ker0x /
messenger
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | declare(strict_types=1); |
||
| 4 | |||
| 5 | namespace Kerox\Messenger\Helper; |
||
| 6 | |||
| 7 | use Kerox\Messenger\Exception\InvalidArrayException; |
||
| 8 | use Kerox\Messenger\Exception\InvalidClassException; |
||
| 9 | use Kerox\Messenger\Exception\InvalidColorException; |
||
| 10 | use Kerox\Messenger\Exception\InvalidCountryException; |
||
| 11 | use Kerox\Messenger\Exception\InvalidCurrencyException; |
||
| 12 | use Kerox\Messenger\Exception\InvalidDateTimeException; |
||
| 13 | use Kerox\Messenger\Exception\InvalidExtensionException; |
||
| 14 | use Kerox\Messenger\Exception\InvalidKeyException; |
||
| 15 | use Kerox\Messenger\Exception\InvalidLocaleException; |
||
| 16 | use Kerox\Messenger\Exception\InvalidStringException; |
||
| 17 | use Kerox\Messenger\Exception\InvalidTypeException; |
||
| 18 | use Kerox\Messenger\Exception\InvalidUrlException; |
||
| 19 | use Kerox\Messenger\Exception\MessengerException; |
||
| 20 | use Kerox\Messenger\Model\Common\Button\AbstractButton; |
||
| 21 | use Kerox\Messenger\Model\Message; |
||
| 22 | use Kerox\Messenger\Model\Message\AbstractAttachment; |
||
| 23 | use Kerox\Messenger\Model\Message\Attachment\Template\GenericTemplate; |
||
| 24 | use Kerox\Messenger\SendInterface; |
||
| 25 | |||
| 26 | trait ValidatorTrait |
||
| 27 | { |
||
| 28 | /** |
||
| 29 | * @throws \Kerox\Messenger\Exception\InvalidColorException |
||
| 30 | */ |
||
| 31 | 2 | protected function isValidColor(string $value): void |
|
| 32 | { |
||
| 33 | 2 | if (!preg_match('/^#[A-Fa-f0-9]{6}$/', $value)) { |
|
| 34 | 1 | throw new InvalidColorException('The color must be expressed in #rrggbb format.'); |
|
| 35 | } |
||
| 36 | 1 | } |
|
| 37 | |||
| 38 | /** |
||
| 39 | * @throws \Kerox\Messenger\Exception\InvalidStringException |
||
| 40 | */ |
||
| 41 | 39 | protected function isValidString(string $value, int $length = 20): void |
|
| 42 | { |
||
| 43 | 39 | if (mb_strlen($value) > $length) { |
|
| 44 | 1 | throw new InvalidStringException(sprintf('String should not exceed %s characters.', $length)); |
|
| 45 | } |
||
| 46 | 38 | } |
|
| 47 | |||
| 48 | /** |
||
| 49 | * @throws \Kerox\Messenger\Exception\InvalidUrlException |
||
| 50 | */ |
||
| 51 | 38 | protected function isValidUrl(string $value): void |
|
| 52 | { |
||
| 53 | 38 | if (!preg_match( |
|
| 54 | 38 | '/^https?:\/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-z]{2,6}\b([-a-zA-Z0-9@:%_\+.~#?&\/=]*)$/', |
|
| 55 | $value |
||
| 56 | )) { |
||
| 57 | 1 | throw new InvalidUrlException(sprintf('"%s" is not a valid url.', $value)); |
|
| 58 | } |
||
| 59 | 37 | } |
|
| 60 | |||
| 61 | /** |
||
| 62 | * @throws \Kerox\Messenger\Exception\InvalidLocaleException |
||
| 63 | */ |
||
| 64 | 8 | protected function isValidLocale(string $value): void |
|
| 65 | { |
||
| 66 | 8 | if (!preg_match('/^[a-z]{2}_[A-Z]{2}$/', $value)) { |
|
| 67 | 1 | throw new InvalidLocaleException(sprintf('"%s" is not valid. Locale must be in ISO-639-1 and ISO-3166-1 format like fr_FR.', $value)); |
|
| 68 | } |
||
| 69 | 7 | } |
|
| 70 | |||
| 71 | /** |
||
| 72 | * @throws \Kerox\Messenger\Exception\InvalidCountryException |
||
| 73 | */ |
||
| 74 | 2 | protected function isValidCountry(string $value): void |
|
| 75 | { |
||
| 76 | 2 | if (!preg_match('/^[A-Z]{2}$/', $value)) { |
|
| 77 | 1 | throw new InvalidCountryException(sprintf('"%s" is not valid. Country must be in ISO 3166 Alpha-2 format like FR.', $value)); |
|
| 78 | } |
||
| 79 | 1 | } |
|
| 80 | |||
| 81 | /** |
||
| 82 | * @throws \Kerox\Messenger\Exception\InvalidDateTimeException |
||
| 83 | */ |
||
| 84 | 11 | protected function isValidDateTime(string $value): void |
|
| 85 | { |
||
| 86 | 11 | if (!preg_match('/^(\d{4})-(0[1-9]|1[0-2])-([12]\d|0[1-9]|3[01])T(0\d|1\d|2[0-3]):([0-5]\d)$/', $value)) { |
|
| 87 | 1 | throw new InvalidDateTimeException(sprintf('"%s" is not valid. DateTime must be in ISO-8601 AAAA-MM-JJThh:mm format.', $value)); |
|
| 88 | } |
||
| 89 | 10 | } |
|
| 90 | |||
| 91 | /** |
||
| 92 | * @param int $minSize |
||
| 93 | * |
||
| 94 | * @throws \Kerox\Messenger\Exception\InvalidArrayException |
||
| 95 | */ |
||
| 96 | 32 | protected function isValidArray(array $array, int $maxSize, ?int $minSize = null): void |
|
| 97 | { |
||
| 98 | 32 | $countArray = \count($array); |
|
| 99 | 32 | if ($minSize !== null && $countArray < $minSize) { |
|
| 100 | 2 | throw new InvalidArrayException(sprintf('The minimum number of items for this array is %d.', $minSize)); |
|
| 101 | } |
||
| 102 | 30 | if ($countArray > $maxSize) { |
|
| 103 | 4 | throw new InvalidArrayException(sprintf('The maximum number of items for this array is %d.', $maxSize)); |
|
| 104 | } |
||
| 105 | 29 | } |
|
| 106 | |||
| 107 | /** |
||
| 108 | * @throws \Kerox\Messenger\Exception\InvalidCurrencyException |
||
| 109 | */ |
||
| 110 | 8 | protected function isValidCurrency(string $value): void |
|
| 111 | { |
||
| 112 | 8 | $allowedCurrency = $this->getAllowedCurrency(); |
|
| 113 | |||
| 114 | 8 | $regex = '/^' . implode('|', $allowedCurrency) . '$/'; |
|
| 115 | 8 | if (!preg_match($regex, $value)) { |
|
| 116 | 1 | throw new InvalidCurrencyException(sprintf('"%s" is not a valid currency. Currency must be in ISO-4217-3 format.', $value)); |
|
| 117 | } |
||
| 118 | 7 | } |
|
| 119 | |||
| 120 | /** |
||
| 121 | * @throws \Kerox\Messenger\Exception\InvalidExtensionException |
||
| 122 | */ |
||
| 123 | 3 | protected function isValidExtension(string $filename, array $allowedExtension): void |
|
| 124 | { |
||
| 125 | 3 | $ext = pathinfo($filename, PATHINFO_EXTENSION); |
|
| 126 | 3 | if (empty($ext) || !\in_array($ext, $allowedExtension, true)) { |
|
| 127 | 1 | throw new InvalidExtensionException(sprintf('"%s" does not have a valid extension. Allowed extensions are "%s".', $filename, implode(', ', $allowedExtension))); |
|
| 128 | } |
||
| 129 | 2 | } |
|
| 130 | |||
| 131 | /** |
||
| 132 | * @param \Kerox\Messenger\Model\Common\Button\AbstractButton[] $buttons |
||
| 133 | * |
||
| 134 | * @throws \Kerox\Messenger\Exception\InvalidClassException |
||
| 135 | */ |
||
| 136 | 8 | protected function isValidButtons(array $buttons, array $allowedButtonsType): void |
|
| 137 | { |
||
| 138 | /** @var \Kerox\Messenger\Model\Common\Button\AbstractButton $button */ |
||
| 139 | 8 | foreach ($buttons as $button) { |
|
| 140 | 8 | if (!$button instanceof AbstractButton) { |
|
| 141 | 1 | throw new InvalidClassException(sprintf('Array can only contain instance of "%s".', AbstractButton::class)); |
|
| 142 | } |
||
| 143 | |||
| 144 | 7 | if (!\in_array($button->getType(), $allowedButtonsType, true)) { |
|
| 145 | 3 | throw new InvalidClassException(sprintf('Buttons can only be an instance of "%s".', implode(', ', $allowedButtonsType))); |
|
| 146 | } |
||
| 147 | } |
||
| 148 | 5 | } |
|
| 149 | |||
| 150 | /** |
||
| 151 | * @param mixed $message |
||
| 152 | * |
||
| 153 | * @throws \Exception |
||
| 154 | */ |
||
| 155 | 7 | protected function isValidMessage($message): Message |
|
| 156 | { |
||
| 157 | 7 | if ($message instanceof Message) { |
|
| 158 | return $message; |
||
| 159 | } |
||
| 160 | |||
| 161 | 7 | if (\is_string($message) || $message instanceof AbstractAttachment) { |
|
| 162 | 6 | return Message::create($message); |
|
| 163 | } |
||
| 164 | |||
| 165 | 1 | throw new MessengerException(sprintf('"message" must be a string or an instance of "%s" or "%s".', Message::class, AbstractAttachment::class)); |
|
| 166 | } |
||
| 167 | |||
| 168 | /** |
||
| 169 | * @throws \Kerox\Messenger\Exception\InvalidKeyException |
||
| 170 | */ |
||
| 171 | 2 | protected function isValidSenderAction(string $action): void |
|
| 172 | { |
||
| 173 | 2 | $allowedSenderAction = $this->getAllowedSenderAction(); |
|
| 174 | 2 | if (!\in_array($action, $allowedSenderAction, true)) { |
|
| 175 | 1 | throw new InvalidKeyException(sprintf('"action" must be either "%s".', implode(', ', $allowedSenderAction))); |
|
| 176 | } |
||
| 177 | 1 | } |
|
| 178 | |||
| 179 | /** |
||
| 180 | * @throws \Kerox\Messenger\Exception\InvalidTypeException |
||
| 181 | */ |
||
| 182 | 5 | protected function isValidNotificationType(string $notificationType): void |
|
| 183 | { |
||
| 184 | 5 | $allowedNotificationType = $this->getAllowedNotificationType(); |
|
| 185 | 5 | if (!\in_array($notificationType, $allowedNotificationType, true)) { |
|
| 186 | 1 | throw new InvalidTypeException(sprintf('"notificationType" must be either "%s".', implode(', ', $allowedNotificationType))); |
|
| 187 | } |
||
| 188 | 4 | } |
|
| 189 | |||
| 190 | /** |
||
| 191 | * @param mixed $message |
||
| 192 | * |
||
| 193 | * @throws \Kerox\Messenger\Exception\InvalidClassException |
||
| 194 | * @throws \Kerox\Messenger\Exception\InvalidKeyException |
||
| 195 | */ |
||
| 196 | 3 | protected function isValidTag(string $tag, $message = null): void |
|
| 197 | { |
||
| 198 | 3 | $allowedTag = $this->getAllowedTag(); |
|
| 199 | 3 | $deprecatedTag = $this->getDeprecatedTags(); |
|
| 200 | 3 | if (!\in_array($tag, $allowedTag, true)) { |
|
| 201 | 1 | throw new InvalidKeyException(sprintf('"tag" must be either "%s".', implode(', ', $allowedTag))); |
|
| 202 | } |
||
| 203 | |||
| 204 | 2 | if (\in_array($tag, $deprecatedTag, true)) { |
|
| 205 | 1 | $message = sprintf('Tag "%s" is deprecated, use one of "%s" instead.', |
|
| 206 | $tag, |
||
| 207 | 1 | implode(',', [ |
|
| 208 | 1 | SendInterface::TAG_CONFIRMED_EVENT_UPDATE, |
|
| 209 | 1 | SendInterface::TAG_POST_PURCHASE_UPDATE, |
|
| 210 | 1 | SendInterface::TAG_ACCOUNT_UPDATE, |
|
| 211 | ]) |
||
| 212 | ); |
||
| 213 | 1 | @trigger_error($message, E_USER_DEPRECATED); |
|
|
0 ignored issues
–
show
|
|||
| 214 | } |
||
| 215 | |||
| 216 | 2 | if ($tag === SendInterface::TAG_ISSUE_RESOLUTION && $message !== null && !$message instanceof GenericTemplate) { |
|
| 217 | 1 | throw new InvalidClassException(sprintf('"message" must be an instance of "%s" if tag is set to "%s".', GenericTemplate::class, SendInterface::TAG_ISSUE_RESOLUTION)); |
|
| 218 | } |
||
| 219 | 1 | } |
|
| 220 | |||
| 221 | 2 | protected function getAllowedSenderAction(): array |
|
| 222 | { |
||
| 223 | return [ |
||
| 224 | 2 | SendInterface::SENDER_ACTION_TYPING_ON, |
|
| 225 | 2 | SendInterface::SENDER_ACTION_TYPING_OFF, |
|
| 226 | 2 | SendInterface::SENDER_ACTION_MARK_SEEN, |
|
| 227 | ]; |
||
| 228 | } |
||
| 229 | |||
| 230 | 5 | protected function getAllowedNotificationType(): array |
|
| 231 | { |
||
| 232 | return [ |
||
| 233 | 5 | SendInterface::NOTIFICATION_TYPE_REGULAR, |
|
| 234 | 5 | SendInterface::NOTIFICATION_TYPE_SILENT_PUSH, |
|
| 235 | 5 | SendInterface::NOTIFICATION_TYPE_NO_PUSH, |
|
| 236 | ]; |
||
| 237 | } |
||
| 238 | |||
| 239 | 3 | protected function getAllowedTag(): array |
|
| 240 | { |
||
| 241 | return [ |
||
| 242 | 3 | SendInterface::TAG_CONFIRMED_EVENT_UPDATE, |
|
| 243 | 3 | SendInterface::TAG_POST_PURCHASE_UPDATE, |
|
| 244 | 3 | SendInterface::TAG_ACCOUNT_UPDATE, |
|
| 245 | //Tags supported until March 4th, 2020. |
||
| 246 | 3 | SendInterface::TAG_BUSINESS_PRODUCTIVITY, |
|
| 247 | 3 | SendInterface::TAG_COMMUNITY_ALERT, |
|
| 248 | 3 | SendInterface::TAG_CONFIRMED_EVENT_REMINDER, |
|
| 249 | 3 | SendInterface::TAG_NON_PROMOTIONAL_SUBSCRIPTION, |
|
| 250 | 3 | SendInterface::TAG_PAIRING_UPDATE, |
|
| 251 | 3 | SendInterface::TAG_APPLICATION_UPDATE, |
|
| 252 | 3 | SendInterface::TAG_PAYMENT_UPDATE, |
|
| 253 | 3 | SendInterface::TAG_PERSONAL_FINANCE_UPDATE, |
|
| 254 | 3 | SendInterface::TAG_SHIPPING_UPDATE, |
|
| 255 | 3 | SendInterface::TAG_RESERVATION_UPDATE, |
|
| 256 | 3 | SendInterface::TAG_ISSUE_RESOLUTION, |
|
| 257 | 3 | SendInterface::TAG_APPOINTMENT_UPDATE, |
|
| 258 | 3 | SendInterface::TAG_GAME_EVENT, |
|
| 259 | 3 | SendInterface::TAG_TRANSPORTATION_UPDATE, |
|
| 260 | 3 | SendInterface::TAG_FEATURE_FUNCTIONALITY_UPDATE, |
|
| 261 | 3 | SendInterface::TAG_TICKET_UPDATE, |
|
| 262 | ]; |
||
| 263 | } |
||
| 264 | |||
| 265 | 3 | protected function getDeprecatedTags(): array |
|
| 266 | { |
||
| 267 | return [ |
||
| 268 | 3 | SendInterface::TAG_BUSINESS_PRODUCTIVITY, |
|
| 269 | 3 | SendInterface::TAG_COMMUNITY_ALERT, |
|
| 270 | 3 | SendInterface::TAG_CONFIRMED_EVENT_REMINDER, |
|
| 271 | 3 | SendInterface::TAG_NON_PROMOTIONAL_SUBSCRIPTION, |
|
| 272 | 3 | SendInterface::TAG_PAIRING_UPDATE, |
|
| 273 | 3 | SendInterface::TAG_APPLICATION_UPDATE, |
|
| 274 | 3 | SendInterface::TAG_PAYMENT_UPDATE, |
|
| 275 | 3 | SendInterface::TAG_PERSONAL_FINANCE_UPDATE, |
|
| 276 | 3 | SendInterface::TAG_SHIPPING_UPDATE, |
|
| 277 | 3 | SendInterface::TAG_RESERVATION_UPDATE, |
|
| 278 | 3 | SendInterface::TAG_ISSUE_RESOLUTION, |
|
| 279 | 3 | SendInterface::TAG_APPOINTMENT_UPDATE, |
|
| 280 | 3 | SendInterface::TAG_GAME_EVENT, |
|
| 281 | 3 | SendInterface::TAG_TRANSPORTATION_UPDATE, |
|
| 282 | 3 | SendInterface::TAG_FEATURE_FUNCTIONALITY_UPDATE, |
|
| 283 | 3 | SendInterface::TAG_TICKET_UPDATE, |
|
| 284 | ]; |
||
| 285 | } |
||
| 286 | |||
| 287 | 8 | protected function getAllowedCurrency(): array |
|
| 288 | { |
||
| 289 | return [ |
||
| 290 | 8 | 'SGD', |
|
| 291 | 'RON', |
||
| 292 | 'EUR', |
||
| 293 | 'TRY', |
||
| 294 | 'SEK', |
||
| 295 | 'ZAR', |
||
| 296 | 'HKD', |
||
| 297 | 'CHF', |
||
| 298 | 'NIO', |
||
| 299 | 'JPY', |
||
| 300 | 'ISK', |
||
| 301 | 'TWD', |
||
| 302 | 'NZD', |
||
| 303 | 'CZK', |
||
| 304 | 'AUD', |
||
| 305 | 'THB', |
||
| 306 | 'BOB', |
||
| 307 | 'BRL', |
||
| 308 | 'MXN', |
||
| 309 | 'USD', |
||
| 310 | 'ILS', |
||
| 311 | 'HNL', |
||
| 312 | 'MOP', |
||
| 313 | 'COP', |
||
| 314 | 'UYU', |
||
| 315 | 'CRC', |
||
| 316 | 'DKK', |
||
| 317 | 'QAR', |
||
| 318 | 'PYG', |
||
| 319 | 'CAD', |
||
| 320 | 'INR', |
||
| 321 | 'KRW', |
||
| 322 | 'GTQ', |
||
| 323 | 'AED', |
||
| 324 | 'VEF', |
||
| 325 | 'SAR', |
||
| 326 | 'NOK', |
||
| 327 | 'CNY', |
||
| 328 | 'ARS', |
||
| 329 | 'PLN', |
||
| 330 | 'GBP', |
||
| 331 | 'PEN', |
||
| 332 | 'PHP', |
||
| 333 | 'VND', |
||
| 334 | 'RUB', |
||
| 335 | 'HUF', |
||
| 336 | 'MYR', |
||
| 337 | 'CLP', |
||
| 338 | 'IDR', |
||
| 339 | ]; |
||
| 340 | } |
||
| 341 | } |
||
| 342 |
If you suppress an error, we recommend checking for the error condition explicitly: