]> git.cameronkatri.com Git - cgit.git/blob - html.c
do not infloop on a query ending in %XY, for invalid hex X or Y
[cgit.git] / html.c
1 /* html.c: helper functions for html output
2 *
3 * Copyright (C) 2006 Lars Hjemli
4 *
5 * Licensed under GNU General Public License v2
6 * (see COPYING for full license text)
7 */
8
9 #include <unistd.h>
10 #include <stdio.h>
11 #include <stdlib.h>
12 #include <stdarg.h>
13 #include <string.h>
14 #include <errno.h>
15
16 int htmlfd = STDOUT_FILENO;
17
18 char *fmt(const char *format, ...)
19 {
20 static char buf[8][1024];
21 static int bufidx;
22 int len;
23 va_list args;
24
25 bufidx++;
26 bufidx &= 7;
27
28 va_start(args, format);
29 len = vsnprintf(buf[bufidx], sizeof(buf[bufidx]), format, args);
30 va_end(args);
31 if (len>sizeof(buf[bufidx])) {
32 fprintf(stderr, "[html.c] string truncated: %s\n", format);
33 exit(1);
34 }
35 return buf[bufidx];
36 }
37
38 void html_raw(const char *data, size_t size)
39 {
40 write(htmlfd, data, size);
41 }
42
43 void html(const char *txt)
44 {
45 write(htmlfd, txt, strlen(txt));
46 }
47
48 void htmlf(const char *format, ...)
49 {
50 static char buf[65536];
51 va_list args;
52
53 va_start(args, format);
54 vsnprintf(buf, sizeof(buf), format, args);
55 va_end(args);
56 html(buf);
57 }
58
59 void html_status(int code, const char *msg, int more_headers)
60 {
61 htmlf("Status: %d %s\n", code, msg);
62 if (!more_headers)
63 html("\n");
64 }
65
66 void html_txt(char *txt)
67 {
68 char *t = txt;
69 while(t && *t){
70 int c = *t;
71 if (c=='<' || c=='>' || c=='&') {
72 write(htmlfd, txt, t - txt);
73 if (c=='>')
74 html("&gt;");
75 else if (c=='<')
76 html("&lt;");
77 else if (c=='&')
78 html("&amp;");
79 txt = t+1;
80 }
81 t++;
82 }
83 if (t!=txt)
84 html(txt);
85 }
86
87 void html_ntxt(int len, char *txt)
88 {
89 char *t = txt;
90 while(t && *t && len--){
91 int c = *t;
92 if (c=='<' || c=='>' || c=='&') {
93 write(htmlfd, txt, t - txt);
94 if (c=='>')
95 html("&gt;");
96 else if (c=='<')
97 html("&lt;");
98 else if (c=='&')
99 html("&amp;");
100 txt = t+1;
101 }
102 t++;
103 }
104 if (t!=txt)
105 write(htmlfd, txt, t - txt);
106 if (len<0)
107 html("...");
108 }
109
110 void html_attr(char *txt)
111 {
112 char *t = txt;
113 while(t && *t){
114 int c = *t;
115 if (c=='<' || c=='>' || c=='\'' || c=='\"') {
116 write(htmlfd, txt, t - txt);
117 if (c=='>')
118 html("&gt;");
119 else if (c=='<')
120 html("&lt;");
121 else if (c=='\'')
122 html("&#x27;");
123 else if (c=='"')
124 html("&quot;");
125 txt = t+1;
126 }
127 t++;
128 }
129 if (t!=txt)
130 html(txt);
131 }
132
133 void html_url_path(char *txt)
134 {
135 char *t = txt;
136 while(t && *t){
137 int c = *t;
138 if (c=='"' || c=='#' || c=='\'' || c=='?') {
139 write(htmlfd, txt, t - txt);
140 write(htmlfd, fmt("%%%2x", c), 3);
141 txt = t+1;
142 }
143 t++;
144 }
145 if (t!=txt)
146 html(txt);
147 }
148
149 void html_url_arg(char *txt)
150 {
151 char *t = txt;
152 while(t && *t){
153 int c = *t;
154 if (c=='"' || c=='#' || c=='%' || c=='&' || c=='\'' || c=='+' || c=='?') {
155 write(htmlfd, txt, t - txt);
156 write(htmlfd, fmt("%%%2x", c), 3);
157 txt = t+1;
158 }
159 t++;
160 }
161 if (t!=txt)
162 html(txt);
163 }
164
165 void html_hidden(char *name, char *value)
166 {
167 html("<input type='hidden' name='");
168 html_attr(name);
169 html("' value='");
170 html_attr(value);
171 html("'/>");
172 }
173
174 void html_option(char *value, char *text, char *selected_value)
175 {
176 html("<option value='");
177 html_attr(value);
178 html("'");
179 if (selected_value && !strcmp(selected_value, value))
180 html(" selected='selected'");
181 html(">");
182 html_txt(text);
183 html("</option>\n");
184 }
185
186 void html_link_open(char *url, char *title, char *class)
187 {
188 html("<a href='");
189 html_attr(url);
190 if (title) {
191 html("' title='");
192 html_attr(title);
193 }
194 if (class) {
195 html("' class='");
196 html_attr(class);
197 }
198 html("'>");
199 }
200
201 void html_link_close(void)
202 {
203 html("</a>");
204 }
205
206 void html_fileperm(unsigned short mode)
207 {
208 htmlf("%c%c%c", (mode & 4 ? 'r' : '-'),
209 (mode & 2 ? 'w' : '-'), (mode & 1 ? 'x' : '-'));
210 }
211
212 int html_include(const char *filename)
213 {
214 FILE *f;
215 char buf[4096];
216 size_t len;
217
218 if (!(f = fopen(filename, "r"))) {
219 fprintf(stderr, "[cgit] Failed to include file %s: %s (%d).\n",
220 filename, strerror(errno), errno);
221 return -1;
222 }
223 while((len = fread(buf, 1, 4096, f)) > 0)
224 write(htmlfd, buf, len);
225 fclose(f);
226 return 0;
227 }
228
229 int hextoint(char c)
230 {
231 if (c >= 'a' && c <= 'f')
232 return 10 + c - 'a';
233 else if (c >= 'A' && c <= 'F')
234 return 10 + c - 'A';
235 else if (c >= '0' && c <= '9')
236 return c - '0';
237 else
238 return -1;
239 }
240
241 char *convert_query_hexchar(char *txt)
242 {
243 int d1, d2, n;
244 n = strlen(txt);
245 if (n < 3) {
246 *txt = '\0';
247 return txt-1;
248 }
249 d1 = hextoint(*(txt+1));
250 d2 = hextoint(*(txt+2));
251 if (d1<0 || d2<0) {
252 memmove(txt, txt+3, n-2);
253 return txt-1;
254 } else {
255 *txt = d1 * 16 + d2;
256 memmove(txt+1, txt+3, n-2);
257 return txt;
258 }
259 }
260
261 int http_parse_querystring(char *txt, void (*fn)(const char *name, const char *value))
262 {
263 char *t, *value = NULL, c;
264
265 if (!txt)
266 return 0;
267
268 t = txt = strdup(txt);
269 if (t == NULL) {
270 printf("Out of memory\n");
271 exit(1);
272 }
273 while((c=*t) != '\0') {
274 if (c=='=') {
275 *t = '\0';
276 value = t+1;
277 } else if (c=='+') {
278 *t = ' ';
279 } else if (c=='%') {
280 t = convert_query_hexchar(t);
281 } else if (c=='&') {
282 *t = '\0';
283 (*fn)(txt, value);
284 txt = t+1;
285 value = NULL;
286 }
287 t++;
288 }
289 if (t!=txt)
290 (*fn)(txt, value);
291 return 0;
292 }