includes/api/ApiFormatPhp.php

   1 <?php
   2 /**
   3  * Copyright © 2006 Yuri Astrakhan "<Firstname><Lastname>@gmail.com"
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  18  * http://www.gnu.org/copyleft/gpl.html
  19  *
  20  * @file
  21  */
  22
  23 /**
  24  * API Serialized PHP output formatter
  25  * @ingroup API
  26  */
  27 class ApiFormatPhp extends ApiFormatBase {
  28
  29         public function getMimeType() {
  30                 return 'application/vnd.php.serialized';
  31         }
  32
  33         /**
  34          * @suppress SecurityCheck-XSS Output type is not text/html
  35          */
  36         public function execute() {
  37                 $params = $this->extractRequestParams();
  38
  39                 switch ( $params['formatversion'] ) {
  40                         case 1:
  41                                 $transforms = [
  42                                         'BC' => [],
  43                                         'Types' => [],
  44                                         'Strip' => 'all',
  45                                 ];
  46                                 break;
  47
  48                         case 2:
  49                         case 'latest':
  50                                 $transforms = [
  51                                         'Types' => [],
  52                                         'Strip' => 'all',
  53                                 ];
  54                                 break;
  55
  56                         default:
  57                                 // Should have been caught during parameter validation
  58                                 $this->dieDebug( __METHOD__, 'Unknown value for \'formatversion\'' );
  59                 }
  60                 $text = serialize( $this->getResult()->getResultData( null, $transforms ) );
  61
  62                 // T68776: OutputHandler::mangleFlashPolicy() avoids a nasty bug in
  63                 // Flash, but what it does isn't friendly for the API. There's nothing
  64                 // we can do here that isn't actively broken in some manner, so let's
  65                 // just be broken in a useful manner.
  66                 if ( $this->getConfig()->get( 'MangleFlashPolicy' ) &&
  67                         in_array( 'MediaWiki\\OutputHandler::handle', ob_list_handlers(), true ) &&
  68                         preg_match( '/\<\s*cross-domain-policy(?=\s|\>)/i', $text )
  69                 ) {
  70                         $this->dieWithError( 'apierror-formatphp', 'internalerror' );
  71                 }
  72
  73                 $this->printText( $text );
  74         }
  75
  76         public function getAllowedParams() {
  77                 $ret = parent::getAllowedParams() + [
  78                         'formatversion' => [
  79                                 ApiBase::PARAM_TYPE => [ '1', '2', 'latest' ],
  80                                 ApiBase::PARAM_DFLT => '1',
  81                                 ApiBase::PARAM_HELP_MSG => 'apihelp-php-param-formatversion',
  82                         ],
  83                 ];
  84                 return $ret;
  85         }
  86 }