@vituum/vite-plugin-latte 0.1.8

package/vendor/latte/latte/src/Latte/Loaders/StringLoader.php

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Loaders;
+
+use Latte;
+
+
+/**
+ * Template loader.
+ */
+class StringLoader implements Latte\Loader
+{
+	use Latte\Strict;
+
+	/** @var string[]|null  [name => content] */
+	private ?array $templates = null;
+
+
+	/**
+	 * @param  string[]  $templates
+	 */
+	public function __construct(?array $templates = null)
+	{
+		$this->templates = $templates;
+	}
+
+
+	/**
+	 * Returns template source code.
+	 */
+	public function getContent(string $name): string
+	{
+		if ($this->templates === null) {
+			return $name;
+		} elseif (isset($this->templates[$name])) {
+			return $this->templates[$name];
+		} else {
+			throw new Latte\RuntimeException("Missing template '$name'.");
+		}
+	}
+
+
+	public function isExpired(string $name, int $time): bool
+	{
+		return false;
+	}
+
+
+	/**
+	 * Returns referred template name.
+	 */
+	public function getReferredName(string $name, string $referringName): string
+	{
+		if ($this->templates === null) {
+			throw new \LogicException("Missing template '$name'.");
+		}
+
+		return $name;
+	}
+
+
+	/**
+	 * Returns unique identifier for caching.
+	 */
+	public function getUniqueId(string $name): string
+	{
+		return $this->getContent($name);
+	}
+}

package/vendor/latte/latte/src/Latte/Policy.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte;
+
+
+interface Policy
+{
+	function isTagAllowed(string $tag): bool;
+
+	function isFilterAllowed(string $filter): bool;
+
+	function isFunctionAllowed(string $function): bool;
+
+	function isMethodAllowed(string $class, string $method): bool;
+
+	function isPropertyAllowed(string $class, string $property): bool;
+}

package/vendor/latte/latte/src/Latte/PositionAwareException.php

@@ -0,0 +1,50 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte;
+
+use Latte\Compiler\Position;
+
+
+/** @internal */
+trait PositionAwareException
+{
+	public ?string $sourceCode = null;
+	public ?string $sourceName = null;
+	public ?Position $position = null;
+	private string $origMessage;
+
+
+	public function setSource(string $code, ?string $name = null): self
+	{
+		$this->sourceCode = $code;
+		$this->sourceName = $name;
+		$this->generateMessage();
+		return $this;
+	}
+
+
+	private function generateMessage(): void
+	{
+		$this->origMessage ??= $this->message;
+		$info = [];
+		if ($this->sourceName && @is_file($this->sourceName)) { // @ - may trigger error
+			$info[] = "in '" . str_replace(dirname($this->sourceName, 2), '...', $this->sourceName) . "'";
+		}
+		if ($this->position?->line > 1) {
+			$info[] = 'on line ' . $this->position->line;
+		}
+		if ($this->position?->column) {
+			$info[] = 'at column ' . $this->position->column;
+		}
+		$this->message = $info
+			? rtrim($this->origMessage, '.') . ' (' . implode(' ', $info) . ')'
+			: $this->origMessage;
+	}
+}

package/vendor/latte/latte/src/Latte/Runtime/Block.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+use Latte;
+
+
+/** @internal */
+final class Block
+{
+	use Latte\Strict;
+
+	public ?string $contentType = null;
+
+	/** @var callable[] */
+	public array $functions = [];
+}

package/vendor/latte/latte/src/Latte/Runtime/FilterExecutor.php

@@ -0,0 +1,151 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+use Latte;
+use Latte\ContentType;
+use Latte\Helpers;
+
+
+/**
+ * Filter executor.
+ * @internal
+ */
+class FilterExecutor
+{
+	/** @var callable[] */
+	private array $_dynamic = [];
+
+	/** @var array<string, array{callable, ?bool}> */
+	private array $_static = [];
+
+
+	/**
+	 * Registers run-time filter.
+	 */
+	public function add(?string $name, callable $callback): static
+	{
+		if ($name === null) {
+			array_unshift($this->_dynamic, $callback);
+		} else {
+			$this->_static[$name] = [$callback, null];
+			unset($this->$name);
+		}
+
+		return $this;
+	}
+
+
+	/**
+	 * Returns all run-time filters.
+	 * @return callable[]
+	 */
+	public function getAll(): array
+	{
+		return array_combine(array_keys($this->_static), array_column($this->_static, 0));
+	}
+
+
+	/**
+	 * Returns filter for classic calling.
+	 */
+	public function __get(string $name): callable
+	{
+		if (isset($this->_static[$name])) {
+			[$callback, $aware] = $this->prepareFilter($name);
+			if ($aware) { // FilterInfo aware filter
+				return $this->$name = function (...$args) use ($callback) {
+					array_unshift($args, $info = new FilterInfo);
+					if ($args[1] instanceof HtmlStringable) {
+						$args[1] = $args[1]->__toString();
+						$info->contentType = ContentType::Html;
+					}
+
+					$res = $callback(...$args);
+					return $info->contentType === ContentType::Html
+						? new Html($res)
+						: $res;
+				};
+			} else { // classic filter
+				return $this->$name = $callback;
+			}
+		}
+
+		// dynamic filter
+		foreach ($this->_dynamic as $loader) {
+			$callback = $loader($name);
+			if ($callback !== null) {
+				$this->_static[$name] = [$callback, null];
+				return $this->__get($name);
+			}
+		}
+
+		$hint = ($t = Helpers::getSuggestion(array_keys($this->_static), $name))
+			? ", did you mean '$t'?"
+			: '.';
+		throw new \LogicException("Filter '$name' is not defined$hint");
+	}
+
+
+	/**
+	 * Calls filter with FilterInfo.
+	 */
+	public function filterContent(string $name, FilterInfo $info, mixed ...$args): mixed
+	{
+		if (!isset($this->_static[$name])) {
+			$hint = ($t = Helpers::getSuggestion(array_keys($this->_static), $name))
+				? ", did you mean '$t'?"
+				: '.';
+			throw new \LogicException("Filter |$name is not defined$hint");
+		}
+
+		[$callback, $aware] = $this->prepareFilter($name);
+
+		if ($info->contentType === ContentType::Html && $args[0] instanceof HtmlStringable) {
+			$args[0] = $args[0]->__toString();
+		}
+
+		if ($aware) { // FilterInfo aware filter
+			array_unshift($args, $info);
+			return $callback(...$args);
+		}
+
+		// classic filter
+		if ($info->contentType !== ContentType::Text) {
+			throw new Latte\RuntimeException("Filter |$name is called with incompatible content type " . strtoupper($info->contentType)
+				. ($info->contentType === ContentType::Html ? ', try to prepend |stripHtml.' : '.'));
+		}
+
+		$res = ($this->$name)(...$args);
+		if ($res instanceof HtmlStringable) {
+			trigger_error("Filter |$name should be changed to content-aware filter.");
+			$info->contentType = ContentType::Html;
+			$res = $res->__toString();
+		}
+
+		return $res;
+	}
+
+
+	/**
+	 * @return array{callable, bool}
+	 */
+	private function prepareFilter(string $name): array
+	{
+		if (!isset($this->_static[$name][1])) {
+			$params = Helpers::toReflection($this->_static[$name][0])->getParameters();
+			$this->_static[$name][1] = $params
+				&& $params[0]->getType() instanceof \ReflectionNamedType
+				&& $params[0]->getType()->getName() === FilterInfo::class;
+		}
+
+		return $this->_static[$name];
+	}
+}

package/vendor/latte/latte/src/Latte/Runtime/FilterInfo.php

@@ -0,0 +1,39 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+use Latte;
+
+
+/**
+ * Filter runtime info
+ */
+class FilterInfo
+{
+	use Latte\Strict;
+
+	public ?string $contentType = null;
+
+
+	public function __construct(?string $contentType = null)
+	{
+		$this->contentType = $contentType;
+	}
+
+
+	public function validate(array $contentTypes, ?string $name = null): void
+	{
+		if (!in_array($this->contentType, $contentTypes, true)) {
+			$name = $name ? " |$name" : $name;
+			$type = $this->contentType ? ' ' . strtoupper($this->contentType) : '';
+			throw new Latte\RuntimeException("Filter{$name} used with incompatible type{$type}.");
+		}
+	}
+}

package/vendor/latte/latte/src/Latte/Runtime/Filters.php

@@ -0,0 +1,234 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+use Latte;
+use Latte\ContentType;
+use Latte\RuntimeException;
+use Nette;
+
+
+/**
+ * Escaping & sanitization filters.
+ * @internal
+ */
+class Filters
+{
+	/** @deprecated */
+	public static string $dateFormat = "j.\u{a0}n.\u{a0}Y";
+
+	/** @internal use XML syntax? */
+	public static bool $xml = false;
+
+
+	/**
+	 * Escapes string for use everywhere inside HTML (except for comments).
+	 */
+	public static function escapeHtml($s): string
+	{
+		return htmlspecialchars((string) $s, ENT_QUOTES | ENT_HTML5 | ENT_SUBSTITUTE, 'UTF-8');
+	}
+
+
+	/**
+	 * Escapes string for use inside HTML text.
+	 */
+	public static function escapeHtmlText($s): string
+	{
+		if ($s instanceof HtmlStringable || $s instanceof Nette\HtmlStringable) {
+			return $s->__toString();
+		}
+
+		$s = htmlspecialchars((string) $s, ENT_NOQUOTES | ENT_SUBSTITUTE, 'UTF-8');
+		$s = strtr($s, ['{{' => '{<!-- -->{', '{' => '&#123;']);
+		return $s;
+	}
+
+
+	/**
+	 * Escapes string for use inside HTML attribute value.
+	 */
+	public static function escapeHtmlAttr($s, bool $double = true): string
+	{
+		$double = $double && $s instanceof HtmlStringable ? false : $double;
+		$s = (string) $s;
+		if (str_contains($s, '`') && strpbrk($s, ' <>"\'') === false) {
+			$s .= ' '; // protection against innerHTML mXSS vulnerability nette/nette#1496
+		}
+
+		$s = htmlspecialchars($s, ENT_QUOTES | ENT_HTML5 | ENT_SUBSTITUTE, 'UTF-8', $double);
+		$s = str_replace('{', '&#123;', $s);
+		return $s;
+	}
+
+
+	/**
+	 * Escapes string for use inside HTML tag.
+	 */
+	public static function escapeHtmlTag($s): string
+	{
+		$s = (string) $s;
+		return preg_match('#^[a-z0-9:-]+$#i', $s)
+			? $s
+			: '"' . self::escapeHtmlAttr($s) . '"';
+	}
+
+
+	/**
+	 * Escapes string for use inside HTML/XML comments.
+	 */
+	public static function escapeHtmlComment($s): string
+	{
+		$s = (string) $s;
+		if ($s && ($s[0] === '-' || $s[0] === '>' || $s[0] === '!')) {
+			$s = ' ' . $s;
+		}
+
+		$s = str_replace('--', '- - ', $s);
+		if (substr($s, -1) === '-') {
+			$s .= ' ';
+		}
+
+		return $s;
+	}
+
+
+	/**
+	 * Escapes string for use everywhere inside XML (except for comments).
+	 */
+	public static function escapeXml($s): string
+	{
+		// XML 1.0: \x09 \x0A \x0D and C1 allowed directly, C0 forbidden
+		// XML 1.1: \x00 forbidden directly and as a character reference,
+		//   \x09 \x0A \x0D \x85 allowed directly, C0, C1 and \x7F allowed as character references
+		$s = preg_replace('#[\x00-\x08\x0B\x0C\x0E-\x1F]#', "\u{FFFD}", (string) $s);
+		return htmlspecialchars($s, ENT_QUOTES | ENT_XML1 | ENT_SUBSTITUTE, 'UTF-8');
+	}
+
+
+	/**
+	 * Escapes string for use inside XML attribute name.
+	 */
+	public static function escapeXmlAttrUnquoted($s): string
+	{
+		$s = (string) $s;
+		return preg_match('#^[a-z0-9:-]+$#i', $s)
+			? $s
+			: '"' . self::escapeXml($s) . '"';
+	}
+
+
+	/**
+	 * Escapes string for use inside CSS template.
+	 */
+	public static function escapeCss($s): string
+	{
+		// http://www.w3.org/TR/2006/WD-CSS21-20060411/syndata.html#q6
+		return addcslashes((string) $s, "\x00..\x1F!\"#$%&'()*+,./:;<=>?@[\\]^`{|}~");
+	}
+
+
+	/**
+	 * Escapes variables for use inside <script>.
+	 */
+	public static function escapeJs(mixed $s): string
+	{
+		if ($s instanceof HtmlStringable || $s instanceof Nette\HtmlStringable) {
+			$s = $s->__toString();
+		}
+
+		$json = json_encode($s, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_INVALID_UTF8_SUBSTITUTE);
+		if ($error = json_last_error()) {
+			throw new Latte\RuntimeException(json_last_error_msg(), $error);
+		}
+
+		return str_replace([']]>', '<!', '</'], [']]\u003E', '\u003C!', '<\/'], $json);
+	}
+
+
+	/**
+	 * Escapes string for use inside iCal template.
+	 */
+	public static function escapeICal($s): string
+	{
+		// https://www.ietf.org/rfc/rfc5545.txt
+		$s = str_replace("\r", '', (string) $s);
+		$s = preg_replace('#[\x00-\x08\x0B-\x1F]#', "\u{FFFD}", (string) $s);
+		return addcslashes($s, "\";\\,:\n");
+	}
+
+
+	/**
+	 * Escapes CSS/JS for usage in <script> and <style>..
+	 */
+	public static function escapeHtmlRawText($s): string
+	{
+		return preg_replace('#</(script|style)#i', '<\/$1', (string) $s);
+	}
+
+
+	/**
+	 * Converts ... to ...
+	 */
+	public static function convertTo(FilterInfo $info, string $dest, string $s): string
+	{
+		$source = $info->contentType ?: ContentType::Text;
+		if ($source === $dest) {
+			return $s;
+		} elseif ($conv = Latte\Compiler\Escaper::getConvertor($source, $dest)) {
+			$info->contentType = $dest;
+			return $conv($s);
+		} else {
+			throw new RuntimeException('Filters: unable to convert content type ' . strtoupper($source) . ' to ' . strtoupper($dest));
+		}
+	}
+
+
+	public static function nop(string $s): string
+	{
+		return $s;
+	}
+
+
+	/**
+	 * Converts HTML text to quoted attribute. The quotation marks need to be escaped.
+	 */
+	public static function convertHtmlToHtmlAttr(string $s): string
+	{
+		return self::escapeHtmlAttr($s, false);
+	}
+
+
+	/**
+	 * Converts HTML text to unquoted attribute. The quotation marks need to be escaped.
+	 */
+	public static function convertHtmlToUnquotedAttr(string $s): string
+	{
+		return '"' . self::escapeHtmlAttr($s, false) . '"';
+	}
+
+
+	/**
+	 * Converts HTML quoted attribute to unquoted.
+	 */
+	public static function convertHtmlAttrToUnquotedAttr(string $s): string
+	{
+		return '"' . $s . '"';
+	}
+
+
+	/**
+	 * Sanitizes string for use inside href attribute.
+	 */
+	public static function safeUrl(string $s): string
+	{
+		return preg_match('~^(?:(?:https?|ftp)://[^@]+(?:/.*)?|(?:mailto|tel|sms):.+|[/?#].*|[^:]+)$~Di', $s) ? $s : '';
+	}
+}

package/vendor/latte/latte/src/Latte/Runtime/Html.php

@@ -0,0 +1,35 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+use Latte;
+
+
+/**
+ * HTML literal.
+ */
+class Html implements HtmlStringable
+{
+	use Latte\Strict;
+
+	private string $value;
+
+
+	public function __construct($value)
+	{
+		$this->value = (string) $value;
+	}
+
+
+	public function __toString(): string
+	{
+		return $this->value;
+	}
+}

package/vendor/latte/latte/src/Latte/Runtime/HtmlStringable.php

@@ -0,0 +1,17 @@
+<?php
+
+/**
+ * This file is part of the Latte (https://latte.nette.org)
+ * Copyright (c) 2008 David Grudl (https://davidgrudl.com)
+ */
+
+declare(strict_types=1);
+
+namespace Latte\Runtime;
+
+
+interface HtmlStringable
+{
+	/** in HTML format */
+	function __toString(): string;
+}