brakeman 5.2.2 → 7.1.1

data/bundle/ruby/3.1.0/gems/slim-5.2.1/lib/slim/parser.rb

@@ -0,0 +1,535 @@
+# frozen_string_literal: true
+module Slim
+  # Parses Slim code and transforms it to a Temple expression
+  # @api private
+  class Parser < Temple::Parser
+    define_options :file,
+                   :default_tag,
+                   tabsize: 4,
+                   code_attr_delims: {
+                     '(' => ')',
+                     '[' => ']',
+                     '{' => '}',
+                   },
+                   attr_list_delims: {
+                     '(' => ')',
+                     '[' => ']',
+                     '{' => '}',
+                   },
+                   shortcut: {
+                     '#' => { attr: 'id' },
+                     '.' => { attr: 'class' }
+                   },
+                   splat_prefix: '*'
+
+    class SyntaxError < StandardError
+      attr_reader :error, :file, :line, :lineno, :column
+
+      def initialize(error, file, line, lineno, column)
+        @error = error
+        @file = file || '(__TEMPLATE__)'
+        @line = line.to_s
+        @lineno = lineno
+        @column = column
+      end
+
+      def to_s
+        line = @line.lstrip
+        column = @column + line.size - @line.size
+        %{#{error}
+  #{file}, Line #{lineno}, Column #{@column}
+    #{line}
+    #{' ' * column}^
+}
+      end
+    end
+
+    def initialize(opts = {})
+      super
+      @attr_list_delims = options[:attr_list_delims]
+      @code_attr_delims = options[:code_attr_delims]
+      tabsize = options[:tabsize]
+      if tabsize > 1
+        @tab_re = /\G((?: {#{tabsize}})*) {0,#{tabsize - 1}}\t/
+        @tab = '\1' + ' ' * tabsize
+      else
+        @tab_re = "\t"
+        @tab = ' '
+      end
+      @tag_shortcut, @attr_shortcut, @additional_attrs = {}, {}, {}
+      options[:shortcut].each do |k,v|
+        raise ArgumentError, 'Shortcut requires :tag and/or :attr' unless (v[:attr] || v[:tag]) && (v.keys - [:attr, :tag, :additional_attrs]).empty?
+        @tag_shortcut[k] = v[:tag] || options[:default_tag]
+        if v.include?(:attr) || v.include?(:additional_attrs)
+          raise ArgumentError, 'You can only use special characters for attribute shortcuts' if k =~ /(\p{Word}|-)/
+        end
+        if v.include?(:attr)
+          @attr_shortcut[k] = v[:attr].is_a?(Proc) ? v[:attr] : [v[:attr]].flatten
+        end
+        if v.include?(:additional_attrs)
+          @additional_attrs[k] = v[:additional_attrs]
+        end
+      end
+      keys = Regexp.union @attr_shortcut.keys.sort_by { |k| -k.size }
+      @attr_shortcut_re = /\A(#{keys}+)((?:\p{Word}|-|\/\d+|:(\w|-)+)*)/
+      keys = Regexp.union @tag_shortcut.keys.sort_by { |k| -k.size }
+      @tag_re = /\A(?:#{keys}|\*(?=[^\s]+)|(\p{Word}(?:\p{Word}|:|-)*\p{Word}|\p{Word}+))/
+      keys = Regexp.escape @code_attr_delims.keys.join
+      @code_attr_delims_re = /\A[#{keys}]/
+      keys = Regexp.escape @attr_list_delims.keys.join
+      @attr_list_delims_re = /\A\s*([#{keys}])/
+      @embedded_re = /\A(#{Regexp.union(Embedded.engines.keys.map(&:to_s))})(?:\s*(?:(.*)))?:(\s*)/
+      keys = Regexp.escape ('"\'></='.split(//) + @attr_list_delims.flatten + @code_attr_delims.flatten).uniq.join
+      @attr_name = "\\A\\s*([^\\0\\s#{keys}]+)"
+      @quoted_attr_re = /#{@attr_name}\s*=(=?)\s*("|')/
+      @code_attr_re = /#{@attr_name}\s*=(=?)\s*/
+
+      splat_prefix = Regexp.escape(options[:splat_prefix])
+      splat_regexp_source = '\A\s*' + splat_prefix + '(?=[^\s]+)'
+      @splat_attrs_regexp = Regexp.new(splat_regexp_source)
+    end
+
+    # Compile string to Temple expression
+    #
+    # @param [String] str Slim code
+    # @return [Array] Temple expression representing the code
+    def call(str)
+      result = [:multi]
+      reset(str.split(/\r?\n/), [result])
+
+      parse_line while next_line
+
+      reset
+      result
+    end
+
+    protected
+
+    def reset(lines = nil, stacks = nil)
+      # Since you can indent however you like in Slim, we need to keep a list
+      # of how deeply indented you are. For instance, in a template like this:
+      #
+      #   doctype       # 0 spaces
+      #   html          # 0 spaces
+      #    head         # 1 space
+      #       title     # 4 spaces
+      #
+      # indents will then contain [0, 1, 4] (when it's processing the last line.)
+      #
+      # We uses this information to figure out how many steps we must "jump"
+      # out when we see an de-indented line.
+      @indents = []
+
+      # Whenever we want to output something, we'll *always* output it to the
+      # last stack in this array. So when there's a line that expects
+      # indentation, we simply push a new stack onto this array. When it
+      # processes the next line, the content will then be outputted into that
+      # stack.
+      @stacks = stacks
+
+      @lineno = 0
+      @lines = lines
+      @line = @orig_line = nil
+    end
+
+    def next_line
+      if @lines.empty?
+        @orig_line = @line = nil
+      else
+        @orig_line = @lines.shift
+        @lineno += 1
+        @line = @orig_line.dup
+      end
+    end
+
+    def get_indent(line)
+      # Figure out the indentation. Kinda ugly/slow way to support tabs,
+      # but remember that this is only done at parsing time.
+      line[/\A[ \t]*/].gsub(@tab_re, @tab).size
+    end
+
+    def parse_line
+      if @line =~ /\A\s*\Z/
+        @stacks.last << [:newline]
+        return
+      end
+
+      indent = get_indent(@line)
+
+      # Choose first indentation yourself
+      @indents << indent if @indents.empty?
+
+      # Remove the indentation
+      @line.lstrip!
+
+      # If there's more stacks than indents, it means that the previous
+      # line is expecting this line to be indented.
+      expecting_indentation = @stacks.size > @indents.size
+
+      if indent > @indents.last
+        # This line was actually indented, so we'll have to check if it was
+        # supposed to be indented or not.
+        syntax_error!('Unexpected indentation') unless expecting_indentation
+
+        @indents << indent
+      else
+        # This line was *not* indented more than the line before,
+        # so we'll just forget about the stack that the previous line pushed.
+        @stacks.pop if expecting_indentation
+
+        # This line was deindented.
+        # Now we're have to go through the all the indents and figure out
+        # how many levels we've deindented.
+        while indent < @indents.last && @indents.size > 1
+          @indents.pop
+          @stacks.pop
+        end
+
+        # This line's indentation happens to lie "between" two other line's
+        # indentation:
+        #
+        #   hello
+        #       world
+        #     this      # <- This should not be possible!
+        syntax_error!('Malformed indentation') if indent != @indents.last
+      end
+
+      parse_line_indicators
+    end
+
+    def parse_line_indicators
+      case @line
+      when /\A\/!( ?)/
+        # HTML comment
+        @stacks.last << [:html, :comment, [:slim, :text, :verbatim, parse_text_block($', @indents.last + $1.size + 2)]]
+      when /\A\/\[\s*(.*?)\s*\]\s*\Z/
+        # HTML conditional comment
+        block = [:multi]
+        @stacks.last << [:html, :condcomment, $1, block]
+        @stacks << block
+      when /\A\//
+        # Slim comment
+        parse_comment_block
+      when /\A([\|'])([<>]{1,2}(?: |\z)| ?)/
+        # Found verbatim text block.
+        leading_ws = $2.include?('<'.freeze)
+        trailing_ws = ($1 == "'") || $2.include?('>'.freeze)
+        @stacks.last << [:static, ' '] if leading_ws
+        @stacks.last << [:slim, :text, :verbatim, parse_text_block($', @indents.last + $2.count(' ') + 1)]
+        @stacks.last << [:static, ' '] if trailing_ws
+      when /\A</
+        # Inline html
+        block = [:multi]
+        @stacks.last << [:multi, [:slim, :interpolate, @line], block]
+        @stacks << block
+      when /\A-/
+        # Found a code block.
+        # We expect the line to be broken or the next line to be indented.
+        @line.slice!(0)
+        block = [:multi]
+        @stacks.last << [:slim, :control, parse_broken_line, block]
+        @stacks << block
+      when /\A=(=?)([<>]*)/
+        # Found an output block.
+        # We expect the line to be broken or the next line to be indented.
+        @line = $'
+        leading_ws = $2.include?('<'.freeze)
+        trailing_ws = $2.include?('>'.freeze)
+        block = [:multi]
+        @stacks.last << [:static, ' '] if leading_ws
+        @stacks.last << [:slim, :output, $1.empty?, parse_broken_line, block]
+        @stacks.last << [:static, ' '] if trailing_ws
+        @stacks << block
+      when @embedded_re
+        # Embedded template detected. It is treated as block.
+        @line = $2
+        attrs = parse_attributes
+        @stacks.last << [:slim, :embedded, $1, parse_text_block($', @orig_line.size - $'.size + $2.size), attrs]
+      when /\Adoctype\b/
+        # Found doctype declaration
+        @stacks.last << [:html, :doctype, $'.strip]
+      when @tag_re
+        # Found a HTML tag.
+        @line = $' if $1
+        parse_tag($&)
+      else
+        unknown_line_indicator
+      end
+      @stacks.last << [:newline]
+    end
+
+    # Unknown line indicator found. Overwrite this method if
+    # you want to add line indicators to the Slim parser.
+    # The default implementation throws a syntax error.
+    def unknown_line_indicator
+      syntax_error! 'Unknown line indicator'
+    end
+
+    def parse_comment_block
+      while !@lines.empty? && (@lines.first =~ /\A\s*\Z/ || get_indent(@lines.first) > @indents.last)
+        next_line
+        @stacks.last << [:newline]
+      end
+    end
+
+    def parse_text_block(first_line = nil, text_indent = nil)
+      result = [:multi]
+      if !first_line || first_line.empty?
+        text_indent = nil
+      else
+        result << [:slim, :interpolate, first_line]
+      end
+
+      empty_lines = 0
+      until @lines.empty?
+        if @lines.first =~ /\A\s*\Z/
+          next_line
+          result << [:newline]
+          empty_lines += 1 if text_indent
+        else
+          indent = get_indent(@lines.first)
+          break if indent <= @indents.last
+
+          if empty_lines > 0
+            result << [:slim, :interpolate, "\n" * empty_lines]
+            empty_lines = 0
+          end
+
+          next_line
+          @line.lstrip!
+
+          # The text block lines must be at least indented
+          # as deep as the first line.
+          offset = text_indent ? indent - text_indent : 0
+          if offset < 0
+            text_indent += offset
+            offset = 0
+          end
+          result << [:newline] << [:slim, :interpolate, (text_indent ? "\n" : '') + (' ' * offset) + @line]
+
+          # The indentation of first line of the text block
+          # determines the text base indentation.
+          text_indent ||= indent
+        end
+      end
+      result
+    end
+
+    def parse_broken_line
+      broken_line = @line.strip
+      while broken_line =~ /[,\\]\Z/
+        expect_next_line
+        broken_line << "\n" << @line
+      end
+      broken_line
+    end
+
+    def parse_tag(tag)
+      if @tag_shortcut[tag]
+        @line.slice!(0, tag.size) unless @attr_shortcut[tag]
+        tag = @tag_shortcut[tag]
+      end
+
+      # Find any shortcut attributes
+      attributes = [:html, :attrs]
+      while @line =~ @attr_shortcut_re
+        # The class/id attribute is :static instead of :slim :interpolate,
+        # because we don't want text interpolation in .class or #id shortcut
+        syntax_error!('Illegal shortcut') unless shortcut = @attr_shortcut[$1]
+
+        if shortcut.is_a?(Proc)
+          shortcut.call($2).each { |a, v| attributes << [:html, :attr, a, [:static, v]] }
+        else
+          shortcut.each {|a| attributes << [:html, :attr, a, [:static, $2]] }
+        end
+
+        if additional_attr_pairs = @additional_attrs[$1]
+          additional_attr_pairs.each do |k,v|
+            attributes << [:html, :attr, k.to_s, [:static, v]]
+          end
+        end
+        @line = $'
+      end
+
+      @line =~ /\A[<>']*/
+      @line = $'
+      trailing_ws = $&.include?('>'.freeze)
+      leading_ws = $&.include?('<'.freeze)
+
+      parse_attributes(attributes)
+
+      tag = [:html, :tag, tag, attributes]
+
+      @stacks.last << [:static, ' '] if leading_ws
+      @stacks.last << tag
+      @stacks.last << [:static, ' '] if trailing_ws
+
+      case @line
+      when /\A\s*:\s*/
+        # Block expansion
+        @line = $'
+        if @line =~ @embedded_re
+
+          # Parse attributes
+          @line = $2
+          attrs = parse_attributes
+          tag << [:slim, :embedded, $1, parse_text_block($', @orig_line.size - $'.size + $2.size), attrs]
+        else
+          (@line =~ @tag_re) || syntax_error!('Expected tag')
+          @line = $' if $1
+          content = [:multi]
+          tag << content
+          i = @stacks.size
+          @stacks << content
+          parse_tag($&)
+          @stacks.delete_at(i)
+        end
+      when /\A\s*=(=?)(['<>]*)/
+        # Handle output code
+        @line = $'
+        trailing_ws2 = $2.include?('>'.freeze)
+        block = [:multi]
+        @stacks.last.insert(-2, [:static, ' ']) if !leading_ws && $2.include?('<'.freeze)
+        tag << [:slim, :output, $1 != '=', parse_broken_line, block]
+        @stacks.last << [:static, ' '] if !trailing_ws && trailing_ws2
+        @stacks << block
+      when /\A\s*\/\s*/
+        # Closed tag. Do nothing
+        @line = $'
+        syntax_error!('Unexpected text after closed tag') unless @line.empty?
+      when /\A\s*\Z/
+        # Empty content
+        content = [:multi]
+        tag << content
+        @stacks << content
+      when /\A ?/
+        # Text content
+        tag << [:slim, :text, :inline, parse_text_block($', @orig_line.size - $'.size)]
+      end
+    end
+
+    def parse_attributes(attributes = [:html, :attrs])
+      # Check to see if there is a delimiter right after the tag name
+      delimiter = nil
+      if @line =~ @attr_list_delims_re
+        delimiter = @attr_list_delims[$1]
+        @line = $'
+      end
+
+      if delimiter
+        boolean_attr_re = /#{@attr_name}(?=(\s|#{Regexp.escape delimiter}|\Z))/
+        end_re = /\A\s*#{Regexp.escape delimiter}/
+      end
+
+      while true
+        case @line
+        when @splat_attrs_regexp
+          # Splat attribute
+          @line = $'
+          attributes << [:slim, :splat, parse_ruby_code(delimiter)]
+        when @quoted_attr_re
+          # Value is quoted (static)
+          @line = $'
+          attributes << [:html, :attr, $1,
+                         [:escape, $2.empty?, [:slim, :interpolate, parse_quoted_attribute($3)]]]
+        when @code_attr_re
+          # Value is ruby code
+          @line = $'
+          name = $1
+          escape = $2.empty?
+          value = parse_ruby_code(delimiter)
+          syntax_error!('Invalid empty attribute') if value.empty?
+          attributes << [:html, :attr, name, [:slim, :attrvalue, escape, value]]
+        else
+          break unless delimiter
+
+          case @line
+          when boolean_attr_re
+            # Boolean attribute
+            @line = $'
+            attributes << [:html, :attr, $1, [:multi]]
+          when end_re
+            # Find ending delimiter
+            @line = $'
+            break
+          else
+            # Found something where an attribute should be
+            @line.lstrip!
+            syntax_error!('Expected attribute') unless @line.empty?
+
+            # Attributes span multiple lines
+            @stacks.last << [:newline]
+            syntax_error!("Expected closing delimiter #{delimiter}") if @lines.empty?
+            next_line
+          end
+        end
+      end
+      attributes || [:html, :attrs]
+    end
+
+    def parse_ruby_code(outer_delimiter)
+      code, count, delimiter, close_delimiter = ''.dup, 0, nil, nil
+
+      # Attribute ends with space or attribute delimiter
+      end_re = /\A[\s#{Regexp.escape outer_delimiter.to_s}]/
+
+      until @line.empty? || (count == 0 && @line =~ end_re)
+        if @line =~ /\A[,\\]\Z/
+          code << @line << "\n"
+          expect_next_line
+        else
+          if count > 0
+            if @line[0] == delimiter[0]
+              count += 1
+            elsif @line[0] == close_delimiter[0]
+              count -= 1
+            end
+          elsif @line =~ @code_attr_delims_re
+            count = 1
+            delimiter, close_delimiter = $&, @code_attr_delims[$&]
+          end
+          code << @line.slice!(0)
+        end
+      end
+      syntax_error!("Expected closing delimiter #{close_delimiter}") if count != 0
+      code
+    end
+
+    def parse_quoted_attribute(quote)
+      value, count = ''.dup, 0
+
+      until count == 0 && @line[0] == quote[0]
+        if @line =~ /\A(\\)?\Z/
+          value << ($1 ? ' ' : "\n")
+          expect_next_line
+        else
+          if @line[0] == '{'
+            count += 1
+          elsif @line[0] == '}'
+            count -= 1
+          end
+          value << @line.slice!(0)
+        end
+      end
+
+      @line.slice!(0)
+      value
+    end
+
+    # Helper for raising exceptions
+    def syntax_error!(message)
+      raise SyntaxError.new(message, options[:file], @orig_line, @lineno,
+                            @orig_line && @line ? @orig_line.size - @line.size : 0)
+    rescue SyntaxError => ex
+      # HACK: Manipulate stacktrace for Rails and other frameworks
+      # to find the right file.
+      ex.backtrace.unshift "#{options[:file]}:#{@lineno}"
+      raise
+    end
+
+    def expect_next_line
+      next_line || syntax_error!('Unexpected end of file')
+      @line.strip!
+    end
+  end
+end

data/bundle/ruby/3.1.0/gems/slim-5.2.1/lib/slim/railtie.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Slim
+  class Railtie < ::Rails::Railtie
+    initializer 'initialize slim template handler' do
+      ActiveSupport.on_load(:action_view) do
+        Slim::RailsTemplate = Temple::Templates::Rails(Slim::Engine,
+                                                       register_as: :slim,
+                                                       # Use rails-specific generator. This is necessary
+                                                       # to support block capturing and streaming.
+                                                       generator: Temple::Generators::RailsOutputBuffer,
+                                                       # Disable the internal slim capturing.
+                                                       # Rails takes care of the capturing by itself.
+                                                       disable_capture: true,
+                                                       streaming: true)
+      end
+    end
+  end
+end

data/bundle/ruby/3.1.0/gems/slim-5.2.1/lib/slim/smart/escaper.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+module Slim
+  module Smart
+    # Perform smart entity escaping in the
+    # expressions `[:slim, :text, type, Expression]`.
+    #
+    # @api private
+    class Escaper < ::Slim::Filter
+      define_options smart_text_escaping: true
+
+      def call(exp)
+        if options[:smart_text_escaping]
+          super
+        else
+          exp
+        end
+      end
+
+      def on_slim_text(type, content)
+        [:escape, type != :verbatim, [:slim, :text, type, compile(content)]]
+      end
+
+      def on_static(string)
+        # Prevent obvious &foo; and &#1234; and &#x00ff; entities from escaping.
+        block = [:multi]
+        until string.empty?
+          case string
+          when /\A&([a-z][a-z0-9]*|#x[0-9a-f]+|#\d+);/i
+            # Entity.
+            block << [:escape, false, [:static, $&]]
+            string = $'
+          when /\A&?[^&]*/
+            # Other text.
+            block << [:static, $&]
+            string = $'
+          end
+        end
+        block
+      end
+    end
+  end
+end

data/bundle/ruby/3.1.0/gems/slim-5.2.1/lib/slim/smart/filter.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+module Slim
+  module Smart
+    # Perform newline processing in the
+    # expressions `[:slim, :text, type, Expression]`.
+    #
+    # @api private
+    class Filter < ::Slim::Filter
+      define_options smart_text: true,
+                     smart_text_end_chars: '([{',
+                     smart_text_begin_chars: ',.;:!?)]}'
+
+      def initialize(opts = {})
+        super
+        @active = @prepend = @append = false
+        @prepend_re = /\A#{chars_re(options[:smart_text_begin_chars])}/
+        @append_re = /#{chars_re(options[:smart_text_end_chars])}\Z/
+      end
+
+      def call(exp)
+        if options[:smart_text]
+          super
+        else
+          exp
+        end
+      end
+
+      def on_multi(*exps)
+        # The [:multi] blocks serve two purposes.
+        # On outer level, they collect the building blocks like
+        # tags, verbatim text, and implicit/explicit text.
+        # Within a text block, they collect the individual
+        # lines in [:slim, :interpolate, string] blocks.
+        #
+        # Our goal here is to decide when we want to prepend and
+        # append newlines to those individual interpolated lines.
+        # We basically want the text to come out as it was originally entered,
+        # while removing newlines next to the enclosing tags.
+        #
+        # On outer level, we choose to prepend every time, except
+        # right after the opening tag or after other text block.
+        # We also use the append flag to recognize the last expression
+        # before the closing tag, as we don't want to append newline there.
+        #
+        # Within text block, we prepend only before the first line unless
+        # the outer level tells us not to, and we append only after the last line,
+        # unless the outer level tells us it is the last line before the closing tag.
+        # Of course, this is later subject to the special begin/end characters
+        # which may further suppress the newline at the corresponding line boundary.
+        # Also note that the lines themselves are already correctly separated by newlines,
+        # so we don't have to worry about that at all.
+        block = [:multi]
+        prev = nil
+        last_exp = exps.reject { |exp| exp.first == :newline }.last unless @active && @append
+        exps.each do |exp|
+          @append = exp.equal?(last_exp)
+          if @active
+            @prepend = false if prev
+          else
+            @prepend = prev && (prev.first != :slim || prev[1] != :text)
+          end
+          block << compile(exp)
+          prev = exp unless exp.first == :newline
+        end
+        block
+      end
+
+      def on_slim_text(type, content)
+        @active = type != :verbatim
+        [:slim, :text, type, compile(content)]
+      ensure
+        @active = false
+      end
+
+      def on_slim_text_inline(content)
+        # Inline text is not wrapped in multi block, so set it up as if it was.
+        @prepend = false
+        @append = true
+        on_slim_text(:inline, content)
+      end
+
+      def on_slim_interpolate(string)
+        if @active
+          string = "\n" + string if @prepend && string !~ @prepend_re
+          string += "\n" if @append && string !~ @append_re
+        end
+        [:slim, :interpolate, string]
+      end
+
+      private
+
+      def chars_re(string)
+        Regexp.union(string.split(//))
+      end
+    end
+  end
+end