X-Git-Url: http://git.heureux-cyclage.org/?a=blobdiff_plain;f=includes%2FTemplateParser.php;h=65904a01e0856e731f12f562a6ac1d8866606139;hb=71b2310e001133b21f6d2c6fc40b7d1fa20b86e5;hp=559ffb9ba28aad81d0a2b39a5660d2b3f9cb4561;hpb=198f85b1d9a68f172d1b5fccbd44ad59050304af;p=lhc%2Fweb%2Fwiklou.git diff --git a/includes/TemplateParser.php b/includes/TemplateParser.php index 559ffb9ba2..65904a01e0 100644 --- a/includes/TemplateParser.php +++ b/includes/TemplateParser.php @@ -49,7 +49,7 @@ class TemplateParser { * Constructs the location of the the source Mustache template * @param string $templateName The name of the template * @return string - * @throws Exception Disallows upwards directory traversal via $templateName + * @throws UnexpectedValueException Disallows upwards directory traversal via $templateName */ public function getTemplateFilename( $templateName ) { // Prevent upwards directory traversal using same methods as Title::secureAndSplit @@ -65,7 +65,7 @@ class TemplateParser { substr( $templateName, -3 ) === '/..' ) ) { - throw new Exception( "Malformed \$templateName: $templateName" ); + throw new UnexpectedValueException( "Malformed \$templateName: $templateName" ); } return "{$this->templateDir}/{$templateName}.mustache"; @@ -75,18 +75,18 @@ class TemplateParser { * Returns a given template function if found, otherwise throws an exception. * @param string $templateName The name of the template (without file suffix) * @return Function - * @throws Exception + * @throws RuntimeException */ public function getTemplate( $templateName ) { // If a renderer has already been defined for this template, reuse it - if ( isset( $this->renderers[$templateName] ) ) { + if ( isset( $this->renderers[$templateName] ) && is_callable( $this->renderers[$templateName] ) ) { return $this->renderers[$templateName]; } $filename = $this->getTemplateFilename( $templateName ); if ( !file_exists( $filename ) ) { - throw new Exception( "Could not locate template: {$filename}" ); + throw new RuntimeException( "Could not locate template: {$filename}" ); } // Read the template file @@ -99,60 +99,80 @@ class TemplateParser { $config = ConfigFactory::getDefaultInstance()->makeConfig( 'main' ); $secretKey = $config->get( 'SecretKey' ); - // See if the compiled PHP code is stored in cache. - // CACHE_ACCEL throws an exception if no suitable object cache is present, so fall - // back to CACHE_ANYTHING. - try { - $cache = wfGetCache( CACHE_ACCEL ); - } catch ( Exception $e ) { - $cache = wfGetCache( CACHE_ANYTHING ); - } - $key = wfMemcKey( 'template', $templateName, $fastHash ); - $code = $this->forceRecompile ? null : $cache->get( $key ); - - if ( !$code ) { - // Compile the template into PHP code - $code = self::compile( $fileContents ); - - if ( !$code ) { - throw new Exception( "Could not compile template: {$filename}" ); + if ( $secretKey ) { + // See if the compiled PHP code is stored in cache. + // CACHE_ACCEL throws an exception if no suitable object cache is present, so fall + // back to CACHE_ANYTHING. + try { + $cache = wfGetCache( CACHE_ACCEL ); + } catch ( Exception $e ) { + $cache = wfGetCache( CACHE_ANYTHING ); } + $key = wfMemcKey( 'template', $templateName, $fastHash ); + $code = $this->forceRecompile ? null : $cache->get( $key ); - // Strip the "compileForEval( $fileContents, $filename ); - // Prefix the code with a keyed hash (64 hex chars) as an integrity check - $code = hash_hmac( 'sha256', $code, $secretKey ) . $code; + // Prefix the code with a keyed hash (64 hex chars) as an integrity check + $code = hash_hmac( 'sha256', $code, $secretKey ) . $code; - // Cache the compiled PHP code - $cache->set( $key, $code ); - } else { - // Verify the integrity of the cached PHP code - $keyedHash = substr( $code, 0, 64 ); - $code = substr( $code, 64 ); - if ( $keyedHash === hash_hmac( 'sha256', $code, $secretKey ) ) { - $renderer = eval( $code ); + // Cache the compiled PHP code + $cache->set( $key, $code ); } else { - throw new Exception( "Template failed integrity check: {$filename}" ); + // Verify the integrity of the cached PHP code + $keyedHash = substr( $code, 0, 64 ); + $code = substr( $code, 64 ); + if ( $keyedHash !== hash_hmac( 'sha256', $code, $secretKey ) ) { + // Generate a notice if integrity check fails + trigger_error( "Template failed integrity check: {$filename}" ); + } } + // If there is no secret key available, don't use cache + } else { + $code = $this->compileForEval( $fileContents, $filename ); } + $renderer = eval( $code ); + if ( !is_callable( $renderer ) ) { + throw new RuntimeException( "Requested template, {$templateName}, is not callable" ); + } return $this->renderers[$templateName] = $renderer; } + /** + * Wrapper for compile() function that verifies successful compilation and strips + * out the '