 71 | } |
---|
| 72 | |
---|
| 73 | public function checkSecurity($tags, $filters, $functions) |
---|
| 74 | { |
---|
| 75 | if ($this->isSandboxed()) { |
---|
| 76 | $this->policy->checkSecurity($tags, $filters, $functions); |
---|
| 77 | } |
---|
| 78 | } |
---|
| 79 | |
---|
| 80 | public function checkMethodAllowed($obj, $method) |
---|
| 81 | { |
---|
| 82 | if ($this->isSandboxed()) { |
---|
| 83 | $this->policy->checkMethodAllowed($obj, $method); |
---|
| 84 | } |
---|
| 85 | } |
---|
| 86 | |
---|
| 87 | public function checkPropertyAllowed($obj, $method) |
---|
| 88 | { |
---|
| 89 | if ($this->isSandboxed()) { |
---|
| 90 | $this->policy->checkPropertyAllowed($obj, $method); |
---|
| 91 | } |
---|
| 92 | } |
---|
| 93 | |
---|
| 94 | public function ensureToStringAllowed($obj) |
---|
| 95 | { |
---|
| 96 | if (is_object($obj)) { |
---|
| 97 | $this->policy->checkMethodAllowed($obj, '__toString'); |
---|
| 98 | } |
---|
| 99 | |
---|
| 100 | return $obj; |
---|
| 101 | } |
---|
| 102 | |
---|
| 103 | /** |
---|
| 104 | * Returns the name of the extension. |
---|
| 105 | * |
---|
| 106 | * @return string The extension name |
---|
| 107 | */ |
---|
| 108 | public function getName() |
---|
| 109 | { |
---|
| 110 | return 'sandbox'; |
---|
| 111 | } |
---|
| 112 | } |
---|