test/html-webhacc/cc.cgi

#!/usr/bin/perl
use strict;
use utf8;

use lib qw[/home/httpd/html/www/markup/html/whatpm
           /home/wakaba/work/manakai2/lib];
use CGI::Carp qw[fatalsToBrowser];
use Scalar::Util qw[refaddr];

  require WebHACC::Input;
  require WebHACC::Result;
  require WebHACC::Output;

my $out;

  require Message::DOM::DOMImplementation;
  my $dom = Message::DOM::DOMImplementation->new;
{
  use Message::CGI::HTTP;
  my $http = Message::CGI::HTTP->new;

  if ($http->get_meta_variable ('PATH_INFO') ne '/') {
    print STDOUT "Status: 404 Not Found\nContent-Type: text/plain; charset=us-ascii\n\n400";
    exit;
  }
  
  load_text_catalog ('en'); ## TODO: conneg

  $out = WebHACC::Output->new;
  $out->handle (*STDOUT);
  $out->set_utf8;
  $out->set_flush;
  $out->html (qq[Content-Type: text/html; charset=utf-8

<!DOCTYPE html>
<html lang="en">
<head>
<title>Web Document Conformance Checker (BETA)</title>
<link rel="stylesheet" href="../cc-style.css" type="text/css">
</head>
<body>
<h1><a href="../cc-interface">Web Document Conformance Checker</a> 
(<em>beta</em>)</h1>
]);

  my $input = get_input_document ($http, $dom);

  $out->input ($input);
  $out->unset_flush;

  my $result = WebHACC::Result->new;
  $result->output ($out);
  $result->{conforming_min} = 1;
  $result->{conforming_max} = 1;

  $out->html ('<script src="../cc-script.js"></script>');

  check_and_print ($input => $result => $out);
  
  $result->generate_result_section;

  $out->nav_list;

  exit;
}

sub check_and_print ($$$) {
  my ($input, $result, $out) = @_;
  my $original_input = $out->input;
  $out->input ($input);

  $input->generate_info_section ($result);

  $input->generate_transfer_sections ($result);

  unless (defined $input->{s}) {
    $result->{conforming_min} = 0;
    return;
  }

  my $checker_class = {
    'text/cache-manifest' => 'WebHACC::Language::CacheManifest',
    'text/css' => 'WebHACC::Language::CSS',
    'text/html' => 'WebHACC::Language::HTML',
    'text/x-webidl' => 'WebHACC::Language::WebIDL',

    'text/xml' => 'WebHACC::Language::XML',
    'application/atom+xml' => 'WebHACC::Language::XML',
    'application/rss+xml' => 'WebHACC::Language::XML',
    'image/svg+xml' => 'WebHACC::Language::XML',
    'application/xhtml+xml' => 'WebHACC::Language::XML',
    'application/xml' => 'WebHACC::Language::XML',
    ## TODO: Should we make all XML MIME Types fall
    ## into this category?

    ## NOTE: This type has different model from normal XML types.
    'application/rdf+xml' => 'WebHACC::Language::XML',
  }->{$input->{media_type}} || 'WebHACC::Language::Default';

  eval qq{ require $checker_class } or die "$0: Loading $checker_class: $@";
  my $checker = $checker_class->new;
  $checker->input ($input);
  $checker->output ($out);
  $checker->result ($result);

  ## TODO: A cache manifest MUST be text/cache-manifest
  ## TODO: WebIDL media type "text/x-webidl"

  $checker->generate_syntax_error_section;
  $checker->generate_source_string_section;

  my @subdoc;
  $checker->onsubdoc (sub {
    push @subdoc, shift;
  });

  $checker->generate_structure_dump_section;
  $checker->generate_structure_error_section;
  $checker->generate_additional_sections;

=pod

  if (defined $doc or defined $el) {

    print_table_section ($input, $elements->{table}) if @{$elements->{table}};
    print_listing_section ({
      id => 'identifiers', label => 'IDs', heading => 'Identifiers',
    }, $input, $elements->{id}) if keys %{$elements->{id}};
    print_listing_section ({
      id => 'terms', label => 'Terms', heading => 'Terms',
    }, $input, $elements->{term}) if keys %{$elements->{term}};
    print_listing_section ({
      id => 'classes', label => 'Classes', heading => 'Classes',
    }, $input, $elements->{class}) if keys %{$elements->{class}};
   
    print_rdf_section ($input, $elements->{rdf}) if @{$elements->{rdf}};
  }

=cut

  my $id_prefix = 0;
  for my $_subinput (@subdoc) {
    my $subinput = WebHACC::Input::Subdocument->new (++$id_prefix);
    $subinput->{$_} = $_subinput->{$_} for keys %$_subinput;
    $subinput->{base_uri} = $subinput->{container_node}->base_uri
        unless defined $subinput->{base_uri};
    $subinput->{parent_input} = $input;

    $subinput->start_section ($result);
    check_and_print ($subinput => $result => $out);
    $subinput->end_section ($result);
  }

  $out->input ($original_input);
} # check_and_print

sub print_table_section ($$) {
  my ($input, $tables) = @_;
  
#  push @nav, [qq[#$input->{id_prefix}tables] => 'Tables']
#      unless $input->{nested};
  print STDOUT qq[
<div id="$input->{id_prefix}tables" class="section">
<h2>Tables</h2>

<!--[if IE]><script type="text/javascript" src="../excanvas.js"></script><![endif]-->
<script src="../table-script.js" type="text/javascript"></script>
<noscript>
<p><em>Structure of tables are visualized here if scripting is enabled.</em></p>
</noscript>
];
  
  require JSON;
  
  my $i = 0;
  for my $table (@$tables) {
    $i++;
    print STDOUT qq[<div class="section" id="$input->{id_prefix}table-$i"><h3>] .
        get_node_link ($input, $table->{element}) . q[</h3>];

    delete $table->{element};

    for (@{$table->{column_group}}, @{$table->{column}}, $table->{caption},
         @{$table->{row}}) {
      next unless $_;
      delete $_->{element};
    }
    
    for (@{$table->{row_group}}) {
      next unless $_;
      next unless $_->{element};
      $_->{type} = $_->{element}->manakai_local_name;
      delete $_->{element};
    }
    
    for (@{$table->{cell}}) {
      next unless $_;
      for (@{$_}) {
        next unless $_;
        for (@$_) {
          $_->{id} = refaddr $_->{element} if defined $_->{element};
          delete $_->{element};
          $_->{is_header} = $_->{is_header} ? 1 : 0;
        }
      }
    }
        
    print STDOUT '</div><script type="text/javascript">tableToCanvas (';
    print STDOUT JSON::objToJson ($table);
    print STDOUT qq[, document.getElementById ('$input->{id_prefix}table-$i')];
    print STDOUT qq[, '$input->{id_prefix}');</script>];
  }
  
  print STDOUT qq[</div>];
} # print_table_section

sub print_listing_section ($$$) {
  my ($opt, $input, $ids) = @_;
  
#  push @nav, ['#' . $input->{id_prefix} . $opt->{id} => $opt->{label}]
#      unless $input->{nested};
  print STDOUT qq[
<div id="$input->{id_prefix}$opt->{id}" class="section">
<h2>$opt->{heading}</h2>

<dl>
];
  for my $id (sort {$a cmp $b} keys %$ids) {
    print STDOUT qq[<dt><code>@{[htescape $id]}</code></dt>];
    for (@{$ids->{$id}}) {
      print STDOUT qq[<dd>].get_node_link ($input, $_).qq[</dd>];
    }
  }
  print STDOUT qq[</dl></div>];
} # print_listing_section


sub print_rdf_section ($$$) {
  my ($input, $rdfs) = @_;
  
#  push @nav, ['#' . $input->{id_prefix} . 'rdf' => 'RDF']
#      unless $input->{nested};
  print STDOUT qq[
<div id="$input->{id_prefix}rdf" class="section">
<h2>RDF Triples</h2>

<dl>];
  my $i = 0;
  for my $rdf (@$rdfs) {
    print STDOUT qq[<dt id="$input->{id_prefix}rdf-@{[$i++]}">];
    print STDOUT get_node_link ($input, $rdf->[0]);
    print STDOUT qq[<dd><dl>];
    for my $triple (@{$rdf->[1]}) {
      print STDOUT '<dt>' . get_node_link ($input, $triple->[0]) . '<dd>';
      print STDOUT get_rdf_resource_html ($triple->[1]);
      print STDOUT ' ';
      print STDOUT get_rdf_resource_html ($triple->[2]);
      print STDOUT ' ';
      print STDOUT get_rdf_resource_html ($triple->[3]);
    }
    print STDOUT qq[</dl>];
  }
  print STDOUT qq[</dl></div>];
} # print_rdf_section

sub get_rdf_resource_html ($) {
  my $resource = shift;
  if (defined $resource->{uri}) {
    my $euri = htescape ($resource->{uri});
    return '<code class=uri>&lt;<a href="' . $euri . '">' . $euri .
        '</a>></code>';
  } elsif (defined $resource->{bnodeid}) {
    return htescape ('_:' . $resource->{bnodeid});
  } elsif ($resource->{nodes}) {
    return '(rdf:XMLLiteral)';
  } elsif (defined $resource->{value}) {
    my $elang = htescape (defined $resource->{language}
                              ? $resource->{language} : '');
    my $r = qq[<q lang="$elang">] . htescape ($resource->{value}) . '</q>';
    if (defined $resource->{datatype}) {
      my $euri = htescape ($resource->{datatype});
      $r .= '^^<code class=uri>&lt;<a href="' . $euri . '">' . $euri .
          '</a>></code>';
    } elsif (length $resource->{language}) {
      $r .= '@' . htescape ($resource->{language});
    }
    return $r;
  } else {
    return '??';
  }
} # get_rdf_resource_html

{
  my $Msg = {};

sub load_text_catalog ($) {
#  my $self = shift;
  my $lang = shift; # MUST be a canonical lang name
  open my $file, '<:utf8', "cc-msg.$lang.txt"
      or die "$0: cc-msg.$lang.txt: $!";
  while (<$file>) {
    if (s/^([^;]+);([^;]*);//) {
      my ($type, $cls, $msg) = ($1, $2, $_);
      $msg =~ tr/\x0D\x0A//d;
      $Msg->{$type} = [$cls, $msg];
    }
  }
} # load_text_catalog

sub get_text ($;$$) {
#  my $self = shift;
  my ($type, $level, $node) = @_;
  $type = $level . ':' . $type if defined $level;
  $level = 'm' unless defined $level;
  my @arg;
  {
    if (defined $Msg->{$type}) {
      my $msg = $Msg->{$type}->[1];
      $msg =~ s{<var>\$([0-9]+)</var>}{
        defined $arg[$1] ? ($arg[$1]) : '(undef)';
      }ge;                 ##BUG: ^ must be escaped
      $msg =~ s{<var>{\@([A-Za-z0-9:_.-]+)}</var>}{
        UNIVERSAL::can ($node, 'get_attribute_ns')
            ?  ($node->get_attribute_ns (undef, $1)) : ''
      }ge; ## BUG: ^ must be escaped
      $msg =~ s{<var>{\@}</var>}{        ## BUG: v must be escaped
        UNIVERSAL::can ($node, 'value') ? ($node->value) : ''
      }ge;
      $msg =~ s{<var>{local-name}</var>}{
        UNIVERSAL::can ($node, 'manakai_local_name')
          ? ($node->manakai_local_name) : ''
      }ge;  ## BUG: ^ must be escaped
      $msg =~ s{<var>{element-local-name}</var>}{
        (UNIVERSAL::can ($node, 'owner_element') and
         $node->owner_element)
          ?  ($node->owner_element->manakai_local_name)
          : '' ## BUG: ^ must be escaped
      }ge;
      return ($type, 'level-' . $level . ' ' . $Msg->{$type}->[0], $msg);
    } elsif ($type =~ s/:([^:]*)$//) {
      unshift @arg, $1;
      redo;
    }
  }
  return ($type, 'level-'.$level, ($_[0]));
                                 ## BUG: ^ must be escaped
} # get_text

}

sub get_input_document ($$) {
  my ($http, $dom) = @_;

  require Encode;
  my $request_uri = Encode::decode ('utf-8', $http->get_parameter ('uri'));
  my $r = WebHACC::Input->new;
  if (defined $request_uri and length $request_uri) {
    my $uri = $dom->create_uri_reference ($request_uri);
    unless ({
             http => 1,
            }->{lc $uri->uri_scheme}) {
      $r = WebHACC::Input::Error->new;
      $r->{uri} = $request_uri;
      $r->{request_uri} = $request_uri;
      $r->{error_status_text} = 'URL scheme not allowed';
    }

    require Message::Util::HostPermit;
    my $host_permit = new Message::Util::HostPermit;
    $host_permit->add_rule (<<EOH);
Allow host=suika port=80
Deny host=suika
Allow host=suika.fam.cx port=80
Deny host=suika.fam.cx
Deny host=localhost
Deny host=*.localdomain
Deny ipv4=0.0.0.0/8
Deny ipv4=10.0.0.0/8
Deny ipv4=127.0.0.0/8
Deny ipv4=169.254.0.0/16
Deny ipv4=172.0.0.0/11
Deny ipv4=192.0.2.0/24
Deny ipv4=192.88.99.0/24
Deny ipv4=192.168.0.0/16
Deny ipv4=198.18.0.0/15
Deny ipv4=224.0.0.0/4
Deny ipv4=255.255.255.255/32
Deny ipv6=0::0/0
Allow host=*
EOH
    unless ($host_permit->check ($uri->uri_host, $uri->uri_port || 80)) {
      my $r = WebHACC::Input::Error->new;
      $r->{uri} = $request_uri;
      $r->{request_uri} = $request_uri;
      $r->{error_status_text} = 'Connection to the host is forbidden';
      return $r;
    }

    require LWP::UserAgent;
    my $ua = WDCC::LWPUA->new;
    $ua->{wdcc_dom} = $dom;
    $ua->{wdcc_host_permit} = $host_permit;
    $ua->agent ('Mozilla'); ## TODO: for now.
    $ua->parse_head (0);
    $ua->protocols_allowed ([qw/http/]);
    $ua->max_size (1000_000);
    my $req = HTTP::Request->new (GET => $request_uri);
    $req->header ('Accept-Encoding' => 'identity, *; q=0');
    my $res = $ua->request ($req);
    ## TODO: 401 sets |is_success| true.
    if ($res->is_success or $http->get_parameter ('error-page')) {
      $r->{base_uri} = $res->base; ## NOTE: It does check |Content-Base|, |Content-Location|, and <base>. ## TODO: Use our own code!
      $r->{uri} = $res->request->uri;
      $r->{request_uri} = $request_uri;

      ## TODO: More strict parsing...
      my $ct = $res->header ('Content-Type');
      if (defined $ct and $ct =~ /;\s*charset\s*=\s*"?([^\s;"]+)"?/i) {
        $r->{charset} = lc $1;
        $r->{charset} =~ tr/\\//d;
        $r->{official_charset} = $r->{charset};
      }

      my $input_charset = $http->get_parameter ('charset');
      if (defined $input_charset and length $input_charset) {
        $r->{charset_overridden}
            = (not defined $r->{charset} or $r->{charset} ne $input_charset);
        $r->{charset} = $input_charset;
      }

      ## TODO: Support for HTTP Content-Encoding

      $r->{s} = ''.$res->content;

      require Whatpm::ContentType;
      ($r->{official_type}, $r->{media_type})
          = Whatpm::ContentType->get_sniffed_type
              (get_file_head => sub {
                 return substr $r->{s}, 0, shift;
               },
               http_content_type_byte => $ct,
               has_http_content_encoding =>
                   defined $res->header ('Content-Encoding'),
               supported_image_types => {});
    } else {
      $r->{uri} = $res->request->uri;
      $r->{request_uri} = $request_uri;
      $r->{error_status_text} = $res->status_line;
    }

    $r->{header_field} = [];
    $res->scan (sub {
      push @{$r->{header_field}}, [$_[0], $_[1]];
    });
    $r->{header_status_code} = $res->code;
    $r->{header_status_text} = $res->message;
  } else {
    $r->{s} = ''.$http->get_parameter ('s');
    $r->{uri} = q<thismessage:/>;
    $r->{request_uri} = q<thismessage:/>;
    $r->{base_uri} = q<thismessage:/>;
    $r->{charset} = ''.$http->get_parameter ('_charset_');
    $r->{charset} =~ s/\s+//g;
    $r->{charset} = 'utf-8' if $r->{charset} eq '';
    $r->{official_charset} = $r->{charset};
    $r->{header_field} = [];

    require Whatpm::ContentType;
    ($r->{official_type}, $r->{media_type})
        = Whatpm::ContentType->get_sniffed_type
            (get_file_head => sub {
               return substr $r->{s}, 0, shift;
             },
             http_content_type_byte => undef,
             has_http_content_encoding => 0,
             supported_image_types => {});
  }

  my $input_format = $http->get_parameter ('i');
  if (defined $input_format and length $input_format) {
    $r->{media_type_overridden}
        = (not defined $r->{media_type} or $input_format ne $r->{media_type});
    $r->{media_type} = $input_format;
  }
  if (defined $r->{s} and not defined $r->{media_type}) {
    $r->{media_type} = 'text/html';
    $r->{media_type_overridden} = 1;
  }

  if ($r->{media_type} eq 'text/xml') {
    unless (defined $r->{charset}) {
      $r->{charset} = 'us-ascii';
      $r->{official_charset} = $r->{charset};
    } elsif ($r->{charset_overridden} and $r->{charset} eq 'us-ascii') {
      $r->{charset_overridden} = 0;
    }
  }

  if (length $r->{s} > 1000_000) {
    $r->{error_status_text} = 'Entity-body too large';
    delete $r->{s};
    return $r;
  }

  $r->{inner_html_element} = $http->get_parameter ('e');

  return $r;
} # get_input_document

package WDCC::LWPUA;
BEGIN { push our @ISA, 'LWP::UserAgent'; }

sub redirect_ok {
  my $ua = shift;
  unless ($ua->SUPER::redirect_ok (@_)) {
    return 0;
  }

  my $uris = $_[1]->header ('Location');
  return 0 unless $uris;
  my $uri = $ua->{wdcc_dom}->create_uri_reference ($uris);
  unless ({
           http => 1,
          }->{lc $uri->uri_scheme}) {
    return 0;
  }
  unless ($ua->{wdcc_host_permit}->check ($uri->uri_host, $uri->uri_port || 80)) {
    return 0;
  }
  return 1;
} # redirect_ok

=head1 AUTHOR

Wakaba <w@suika.fam.cx>.

=head1 LICENSE

Copyright 2007-2008 Wakaba <w@suika.fam.cx>

This library is free software; you can redistribute it
and/or modify it under the same terms as Perl itself.

=cut

## $Date: 2008/07/20 16:53:10 $
1	wakaba	1.1	#!/usr/bin/perl
2			use strict;
3	wakaba	1.23	use utf8;
4	wakaba	1.1
5			use lib qw[/home/httpd/html/www/markup/html/whatpm
6	wakaba	1.16	/home/wakaba/work/manakai2/lib];
7	wakaba	1.1	use CGI::Carp qw[fatalsToBrowser];
8	wakaba	1.2	use Scalar::Util qw[refaddr];
9	wakaba	1.1
10	wakaba	1.53	require WebHACC::Input;
11			require WebHACC::Result;
12			require WebHACC::Output;
13
14			my $out;
15	wakaba	1.2
16	wakaba	1.35	require Message::DOM::DOMImplementation;
17			my $dom = Message::DOM::DOMImplementation->new;
18			{
19	wakaba	1.16	use Message::CGI::HTTP;
20			my $http = Message::CGI::HTTP->new;
21	wakaba	1.1
22	wakaba	1.16	if ($http->get_meta_variable ('PATH_INFO') ne '/') {
23	wakaba	1.8	print STDOUT "Status: 404 Not Found\nContent-Type: text/plain; charset=us-ascii\n\n400";
24			exit;
25			}
26	wakaba	1.53
27	wakaba	1.7	load_text_catalog ('en'); ## TODO: conneg
28
29	wakaba	1.53	$out = WebHACC::Output->new;
30			$out->handle (*STDOUT);
31			$out->set_utf8;
32			$out->set_flush;
33			$out->html (qq[Content-Type: text/html; charset=utf-8
34	wakaba	1.2
35			<!DOCTYPE html>
36			<html lang="en">
37			<head>
38			<title>Web Document Conformance Checker (BETA)</title>
39	wakaba	1.3	<link rel="stylesheet" href="../cc-style.css" type="text/css">
40	wakaba	1.2	</head>
41			<body>
42	wakaba	1.13	<h1><a href="../cc-interface">Web Document Conformance Checker</a>
43			(<em>beta</em>)</h1>
44	wakaba	1.53	]);
45	wakaba	1.2
46	wakaba	1.14	my $input = get_input_document ($http, $dom);
47	wakaba	1.55
48	wakaba	1.53	$out->input ($input);
49			$out->unset_flush;
50
51	wakaba	1.55	my $result = WebHACC::Result->new;
52			$result->output ($out);
53			$result->{conforming_min} = 1;
54			$result->{conforming_max} = 1;
55	wakaba	1.14
56	wakaba	1.55	$out->html ('<script src="../cc-script.js"></script>');
57	wakaba	1.54
58	wakaba	1.55	check_and_print ($input => $result => $out);
59
60			$result->generate_result_section;
61	wakaba	1.1
62	wakaba	1.53	$out->nav_list;
63	wakaba	1.16
64	wakaba	1.53	exit;
65	wakaba	1.35	}
66	wakaba	1.1
67	wakaba	1.53	sub check_and_print ($$$) {
68			my ($input, $result, $out) = @_;
69			my $original_input = $out->input;
70			$out->input ($input);
71	wakaba	1.31
72	wakaba	1.55	$input->generate_info_section ($result);
73
74	wakaba	1.54	$input->generate_transfer_sections ($result);
75	wakaba	1.31
76	wakaba	1.55	unless (defined $input->{s}) {
77			$result->{conforming_min} = 0;
78			return;
79			}
80	wakaba	1.31
81	wakaba	1.53	my $checker_class = {
82			'text/cache-manifest' => 'WebHACC::Language::CacheManifest',
83			'text/css' => 'WebHACC::Language::CSS',
84			'text/html' => 'WebHACC::Language::HTML',
85			'text/x-webidl' => 'WebHACC::Language::WebIDL',
86
87			'text/xml' => 'WebHACC::Language::XML',
88			'application/atom+xml' => 'WebHACC::Language::XML',
89			'application/rss+xml' => 'WebHACC::Language::XML',
90			'image/svg+xml' => 'WebHACC::Language::XML',
91			'application/xhtml+xml' => 'WebHACC::Language::XML',
92			'application/xml' => 'WebHACC::Language::XML',
93			## TODO: Should we make all XML MIME Types fall
94			## into this category?
95
96			## NOTE: This type has different model from normal XML types.
97			'application/rdf+xml' => 'WebHACC::Language::XML',
98			}->{$input->{media_type}} \|\| 'WebHACC::Language::Default';
99
100			eval qq{ require $checker_class } or die "$0: Loading $checker_class: $@";
101			my $checker = $checker_class->new;
102			$checker->input ($input);
103			$checker->output ($out);
104			$checker->result ($result);
105
106			## TODO: A cache manifest MUST be text/cache-manifest
107			## TODO: WebIDL media type "text/x-webidl"
108
109			$checker->generate_syntax_error_section;
110			$checker->generate_source_string_section;
111
112	wakaba	1.55	my @subdoc;
113	wakaba	1.53	$checker->onsubdoc (sub {
114			push @subdoc, shift;
115			});
116
117			$checker->generate_structure_dump_section;
118			$checker->generate_structure_error_section;
119			$checker->generate_additional_sections;
120
121			=pod
122	wakaba	1.31
123			if (defined $doc or defined $el) {
124	wakaba	1.53
125	wakaba	1.32	print_table_section ($input, $elements->{table}) if @{$elements->{table}};
126	wakaba	1.33	print_listing_section ({
127			id => 'identifiers', label => 'IDs', heading => 'Identifiers',
128			}, $input, $elements->{id}) if keys %{$elements->{id}};
129			print_listing_section ({
130			id => 'terms', label => 'Terms', heading => 'Terms',
131			}, $input, $elements->{term}) if keys %{$elements->{term}};
132			print_listing_section ({
133			id => 'classes', label => 'Classes', heading => 'Classes',
134			}, $input, $elements->{class}) if keys %{$elements->{class}};
135	wakaba	1.53
136	wakaba	1.45	print_rdf_section ($input, $elements->{rdf}) if @{$elements->{rdf}};
137	wakaba	1.31	}
138	wakaba	1.34
139	wakaba	1.53	=cut
140
141	wakaba	1.34	my $id_prefix = 0;
142	wakaba	1.53	for my $_subinput (@subdoc) {
143	wakaba	1.55	my $subinput = WebHACC::Input::Subdocument->new (++$id_prefix);
144	wakaba	1.53	$subinput->{$_} = $_subinput->{$_} for keys %$_subinput;
145	wakaba	1.34	$subinput->{base_uri} = $subinput->{container_node}->base_uri
146			unless defined $subinput->{base_uri};
147	wakaba	1.55	$subinput->{parent_input} = $input;
148	wakaba	1.34
149	wakaba	1.55	$subinput->start_section ($result);
150	wakaba	1.53	check_and_print ($subinput => $result => $out);
151	wakaba	1.55	$subinput->end_section ($result);
152	wakaba	1.34	}
153	wakaba	1.53
154			$out->input ($original_input);
155	wakaba	1.31	} # check_and_print
156
157	wakaba	1.32	sub print_table_section ($$) {
158			my ($input, $tables) = @_;
159	wakaba	1.18
160	wakaba	1.53	# push @nav, [qq[#$input->{id_prefix}tables] => 'Tables']
161			# unless $input->{nested};
162	wakaba	1.18	print STDOUT qq[
163	wakaba	1.32	<div id="$input->{id_prefix}tables" class="section">
164	wakaba	1.18	<h2>Tables</h2>
165
166			<!--[if IE]><script type="text/javascript" src="../excanvas.js"></script><![endif]-->
167			<script src="../table-script.js" type="text/javascript"></script>
168			<noscript>
169			<p><em>Structure of tables are visualized here if scripting is enabled.</em></p>
170			</noscript>
171			];
172
173			require JSON;
174
175			my $i = 0;
176	wakaba	1.50	for my $table (@$tables) {
177	wakaba	1.18	$i++;
178	wakaba	1.32	print STDOUT qq[<div class="section" id="$input->{id_prefix}table-$i"><h3>] .
179	wakaba	1.50	get_node_link ($input, $table->{element}) . q[</h3>];
180
181			delete $table->{element};
182	wakaba	1.18
183	wakaba	1.49	for (@{$table->{column_group}}, @{$table->{column}}, $table->{caption},
184			@{$table->{row}}) {
185	wakaba	1.18	next unless $_;
186			delete $_->{element};
187			}
188
189			for (@{$table->{row_group}}) {
190			next unless $_;
191			next unless $_->{element};
192			$_->{type} = $_->{element}->manakai_local_name;
193			delete $_->{element};
194			}
195
196			for (@{$table->{cell}}) {
197			next unless $_;
198			for (@{$_}) {
199			next unless $_;
200			for (@$_) {
201			$_->{id} = refaddr $_->{element} if defined $_->{element};
202			delete $_->{element};
203			$_->{is_header} = $_->{is_header} ? 1 : 0;
204			}
205			}
206			}
207
208			print STDOUT '</div><script type="text/javascript">tableToCanvas (';
209			print STDOUT JSON::objToJson ($table);
210	wakaba	1.32	print STDOUT qq[, document.getElementById ('$input->{id_prefix}table-$i')];
211			print STDOUT qq[, '$input->{id_prefix}');</script>];
212	wakaba	1.18	}
213
214			print STDOUT qq[</div>];
215			} # print_table_section
216
217	wakaba	1.33	sub print_listing_section ($$$) {
218			my ($opt, $input, $ids) = @_;
219	wakaba	1.18
220	wakaba	1.53	# push @nav, ['#' . $input->{id_prefix} . $opt->{id} => $opt->{label}]
221			# unless $input->{nested};
222	wakaba	1.18	print STDOUT qq[
223	wakaba	1.33	<div id="$input->{id_prefix}$opt->{id}" class="section">
224			<h2>$opt->{heading}</h2>
225	wakaba	1.18
226			<dl>
227			];
228			for my $id (sort {$a cmp $b} keys %$ids) {
229			print STDOUT qq[<dt><code>@{[htescape $id]}</code></dt>];
230			for (@{$ids->{$id}}) {
231	wakaba	1.32	print STDOUT qq[<dd>].get_node_link ($input, $_).qq[</dd>];
232	wakaba	1.18	}
233			}
234			print STDOUT qq[</dl></div>];
235	wakaba	1.33	} # print_listing_section
236	wakaba	1.18
237	wakaba	1.48
238	wakaba	1.45	sub print_rdf_section ($$$) {
239			my ($input, $rdfs) = @_;
240
241	wakaba	1.53	# push @nav, ['#' . $input->{id_prefix} . 'rdf' => 'RDF']
242			# unless $input->{nested};
243	wakaba	1.45	print STDOUT qq[
244			<div id="$input->{id_prefix}rdf" class="section">
245			<h2>RDF Triples</h2>
246
247			<dl>];
248			my $i = 0;
249			for my $rdf (@$rdfs) {
250			print STDOUT qq[<dt id="$input->{id_prefix}rdf-@{[$i++]}">];
251			print STDOUT get_node_link ($input, $rdf->[0]);
252			print STDOUT qq[<dd><dl>];
253			for my $triple (@{$rdf->[1]}) {
254			print STDOUT '<dt>' . get_node_link ($input, $triple->[0]) . '<dd>';
255			print STDOUT get_rdf_resource_html ($triple->[1]);
256			print STDOUT ' ';
257			print STDOUT get_rdf_resource_html ($triple->[2]);
258			print STDOUT ' ';
259			print STDOUT get_rdf_resource_html ($triple->[3]);
260			}
261			print STDOUT qq[</dl>];
262			}
263			print STDOUT qq[</dl></div>];
264			} # print_rdf_section
265
266			sub get_rdf_resource_html ($) {
267			my $resource = shift;
268	wakaba	1.46	if (defined $resource->{uri}) {
269	wakaba	1.45	my $euri = htescape ($resource->{uri});
270			return '<code class=uri><<a href="' . $euri . '">' . $euri .
271			'</a>></code>';
272	wakaba	1.46	} elsif (defined $resource->{bnodeid}) {
273	wakaba	1.45	return htescape ('_:' . $resource->{bnodeid});
274			} elsif ($resource->{nodes}) {
275			return '(rdf:XMLLiteral)';
276			} elsif (defined $resource->{value}) {
277			my $elang = htescape (defined $resource->{language}
278			? $resource->{language} : '');
279			my $r = qq[<q lang="$elang">] . htescape ($resource->{value}) . '</q>';
280			if (defined $resource->{datatype}) {
281			my $euri = htescape ($resource->{datatype});
282			$r .= '^^<code class=uri><<a href="' . $euri . '">' . $euri .
283			'</a>></code>';
284			} elsif (length $resource->{language}) {
285			$r .= '@' . htescape ($resource->{language});
286			}
287			return $r;
288			} else {
289			return '??';
290			}
291			} # get_rdf_resource_html
292
293	wakaba	1.7	{
294			my $Msg = {};
295
296			sub load_text_catalog ($) {
297	wakaba	1.53	# my $self = shift;
298	wakaba	1.7	my $lang = shift; # MUST be a canonical lang name
299	wakaba	1.26	open my $file, '<:utf8', "cc-msg.$lang.txt"
300			or die "$0: cc-msg.$lang.txt: $!";
301	wakaba	1.7	while (<$file>) {
302			if (s/^([^;]+);([^;]*);//) {
303			my ($type, $cls, $msg) = ($1, $2, $_);
304			$msg =~ tr/\x0D\x0A//d;
305			$Msg->{$type} = [$cls, $msg];
306			}
307			}
308			} # load_text_catalog
309
310	wakaba	1.53	sub get_text ($;$$) {
311			# my $self = shift;
312	wakaba	1.15	my ($type, $level, $node) = @_;
313	wakaba	1.7	$type = $level . ':' . $type if defined $level;
314	wakaba	1.29	$level = 'm' unless defined $level;
315	wakaba	1.7	my @arg;
316			{
317			if (defined $Msg->{$type}) {
318			my $msg = $Msg->{$type}->[1];
319	wakaba	1.10	$msg =~ s{<var>\$([0-9]+)</var>}{
320	wakaba	1.53	defined $arg[$1] ? ($arg[$1]) : '(undef)';
321			}ge; ##BUG: ^ must be escaped
322	wakaba	1.15	$msg =~ s{<var>{\@([A-Za-z0-9:_.-]+)}</var>}{
323			UNIVERSAL::can ($node, 'get_attribute_ns')
324	wakaba	1.53	? ($node->get_attribute_ns (undef, $1)) : ''
325			}ge; ## BUG: ^ must be escaped
326			$msg =~ s{<var>{\@}</var>}{ ## BUG: v must be escaped
327			UNIVERSAL::can ($node, 'value') ? ($node->value) : ''
328	wakaba	1.15	}ge;
329	wakaba	1.17	$msg =~ s{<var>{local-name}</var>}{
330			UNIVERSAL::can ($node, 'manakai_local_name')
331	wakaba	1.53	? ($node->manakai_local_name) : ''
332			}ge; ## BUG: ^ must be escaped
333	wakaba	1.17	$msg =~ s{<var>{element-local-name}</var>}{
334			(UNIVERSAL::can ($node, 'owner_element') and
335			$node->owner_element)
336	wakaba	1.53	? ($node->owner_element->manakai_local_name)
337			: '' ## BUG: ^ must be escaped
338	wakaba	1.17	}ge;
339	wakaba	1.29	return ($type, 'level-' . $level . ' ' . $Msg->{$type}->[0], $msg);
340	wakaba	1.7	} elsif ($type =~ s/:([^:]*)$//) {
341			unshift @arg, $1;
342			redo;
343			}
344			}
345	wakaba	1.53	return ($type, 'level-'.$level, ($_[0]));
346			## BUG: ^ must be escaped
347	wakaba	1.7	} # get_text
348
349			}
350
351	wakaba	1.9	sub get_input_document ($$) {
352			my ($http, $dom) = @_;
353
354	wakaba	1.54	require Encode;
355			my $request_uri = Encode::decode ('utf-8', $http->get_parameter ('uri'));
356	wakaba	1.53	my $r = WebHACC::Input->new;
357	wakaba	1.9	if (defined $request_uri and length $request_uri) {
358			my $uri = $dom->create_uri_reference ($request_uri);
359			unless ({
360			http => 1,
361			}->{lc $uri->uri_scheme}) {
362	wakaba	1.54	$r = WebHACC::Input::Error->new;
363			$r->{uri} = $request_uri;
364			$r->{request_uri} = $request_uri;
365			$r->{error_status_text} = 'URL scheme not allowed';
366	wakaba	1.9	}
367
368			require Message::Util::HostPermit;
369			my $host_permit = new Message::Util::HostPermit;
370			$host_permit->add_rule (<<EOH);
371			Allow host=suika port=80
372			Deny host=suika
373			Allow host=suika.fam.cx port=80
374			Deny host=suika.fam.cx
375			Deny host=localhost
376			Deny host=*.localdomain
377			Deny ipv4=0.0.0.0/8
378			Deny ipv4=10.0.0.0/8
379			Deny ipv4=127.0.0.0/8
380			Deny ipv4=169.254.0.0/16
381			Deny ipv4=172.0.0.0/11
382			Deny ipv4=192.0.2.0/24
383			Deny ipv4=192.88.99.0/24
384			Deny ipv4=192.168.0.0/16
385			Deny ipv4=198.18.0.0/15
386			Deny ipv4=224.0.0.0/4
387			Deny ipv4=255.255.255.255/32
388			Deny ipv6=0::0/0
389			Allow host=*
390			EOH
391			unless ($host_permit->check ($uri->uri_host, $uri->uri_port \|\| 80)) {
392	wakaba	1.54	my $r = WebHACC::Input::Error->new;
393			$r->{uri} = $request_uri;
394			$r->{request_uri} = $request_uri;
395			$r->{error_status_text} = 'Connection to the host is forbidden';
396			return $r;
397	wakaba	1.9	}
398
399			require LWP::UserAgent;
400			my $ua = WDCC::LWPUA->new;
401			$ua->{wdcc_dom} = $dom;
402			$ua->{wdcc_host_permit} = $host_permit;
403			$ua->agent ('Mozilla'); ## TODO: for now.
404			$ua->parse_head (0);
405			$ua->protocols_allowed ([qw/http/]);
406			$ua->max_size (1000_000);
407			my $req = HTTP::Request->new (GET => $request_uri);
408	wakaba	1.28	$req->header ('Accept-Encoding' => 'identity, *; q=0');
409	wakaba	1.9	my $res = $ua->request ($req);
410	wakaba	1.16	## TODO: 401 sets \|is_success\| true.
411			if ($res->is_success or $http->get_parameter ('error-page')) {
412	wakaba	1.9	$r->{base_uri} = $res->base; ## NOTE: It does check \|Content-Base\|, \|Content-Location\|, and <base>. ## TODO: Use our own code!
413			$r->{uri} = $res->request->uri;
414			$r->{request_uri} = $request_uri;
415
416			## TODO: More strict parsing...
417			my $ct = $res->header ('Content-Type');
418	wakaba	1.22	if (defined $ct and $ct =~ /;\scharset\s=\s*"?([^\s;"]+)"?/i) {
419	wakaba	1.9	$r->{charset} = lc $1;
420			$r->{charset} =~ tr/\\//d;
421	wakaba	1.26	$r->{official_charset} = $r->{charset};
422	wakaba	1.9	}
423
424	wakaba	1.16	my $input_charset = $http->get_parameter ('charset');
425	wakaba	1.9	if (defined $input_charset and length $input_charset) {
426			$r->{charset_overridden}
427			= (not defined $r->{charset} or $r->{charset} ne $input_charset);
428			$r->{charset} = $input_charset;
429	wakaba	1.25	}
430
431			## TODO: Support for HTTP Content-Encoding
432	wakaba	1.9
433			$r->{s} = ''.$res->content;
434	wakaba	1.25
435			require Whatpm::ContentType;
436			($r->{official_type}, $r->{media_type})
437			= Whatpm::ContentType->get_sniffed_type
438			(get_file_head => sub {
439			return substr $r->{s}, 0, shift;
440			},
441			http_content_type_byte => $ct,
442			has_http_content_encoding =>
443			defined $res->header ('Content-Encoding'),
444			supported_image_types => {});
445	wakaba	1.9	} else {
446			$r->{uri} = $res->request->uri;
447			$r->{request_uri} = $request_uri;
448			$r->{error_status_text} = $res->status_line;
449			}
450
451			$r->{header_field} = [];
452			$res->scan (sub {
453			push @{$r->{header_field}}, [$_[0], $_[1]];
454			});
455			$r->{header_status_code} = $res->code;
456			$r->{header_status_text} = $res->message;
457			} else {
458	wakaba	1.16	$r->{s} = ''.$http->get_parameter ('s');
459	wakaba	1.9	$r->{uri} = q<thismessage:/>;
460			$r->{request_uri} = q<thismessage:/>;
461			$r->{base_uri} = q<thismessage:/>;
462	wakaba	1.16	$r->{charset} = ''.$http->get_parameter ('_charset_');
463	wakaba	1.9	$r->{charset} =~ s/\s+//g;
464			$r->{charset} = 'utf-8' if $r->{charset} eq '';
465	wakaba	1.26	$r->{official_charset} = $r->{charset};
466	wakaba	1.9	$r->{header_field} = [];
467	wakaba	1.25
468			require Whatpm::ContentType;
469			($r->{official_type}, $r->{media_type})
470			= Whatpm::ContentType->get_sniffed_type
471			(get_file_head => sub {
472			return substr $r->{s}, 0, shift;
473			},
474			http_content_type_byte => undef,
475			has_http_content_encoding => 0,
476			supported_image_types => {});
477	wakaba	1.9	}
478
479	wakaba	1.16	my $input_format = $http->get_parameter ('i');
480	wakaba	1.9	if (defined $input_format and length $input_format) {
481			$r->{media_type_overridden}
482			= (not defined $r->{media_type} or $input_format ne $r->{media_type});
483			$r->{media_type} = $input_format;
484			}
485			if (defined $r->{s} and not defined $r->{media_type}) {
486			$r->{media_type} = 'text/html';
487			$r->{media_type_overridden} = 1;
488			}
489
490			if ($r->{media_type} eq 'text/xml') {
491			unless (defined $r->{charset}) {
492			$r->{charset} = 'us-ascii';
493	wakaba	1.26	$r->{official_charset} = $r->{charset};
494	wakaba	1.9	} elsif ($r->{charset_overridden} and $r->{charset} eq 'us-ascii') {
495			$r->{charset_overridden} = 0;
496			}
497			}
498
499			if (length $r->{s} > 1000_000) {
500			$r->{error_status_text} = 'Entity-body too large';
501			delete $r->{s};
502			return $r;
503			}
504
505	wakaba	1.35	$r->{inner_html_element} = $http->get_parameter ('e');
506
507	wakaba	1.9	return $r;
508			} # get_input_document
509
510			package WDCC::LWPUA;
511			BEGIN { push our @ISA, 'LWP::UserAgent'; }
512
513			sub redirect_ok {
514			my $ua = shift;
515			unless ($ua->SUPER::redirect_ok (@_)) {
516			return 0;
517			}
518
519			my $uris = $_[1]->header ('Location');
520			return 0 unless $uris;
521			my $uri = $ua->{wdcc_dom}->create_uri_reference ($uris);
522			unless ({
523			http => 1,
524			}->{lc $uri->uri_scheme}) {
525			return 0;
526			}
527			unless ($ua->{wdcc_host_permit}->check ($uri->uri_host, $uri->uri_port \|\| 80)) {
528			return 0;
529			}
530			return 1;
531			} # redirect_ok
532
533	wakaba	1.1	=head1 AUTHOR
534
535			Wakaba <w@suika.fam.cx>.
536
537			=head1 LICENSE
538
539	wakaba	1.35	Copyright 2007-2008 Wakaba <w@suika.fam.cx>
540	wakaba	1.1
541			This library is free software; you can redistribute it
542			and/or modify it under the same terms as Perl itself.
543
544			=cut
545
546	wakaba	1.55	## $Date: 2008/07/20 16:53:10 $