fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-05 09:41:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

Improve relative path handling in Template v2 #2310

Browse source
This commit is contained in:
Kijin Sung 2024-04-30 23:45:17 +09:00
parent 242d07ce30
commit e57c6c5c25
2 changed files with 23 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
common/framework/Template.php
View file

@ -107,7 +107,7 @@ class Template
}
// If paths were provided, initialize immediately.
if ($dirname && $filename)
if ($dirname !== null && $filename !== null)
{
$this->_setSourcePath($dirname, $filename, $extension ?? 'auto');
}
@ -137,7 +137,7 @@ class Template
protected function _setSourcePath(string $dirname, string $filename, string $extension = 'auto'): void
{
// Normalize the template path. Result will look like 'modules/foo/views/'
$dirname = trim(preg_replace('@^' . preg_quote(\RX_BASEDIR, '@') . '|\./@', '', strtr($dirname, ['\\' => '/', '//' => '/'])), '/') . '/';
$dirname = trim(preg_replace('@^(' . preg_quote(\RX_BASEDIR, '@') . '|\./)@', '', strtr($dirname, ['\\' => '/', '//' => '/'])), '/') . '/';
$dirname = preg_replace('/[\{\}\(\)\[\]<>\$\'"]/', '', $dirname);
$this->absolute_dirname = \RX_BASEDIR . $dirname;
$this->relative_dirname = $dirname;
@ -208,7 +208,8 @@ class Template
*/
public function setCachePath(?string $cache_path = null)
{
$this->cache_path = $cache_path ?? (\RX_BASEDIR . 'files/cache/template/' . $this->relative_path . '.compiled.php');
$clean_path = str_replace('../', '__parentdir/', $this->relative_path);
$this->cache_path = $cache_path ?? (\RX_BASEDIR . 'files/cache/template/' . $clean_path . '.compiled.php');
if ($this->exists)
{
Debug::addFilenameAlias($this->absolute_path, $this->cache_path);
@ -573,7 +574,8 @@ class Template
public function normalizePath(string $path): string
{
$path = preg_replace('#[\\\\/]+#', '/', $path);
while (($tmp = preg_replace('#/[^/]+/\.\.(/|$)#', '$1', $path)) !== $path)
$path = preg_replace('#/\./#', '/', $path);
while (($tmp = preg_replace('#(/|^)(?!\.\./)[^/]+/\.\.(/|$)#', '$1', $path)) !== $path)
{
$path = $tmp;
}

18
tests/unit/framework/TemplateTest.php
View file

@ -58,11 +58,27 @@ class TemplateTest extends \Codeception\Test\Unit
$tmpl = new \Rhymix\Framework\Template('./tests/_data/template', 'empty.html');
$source = '/rhymix/foo/bar//../hello/world\\..';
$target = '/rhymix/foo/hello';
$target = '/rhymix/foo/hello/';
$this->assertEquals($target, $tmpl->normalizePath($source));
$source = '../foo\\bar/../baz/';
$target = '../foo/baz/';
$this->assertEquals($target, $tmpl->normalizePath($source));
$source = '/fo/ob/ar/../../baz/./buzz.txt';
$target = '/fo/baz/buzz.txt';
$this->assertEquals($target, $tmpl->normalizePath($source));
$source = 'foo/bar/../../baz/buzz.txt';
$target = 'baz/buzz.txt';
$this->assertEquals($target, $tmpl->normalizePath($source));
$source = 'tests/unit/foo/bar/../../../../../../buzz.txt';
$target = '../../buzz.txt';
$this->assertEquals($target, $tmpl->normalizePath($source));
$source = 'tests/unit/foo/bar/../../../../.././';
$target = '../';
$this->assertEquals($target, $tmpl->normalizePath($source));
}
}