1 | <?php |
---|
2 | |
---|
3 | /* |
---|
4 | * This file is part of Twig. |
---|
5 | * |
---|
6 | * (c) 2009 Fabien Potencier |
---|
7 | * |
---|
8 | * For the full copyright and license information, please view the LICENSE |
---|
9 | * file that was distributed with this source code. |
---|
10 | */ |
---|
11 | class Twig_Extension_Sandbox extends Twig_Extension |
---|
12 | { |
---|
13 | protected $sandboxedGlobally; |
---|
14 | protected $sandboxed; |
---|
15 | protected $policy; |
---|
16 | |
---|
17 | public function __construct(Twig_Sandbox_SecurityPolicyInterface $policy, $sandboxed = false) |
---|
18 | { |
---|
19 | $this->policy = $policy; |
---|
20 | $this->sandboxedGlobally = $sandboxed; |
---|
21 | } |
---|
22 | |
---|
23 | /** |
---|
24 | * Returns the token parser instances to add to the existing list. |
---|
25 | * |
---|
26 | * @return array An array of Twig_TokenParserInterface or Twig_TokenParserBrokerInterface instances |
---|
27 | */ |
---|
28 | public function getTokenParsers() |
---|
29 | { |
---|
30 | return array(new Twig_TokenParser_Sandbox()); |
---|
31 | } |
---|
32 | |
---|
33 | /** |
---|
34 | * Returns the node visitor instances to add to the existing list. |
---|
35 | * |
---|
36 | * @return array An array of Twig_NodeVisitorInterface instances |
---|
37 | */ |
---|
38 | public function getNodeVisitors() |
---|
39 | { |
---|
40 | return array(new Twig_NodeVisitor_Sandbox()); |
---|
41 | } |
---|
42 | |
---|
43 | public function enableSandbox() |
---|
44 | { |
---|
45 | $this->sandboxed = true; |
---|
46 | } |
---|
47 | |
---|
48 | public function disableSandbox() |
---|
49 | { |
---|
50 | $this->sandboxed = false; |
---|
51 | } |
---|
52 | |
---|
53 | public function isSandboxed() |
---|
54 | { |
---|
55 | return $this->sandboxedGlobally || $this->sandboxed; |
---|
56 | } |
---|
57 | |
---|
58 | public function isSandboxedGlobally() |
---|
59 | { |
---|
60 | return $this->sandboxedGlobally; |
---|
61 | } |
---|
62 | |
---|
63 | public function setSecurityPolicy(Twig_Sandbox_SecurityPolicyInterface $policy) |
---|
64 | { |
---|
65 | $this->policy = $policy; |
---|
66 | } |
---|
67 | |
---|
68 | public function getSecurityPolicy() |
---|
69 | { |
---|
70 | return $this->policy; |
---|
71 | } |
---|
72 | |
---|
73 | public function checkSecurity($tags, $filters, $functions) |
---|
74 | { |
---|
75 | if ($this->isSandboxed()) { |
---|
76 | $this->policy->checkSecurity($tags, $filters, $functions); |
---|
77 | } |
---|
78 | } |
---|
79 | |
---|
80 | public function checkMethodAllowed($obj, $method) |
---|
81 | { |
---|
82 | if ($this->isSandboxed()) { |
---|
83 | $this->policy->checkMethodAllowed($obj, $method); |
---|
84 | } |
---|
85 | } |
---|
86 | |
---|
87 | public function checkPropertyAllowed($obj, $method) |
---|
88 | { |
---|
89 | if ($this->isSandboxed()) { |
---|
90 | $this->policy->checkPropertyAllowed($obj, $method); |
---|
91 | } |
---|
92 | } |
---|
93 | |
---|
94 | public function ensureToStringAllowed($obj) |
---|
95 | { |
---|
96 | if (is_object($obj)) { |
---|
97 | $this->policy->checkMethodAllowed($obj, '__toString'); |
---|
98 | } |
---|
99 | |
---|
100 | return $obj; |
---|
101 | } |
---|
102 | |
---|
103 | /** |
---|
104 | * Returns the name of the extension. |
---|
105 | * |
---|
106 | * @return string The extension name |
---|
107 | */ |
---|
108 | public function getName() |
---|
109 | { |
---|
110 | return 'sandbox'; |
---|
111 | } |
---|
112 | } |
---|