This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | declare(strict_types=1); |
||
4 | |||
5 | namespace Jarvis\Skill\Routing; |
||
6 | |||
7 | use FastRoute\DataGenerator\GroupCountBased as DataGenerator; |
||
8 | use FastRoute\Dispatcher\GroupCountBased as Dispatcher; |
||
9 | use FastRoute\RouteCollector; |
||
10 | use FastRoute\RouteParser\Std as Parser; |
||
11 | use Symfony\Component\HttpFoundation\Request; |
||
12 | use Symfony\Component\HttpFoundation\Response; |
||
13 | |||
14 | /** |
||
15 | * @author Eric Chau <[email protected]> |
||
16 | */ |
||
17 | class Router extends Dispatcher |
||
18 | { |
||
19 | const DEFAULT_SCHEME = 'http'; |
||
20 | const HTTP_PORT = 80; |
||
21 | const HTTPS_PORT = 443; |
||
22 | |||
23 | private $computed = false; |
||
24 | private $host = ''; |
||
25 | private $rawRoutes = []; |
||
26 | private $routesNames = []; |
||
27 | private $routeCollector; |
||
28 | private $scheme = self::DEFAULT_SCHEME; |
||
29 | |||
30 | /** |
||
31 | * Creates an instance of Router. |
||
32 | * |
||
33 | * Required to disable FastRoute\Dispatcher\GroupCountBased constructor. |
||
34 | */ |
||
35 | public function __construct() |
||
36 | { |
||
37 | } |
||
38 | |||
39 | /** |
||
40 | * Adds a new route to the collection. |
||
41 | * |
||
42 | * We highly recommend you to use ::beginRoute() instead. |
||
43 | * {@see ::beginRoute()} |
||
44 | * |
||
45 | * @param Route $route |
||
46 | * @return self |
||
47 | */ |
||
48 | public function addRoute(Route $route): void |
||
49 | { |
||
50 | $this->rawRoutes[] = [$route->method(), $route->pattern(), $route->handler()]; |
||
51 | $this->computed = false; |
||
52 | |||
53 | if (false != $name = $route->name()) { |
||
54 | $this->routesNames[$name] = $route->pattern(); |
||
55 | } |
||
56 | } |
||
57 | |||
58 | /** |
||
59 | * This is an helper that provides you a smooth syntax to add new route. Example: |
||
60 | * |
||
61 | * $router |
||
62 | * ->beginRoute('hello_world') |
||
63 | * ->setPattern('/hello/world') |
||
64 | * ->setHandler(function () { |
||
65 | * return 'Hello, world!'; |
||
66 | * }) |
||
67 | * ->end() |
||
68 | * ; |
||
69 | * |
||
70 | * This syntax avoids you to create a new intance of Route, hydrating it and |
||
71 | * then adding it to Router. |
||
72 | * |
||
73 | * @param string|null $name |
||
74 | * @return Route |
||
75 | */ |
||
76 | public function beginRoute(string $name = null): Route |
||
77 | { |
||
78 | return new Route($this, $name); |
||
79 | } |
||
80 | |||
81 | /** |
||
82 | * Generates and returns the full URL (with scheme and host) with provided URI. |
||
83 | * |
||
84 | * Notes that this method required at least the host to be setted. |
||
85 | * |
||
86 | * @param string $uri |
||
87 | * @return string |
||
88 | */ |
||
89 | public function url(string $uri): string |
||
90 | { |
||
91 | $scheme = ''; |
||
92 | if ($this->host) { |
||
93 | $uri = preg_replace('~/+~', '/', "{$this->host}$uri"); |
||
94 | $scheme = "{$this->scheme}://"; |
||
95 | } |
||
96 | |||
97 | return "$scheme$uri"; |
||
98 | } |
||
99 | |||
100 | /** |
||
101 | * Returns the current scheme. |
||
102 | * |
||
103 | * @return string |
||
104 | */ |
||
105 | public function scheme(): string |
||
106 | { |
||
107 | return $this->scheme; |
||
108 | } |
||
109 | |||
110 | /** |
||
111 | * Sets the new scheme to use. Calling this method without parameter will reset |
||
112 | * it to 'http'. |
||
113 | * |
||
114 | * @param string|null $scheme |
||
115 | */ |
||
116 | public function setScheme(string $scheme = null): void |
||
117 | { |
||
118 | $this->scheme = (string) $scheme ?: self::DEFAULT_SCHEME; |
||
119 | } |
||
120 | |||
121 | /** |
||
122 | * Returns the setted host. |
||
123 | * |
||
124 | * @return string |
||
125 | */ |
||
126 | public function host(): string |
||
127 | { |
||
128 | return $this->host; |
||
129 | } |
||
130 | |||
131 | /** |
||
132 | * Sets new host to Router. Calling this method without parameter will reset |
||
133 | * the host to empty string. |
||
134 | * |
||
135 | * @param string|null $host |
||
136 | * @return self |
||
137 | */ |
||
138 | public function setHost(string $host = null): void |
||
139 | { |
||
140 | $this->host = (string) $host; |
||
141 | } |
||
142 | |||
143 | /** |
||
144 | * Uses the provided request to guess the host. This method also set the |
||
145 | * |
||
146 | * @param Request $request |
||
147 | * @return self |
||
148 | */ |
||
149 | public function guessHost(Request $request): void |
||
150 | { |
||
151 | $this->setScheme($request->getScheme()); |
||
152 | $this->setHost($request->getHost()); |
||
153 | if (!in_array($request->getPort(), [self::HTTP_PORT, self::HTTPS_PORT])) { |
||
154 | $this->setHost($this->host() . ':' . $request->getPort()); |
||
155 | } |
||
156 | } |
||
157 | |||
158 | /** |
||
159 | * Generates URI associated to provided route name. |
||
160 | * |
||
161 | * @param string $name The URI route name we want to generate |
||
162 | * @param array $params Parameters to replace in pattern |
||
163 | * @return string |
||
164 | * @throws \InvalidArgumentException if provided route name is unknown |
||
165 | */ |
||
166 | public function uri(string $name, array $params = []): string |
||
167 | { |
||
168 | if (!isset($this->routesNames[$name])) { |
||
169 | throw new \InvalidArgumentException( |
||
170 | "Cannot generate URI for '$name' cause it does not exist." |
||
171 | ); |
||
172 | } |
||
173 | |||
174 | $uri = $this->routesNames[$name]; |
||
175 | foreach ($params as $key => $value) { |
||
176 | if (1 !== preg_match("~\{($key:?[^}]*)\}~", $uri, $matches)) { |
||
177 | continue; |
||
178 | } |
||
179 | |||
180 | $value = (string) $value; |
||
181 | $pieces = explode(':', $matches[1]); |
||
182 | if (1 < count($pieces) && 1 !== preg_match("~{$pieces[1]}~", $value)) { |
||
183 | throw new \InvalidArgumentException( |
||
184 | "Parameter '{$key}' must match regex '{$pieces[1]}' for route '{$name}'." |
||
185 | ); |
||
186 | } |
||
187 | |||
188 | $uri = str_replace($matches[0], $value, $uri); |
||
189 | } |
||
190 | |||
191 | return $uri; |
||
192 | } |
||
193 | |||
194 | /** |
||
195 | * Matches the given HTTP method and URI to the route collection and returns |
||
196 | * the callback with the array of arguments to use. |
||
197 | * |
||
198 | * @param string $method |
||
199 | * @param string $uri |
||
200 | * @return array |
||
201 | */ |
||
202 | public function match(string $method, string $uri): array |
||
203 | { |
||
204 | $arguments = []; |
||
205 | $callback = null; |
||
206 | $result = $this->dispatch($method, $uri); |
||
207 | |||
208 | if (Dispatcher::FOUND === $result[0]) { |
||
209 | [1 => $callback, 2 => $arguments] = $result; |
||
210 | } else { |
||
211 | $callback = function () use ($result): Response { |
||
212 | return new Response(null, Dispatcher::NOT_FOUND === $result[0] |
||
213 | ? Response::HTTP_NOT_FOUND |
||
214 | : Response::HTTP_METHOD_NOT_ALLOWED |
||
215 | ); |
||
216 | }; |
||
217 | } |
||
218 | |||
219 | return [$callback, $arguments]; |
||
220 | } |
||
221 | |||
222 | /** |
||
223 | * {@inheritdoc} |
||
224 | * Overrides GroupCountBased::dispatch() to ensure that dispatcher always deals with up-to-date |
||
225 | * route collection. |
||
226 | */ |
||
227 | public function dispatch($method, $uri): array |
||
228 | { |
||
229 | [$this->staticRouteMap, $this->variableRouteData] = $this->routeCollector()->getData(); |
||
230 | |||
231 | return parent::dispatch(strtolower($method), $uri); |
||
232 | } |
||
233 | |||
234 | /** |
||
235 | * Will always return the right RouteCollector and knows when to recompute it. |
||
236 | * |
||
237 | * @return RouteCollector |
||
238 | */ |
||
239 | private function routeCollector(): RouteCollector |
||
240 | { |
||
241 | if (!$this->computed) { |
||
242 | $this->routeCollector = new RouteCollector(new Parser(), new DataGenerator()); |
||
243 | foreach ($this->rawRoutes as $rawRoute) { |
||
244 | [$method, $route, $handler] = $rawRoute; |
||
0 ignored issues
–
show
|
|||
245 | $this->routeCollector->addRoute($method, $route, $handler); |
||
246 | } |
||
247 | |||
248 | $this->computed = true; |
||
249 | } |
||
250 | |||
251 | return $this->routeCollector; |
||
252 | } |
||
253 | } |
||
254 |
This check marks access to variables or properties that have not been declared yet. While PHP has no explicit notion of declaring a variable, accessing it before a value is assigned to it is most likely a bug.