This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php declare(strict_types=1); |
||
2 | |||
3 | namespace Neomerx\JsonApi\Parser; |
||
4 | |||
5 | /** |
||
6 | * Copyright 2015-2020 [email protected] |
||
7 | * |
||
8 | * Licensed under the Apache License, Version 2.0 (the "License"); |
||
9 | * you may not use this file except in compliance with the License. |
||
10 | * You may obtain a copy of the License at |
||
11 | * |
||
12 | * http://www.apache.org/licenses/LICENSE-2.0 |
||
13 | * |
||
14 | * Unless required by applicable law or agreed to in writing, software |
||
15 | * distributed under the License is distributed on an "AS IS" BASIS, |
||
16 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||
17 | * See the License for the specific language governing permissions and |
||
18 | * limitations under the License. |
||
19 | */ |
||
20 | |||
21 | use IteratorAggregate; |
||
22 | use Neomerx\JsonApi\Contracts\Factories\FactoryInterface; |
||
23 | use Neomerx\JsonApi\Contracts\Parser\DocumentDataInterface; |
||
24 | use Neomerx\JsonApi\Contracts\Parser\EditableContextInterface; |
||
25 | use Neomerx\JsonApi\Contracts\Parser\IdentifierInterface; |
||
26 | use Neomerx\JsonApi\Contracts\Parser\ParserInterface; |
||
27 | use Neomerx\JsonApi\Contracts\Parser\RelationshipInterface; |
||
28 | use Neomerx\JsonApi\Contracts\Parser\ResourceInterface; |
||
29 | use Neomerx\JsonApi\Contracts\Schema\DocumentInterface; |
||
30 | use Neomerx\JsonApi\Contracts\Schema\IdentifierInterface as SchemaIdentifierInterface; |
||
31 | use Neomerx\JsonApi\Contracts\Schema\PositionInterface; |
||
32 | use Neomerx\JsonApi\Contracts\Schema\SchemaContainerInterface; |
||
33 | use Neomerx\JsonApi\Exceptions\InvalidArgumentException; |
||
34 | use Traversable; |
||
35 | use function Neomerx\JsonApi\I18n\format as _; |
||
36 | |||
37 | /** |
||
38 | * @package Neomerx\JsonApi |
||
39 | * |
||
40 | * @SuppressWarnings(PHPMD.CouplingBetweenObjects) |
||
41 | */ |
||
42 | class Parser implements ParserInterface |
||
43 | { |
||
44 | /** @var string */ |
||
45 | public const MSG_NO_SCHEMA_FOUND = 'No Schema found for top-level resource `%s`.'; |
||
46 | |||
47 | /** @var string */ |
||
48 | public const MSG_NO_DATA_IN_RELATIONSHIP = |
||
49 | 'For resource of type `%s` with ID `%s` relationship `%s` cannot be parsed because it has no data. Skipping.'; |
||
50 | |||
51 | /** @var string */ |
||
52 | public const MSG_CAN_NOT_PARSE_RELATIONSHIP = |
||
53 | 'For resource of type `%s` with ID `%s` relationship `%s` cannot be parsed because it either ' . |
||
54 | 'has `null` or identifier as data. Skipping.'; |
||
55 | |||
56 | /** @var string */ |
||
57 | public const MSG_PATHS_HAVE_NOT_BEEN_NORMALIZED_YET = |
||
58 | 'Paths have not been normalized yet. Have you called `parse` method already?'; |
||
59 | |||
60 | /** |
||
61 | * @var SchemaContainerInterface |
||
62 | */ |
||
63 | private $schemaContainer; |
||
64 | |||
65 | /** |
||
66 | * @var FactoryInterface |
||
67 | */ |
||
68 | private $factory; |
||
69 | |||
70 | /** |
||
71 | * @var array |
||
72 | */ |
||
73 | private $paths; |
||
74 | |||
75 | /** |
||
76 | * @var array |
||
77 | */ |
||
78 | private $resourcesTracker; |
||
79 | |||
80 | /** |
||
81 | * @var EditableContextInterface |
||
82 | */ |
||
83 | private $context; |
||
84 | |||
85 | /** |
||
86 | * @param FactoryInterface $factory |
||
87 | * @param SchemaContainerInterface $container |
||
88 | * @param EditableContextInterface $context |
||
89 | */ |
||
90 | public function __construct( |
||
91 | FactoryInterface $factory, |
||
92 | SchemaContainerInterface $container, |
||
93 | EditableContextInterface $context |
||
94 | ) { |
||
95 | $this->resourcesTracker = []; |
||
96 | $this->factory = $factory; |
||
97 | $this->schemaContainer = $container; |
||
98 | $this->context = $context; |
||
99 | } |
||
100 | |||
101 | /** |
||
102 | * @inheritdoc |
||
103 | * |
||
104 | * @SuppressWarnings(PHPMD.ElseExpression) |
||
105 | */ |
||
106 | public function parse($data, array $paths = []): iterable |
||
107 | { |
||
108 | \assert(\is_array($data) === true || \is_object($data) === true || $data === null); |
||
109 | |||
110 | $this->paths = $this->normalizePaths($paths); |
||
0 ignored issues
–
show
|
|||
111 | |||
112 | $rootPosition = $this->factory->createPosition( |
||
113 | ParserInterface::ROOT_LEVEL, |
||
114 | ParserInterface::ROOT_PATH, |
||
115 | null, |
||
116 | null |
||
117 | ); |
||
118 | |||
119 | if ($this->schemaContainer->hasSchema($data) === true) { |
||
120 | yield $this->createDocumentDataIsResource($rootPosition); |
||
121 | yield from $this->parseAsResource($rootPosition, $data); |
||
122 | } elseif ($data instanceof SchemaIdentifierInterface) { |
||
123 | yield $this->createDocumentDataIsIdentifier($rootPosition); |
||
124 | yield $this->parseAsIdentifier($rootPosition, $data); |
||
125 | } elseif (\is_array($data) === true) { |
||
126 | yield $this->createDocumentDataIsCollection($rootPosition); |
||
127 | yield from $this->parseAsResourcesOrIdentifiers($rootPosition, $data); |
||
0 ignored issues
–
show
$data is of type array , but the function expects a object<Neomerx\JsonApi\Parser\iterable> .
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
![]() |
|||
128 | } elseif ($data instanceof Traversable) { |
||
129 | $data = $data instanceof IteratorAggregate ? $data->getIterator() : $data; |
||
130 | yield $this->createDocumentDataIsCollection($rootPosition); |
||
131 | yield from $this->parseAsResourcesOrIdentifiers($rootPosition, $data); |
||
0 ignored issues
–
show
$data is of type object<Traversable> , but the function expects a object<Neomerx\JsonApi\Parser\iterable> .
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
![]() |
|||
132 | } elseif ($data === null) { |
||
133 | yield $this->createDocumentDataIsNull($rootPosition); |
||
134 | } else { |
||
135 | throw new InvalidArgumentException(_(static::MSG_NO_SCHEMA_FOUND, \get_class($data))); |
||
136 | } |
||
137 | } |
||
138 | |||
139 | /** |
||
140 | * @param PositionInterface $position |
||
141 | * @param iterable $dataOrIds |
||
142 | * |
||
143 | * @see ResourceInterface |
||
144 | * @see IdentifierInterface |
||
145 | * |
||
146 | * @return iterable |
||
147 | */ |
||
148 | private function parseAsResourcesOrIdentifiers( |
||
149 | PositionInterface $position, |
||
150 | iterable $dataOrIds |
||
151 | ): iterable { |
||
152 | foreach ($dataOrIds as $dataOrId) { |
||
153 | if ($this->schemaContainer->hasSchema($dataOrId) === true) { |
||
154 | yield from $this->parseAsResource($position, $dataOrId); |
||
155 | |||
156 | continue; |
||
157 | } |
||
158 | |||
159 | \assert($dataOrId instanceof SchemaIdentifierInterface); |
||
160 | yield $this->parseAsIdentifier($position, $dataOrId); |
||
161 | } |
||
162 | } |
||
163 | |||
164 | /** |
||
165 | * @return EditableContextInterface |
||
166 | */ |
||
167 | protected function getContext(): EditableContextInterface |
||
168 | { |
||
169 | return $this->context; |
||
170 | } |
||
171 | |||
172 | /** |
||
173 | * @return array |
||
174 | */ |
||
175 | protected function getNormalizedPaths(): array |
||
176 | { |
||
177 | \assert($this->paths !== null, _(static::MSG_PATHS_HAVE_NOT_BEEN_NORMALIZED_YET)); |
||
178 | |||
179 | return $this->paths; |
||
180 | } |
||
181 | |||
182 | /** |
||
183 | * @param string $path |
||
184 | * |
||
185 | * @return bool |
||
186 | */ |
||
187 | protected function isPathRequested(string $path): bool |
||
188 | { |
||
189 | return isset($this->paths[$path]); |
||
190 | } |
||
191 | |||
192 | /** |
||
193 | * @param PositionInterface $position |
||
194 | * @param mixed $data |
||
195 | * |
||
196 | * @see ResourceInterface |
||
197 | * |
||
198 | * @return iterable |
||
199 | * |
||
200 | */ |
||
201 | private function parseAsResource( |
||
202 | PositionInterface $position, |
||
203 | $data |
||
204 | ): iterable { |
||
205 | \assert($this->schemaContainer->hasSchema($data) === true); |
||
206 | |||
207 | $resource = $this->factory->createParsedResource( |
||
208 | $this->getContext(), |
||
209 | $position, |
||
210 | $this->schemaContainer, |
||
211 | $data |
||
212 | ); |
||
213 | |||
214 | yield from $this->parseResource($resource); |
||
215 | } |
||
216 | |||
217 | /** |
||
218 | * @param ResourceInterface $resource |
||
219 | * |
||
220 | * @return iterable |
||
221 | * |
||
222 | * @SuppressWarnings(PHPMD.CyclomaticComplexity) |
||
223 | */ |
||
224 | private function parseResource(ResourceInterface $resource): iterable |
||
225 | { |
||
226 | $seenBefore = isset($this->resourcesTracker[$resource->getId()][$resource->getType()]); |
||
227 | |||
228 | // top level resources should be yielded in any case as it could be an array of the resources |
||
229 | // for deeper levels it's not needed as they go to `included` section and it must have no more |
||
230 | // than one instance of the same resource. |
||
231 | |||
232 | if ($seenBefore === false || $resource->getPosition()->getLevel() <= ParserInterface::ROOT_LEVEL) { |
||
233 | yield $resource; |
||
234 | } |
||
235 | |||
236 | // parse relationships only for resources not seen before (prevents infinite loop for circular references) |
||
237 | if ($seenBefore === false) { |
||
238 | // remember by id and type |
||
239 | $this->resourcesTracker[$resource->getId()][$resource->getType()] = true; |
||
240 | |||
241 | foreach ($resource->getRelationships() as $name => $relationship) { |
||
242 | \assert(\is_string($name)); |
||
243 | \assert($relationship instanceof RelationshipInterface); |
||
244 | |||
245 | $isShouldParse = $this->isPathRequested($relationship->getPosition()->getPath()); |
||
246 | |||
247 | if ($isShouldParse === true && $relationship->hasData() === true) { |
||
248 | $relData = $relationship->getData(); |
||
249 | if ($relData->isResource() === true) { |
||
250 | yield from $this->parseResource($relData->getResource()); |
||
251 | |||
252 | continue; |
||
253 | } elseif ($relData->isCollection() === true) { |
||
254 | foreach ($relData->getResources() as $relResource) { |
||
255 | \assert($relResource instanceof ResourceInterface || |
||
256 | $relResource instanceof IdentifierInterface); |
||
257 | if ($relResource instanceof ResourceInterface) { |
||
258 | yield from $this->parseResource($relResource); |
||
259 | } |
||
260 | } |
||
261 | |||
262 | continue; |
||
263 | } |
||
264 | |||
265 | \assert($relData->isNull() || $relData->isIdentifier()); |
||
266 | } |
||
267 | } |
||
268 | } |
||
269 | } |
||
270 | |||
271 | /** |
||
272 | * @param PositionInterface $position |
||
273 | * @param SchemaIdentifierInterface $identifier |
||
274 | * |
||
275 | * @return IdentifierInterface |
||
276 | */ |
||
277 | private function parseAsIdentifier( |
||
278 | PositionInterface $position, |
||
279 | SchemaIdentifierInterface $identifier |
||
280 | ): IdentifierInterface { |
||
281 | return new class ($position, $identifier) implements IdentifierInterface |
||
282 | { |
||
283 | /** |
||
284 | * @var PositionInterface |
||
285 | */ |
||
286 | private $position; |
||
287 | |||
288 | /** |
||
289 | * @var SchemaIdentifierInterface |
||
290 | */ |
||
291 | private $identifier; |
||
292 | |||
293 | /** |
||
294 | * @param PositionInterface $position |
||
295 | * @param SchemaIdentifierInterface $identifier |
||
296 | */ |
||
297 | public function __construct(PositionInterface $position, SchemaIdentifierInterface $identifier) |
||
298 | { |
||
299 | $this->position = $position; |
||
300 | $this->identifier = $identifier; |
||
301 | } |
||
302 | |||
303 | /** |
||
304 | * @inheritdoc |
||
305 | */ |
||
306 | public function getPosition(): PositionInterface |
||
307 | { |
||
308 | return $this->position; |
||
309 | } |
||
310 | |||
311 | /** |
||
312 | * @inheritdoc |
||
313 | */ |
||
314 | public function getId(): ?string |
||
315 | { |
||
316 | return $this->identifier->getId(); |
||
317 | } |
||
318 | |||
319 | /** |
||
320 | * @inheritdoc |
||
321 | */ |
||
322 | public function getType(): string |
||
323 | { |
||
324 | return $this->identifier->getType(); |
||
325 | } |
||
326 | |||
327 | /** |
||
328 | * @inheritdoc |
||
329 | */ |
||
330 | public function hasIdentifierMeta(): bool |
||
331 | { |
||
332 | return $this->identifier->hasIdentifierMeta(); |
||
333 | } |
||
334 | |||
335 | /** |
||
336 | * @inheritdoc |
||
337 | */ |
||
338 | public function getIdentifierMeta() |
||
339 | { |
||
340 | return $this->identifier->getIdentifierMeta(); |
||
341 | } |
||
342 | }; |
||
343 | } |
||
344 | |||
345 | /** |
||
346 | * @param PositionInterface $position |
||
347 | * |
||
348 | * @return DocumentDataInterface |
||
349 | */ |
||
350 | private function createDocumentDataIsCollection(PositionInterface $position): DocumentDataInterface |
||
351 | { |
||
352 | return $this->createParsedDocumentData($position, true, false); |
||
353 | } |
||
354 | |||
355 | /** |
||
356 | * @param PositionInterface $position |
||
357 | * |
||
358 | * @return DocumentDataInterface |
||
359 | */ |
||
360 | private function createDocumentDataIsNull(PositionInterface $position): DocumentDataInterface |
||
361 | { |
||
362 | return $this->createParsedDocumentData($position, false, true); |
||
363 | } |
||
364 | |||
365 | /** |
||
366 | * @param PositionInterface $position |
||
367 | * |
||
368 | * @return DocumentDataInterface |
||
369 | */ |
||
370 | private function createDocumentDataIsResource(PositionInterface $position): DocumentDataInterface |
||
371 | { |
||
372 | return $this->createParsedDocumentData($position, false, false); |
||
373 | } |
||
374 | |||
375 | /** |
||
376 | * @param PositionInterface $position |
||
377 | * |
||
378 | * @return DocumentDataInterface |
||
379 | */ |
||
380 | private function createDocumentDataIsIdentifier(PositionInterface $position): DocumentDataInterface |
||
381 | { |
||
382 | return $this->createParsedDocumentData($position, false, false); |
||
383 | } |
||
384 | |||
385 | /** |
||
386 | * @param PositionInterface $position |
||
387 | * @param bool $isCollection |
||
388 | * @param bool $isNull |
||
389 | * |
||
390 | * @return DocumentDataInterface |
||
391 | */ |
||
392 | 75 | private function createParsedDocumentData( |
|
393 | PositionInterface $position, |
||
394 | bool $isCollection, |
||
395 | bool $isNull |
||
396 | ): DocumentDataInterface { |
||
397 | return new class ( |
||
398 | $position, |
||
399 | $isCollection, |
||
400 | $isNull |
||
401 | ) implements DocumentDataInterface |
||
402 | { |
||
403 | /** |
||
404 | * @var PositionInterface |
||
405 | */ |
||
406 | private $position; |
||
407 | /** |
||
408 | * @var bool |
||
409 | */ |
||
410 | private $isCollection; |
||
411 | |||
412 | /** |
||
413 | * @var bool |
||
414 | */ |
||
415 | private $isNull; |
||
416 | |||
417 | /** |
||
418 | * @param PositionInterface $position |
||
419 | * @param bool $isCollection |
||
420 | * @param bool $isNull |
||
421 | */ |
||
422 | public function __construct( |
||
423 | PositionInterface $position, |
||
424 | bool $isCollection, |
||
425 | bool $isNull |
||
426 | ) { |
||
427 | 75 | $this->position = $position; |
|
428 | 75 | $this->isCollection = $isCollection; |
|
429 | 75 | $this->isNull = $isNull; |
|
430 | 75 | } |
|
431 | |||
432 | /** |
||
433 | * @inheritdoc |
||
434 | */ |
||
435 | public function getPosition(): PositionInterface |
||
436 | { |
||
437 | 75 | return $this->position; |
|
438 | } |
||
439 | |||
440 | /** |
||
441 | * @inheritdoc |
||
442 | */ |
||
443 | 75 | public function isCollection(): bool |
|
444 | { |
||
445 | 75 | return $this->isCollection; |
|
446 | } |
||
447 | |||
448 | /** |
||
449 | * @inheritdoc |
||
450 | */ |
||
451 | 55 | public function isNull(): bool |
|
452 | { |
||
453 | 55 | return $this->isNull; |
|
454 | } |
||
455 | }; |
||
456 | } |
||
457 | |||
458 | /** |
||
459 | * @param iterable $paths |
||
460 | * |
||
461 | * @return array |
||
462 | */ |
||
463 | 76 | private function normalizePaths(iterable $paths): array |
|
464 | { |
||
465 | 76 | $separator = DocumentInterface::PATH_SEPARATOR; |
|
466 | |||
467 | // convert paths like a.b.c to paths that actually should be used a, a.b, a.b.c |
||
468 | 76 | $normalizedPaths = []; |
|
469 | 76 | foreach ($paths as $path) { |
|
470 | 27 | $curPath = ''; |
|
471 | 27 | foreach (\explode($separator, $path) as $pathPart) { |
|
472 | 27 | $curPath = empty($curPath) === true ? $pathPart : $curPath . $separator . $pathPart; |
|
473 | 27 | $normalizedPaths[$curPath] = true; |
|
474 | } |
||
475 | } |
||
476 | |||
477 | 76 | return $normalizedPaths; |
|
478 | } |
||
479 | } |
||
480 |
It seems like the type of the argument is not accepted by the function/method which you are calling.
In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.
We suggest to add an explicit type cast like in the following example: