vanilla /
garden
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Garden; |
||
| 4 | |||
| 5 | use Garden\Exception\NotFoundException; |
||
| 6 | |||
| 7 | class Application { |
||
| 8 | /// Properties /// |
||
| 9 | protected static $instances; |
||
| 10 | |||
| 11 | /** |
||
| 12 | * @var Request The current request. |
||
| 13 | */ |
||
| 14 | public $request; |
||
| 15 | |||
| 16 | /** |
||
| 17 | * |
||
| 18 | * @var Response The current response. |
||
| 19 | */ |
||
| 20 | public $response; |
||
| 21 | |||
| 22 | /** |
||
| 23 | * @var array An array of route objects. |
||
| 24 | */ |
||
| 25 | protected $routes; |
||
| 26 | |||
| 27 | /// Methods /// |
||
| 28 | |||
| 29 | 44 | public function __construct($name = 'default') { |
|
| 30 | 44 | $this->routes = array(); |
|
| 31 | |||
| 32 | 44 | self::$instances[$name] = $this; |
|
| 33 | 44 | } |
|
| 34 | |||
| 35 | public static function instance($name = 'default') { |
||
| 36 | if (!isset(self::$instances[$name])) { |
||
| 37 | self::$instances[$name] = new Application($name); |
||
| 38 | } |
||
| 39 | return self::$instances[$name]; |
||
| 40 | } |
||
| 41 | |||
| 42 | /** |
||
| 43 | * Get all of the matched routes for a request. |
||
| 44 | * |
||
| 45 | * @param Request $request The {@link Request} to match against. |
||
| 46 | * @return array An array of arrays corresponding to matching routes and their args. |
||
| 47 | */ |
||
| 48 | 44 | public function matchRoutes(Request $request) { |
|
| 49 | 44 | $result = array(); |
|
| 50 | |||
| 51 | 44 | foreach ($this->routes as $route) { |
|
| 52 | 44 | $matches = $route->matches($request, $this); |
|
| 53 | 44 | if ($matches) { |
|
| 54 | 43 | $result[] = array($route, $matches); |
|
| 55 | 43 | } |
|
| 56 | 44 | } |
|
| 57 | 44 | return $result; |
|
| 58 | } |
||
| 59 | |||
| 60 | /** |
||
| 61 | * Add a new route. |
||
| 62 | * |
||
| 63 | * @param string|Route $pathOrRoute The path to the route or the {@link Route} object itself. |
||
| 64 | * @param callable|string|null $callback Either a callback to map the route to or a string representing |
||
| 65 | * a format for {@link sprintf()}. |
||
| 66 | * @return Route Returns the route that was added. |
||
| 67 | * @throws \InvalidArgumentException Throws an exceptio if {@link $path} isn't a string or {@link Route}. |
||
| 68 | */ |
||
| 69 | 44 | public function route($pathOrRoute, $callback = null) { |
|
| 70 | 44 | if (is_object($pathOrRoute) && $pathOrRoute instanceof Route) { |
|
| 71 | $route = $pathOrRoute; |
||
| 72 | 44 | } elseif (is_string($pathOrRoute) && $callback !== null) { |
|
| 73 | 44 | $route = Route::create($pathOrRoute, $callback); |
|
| 74 | 44 | } else { |
|
| 75 | throw new \InvalidArgumentException("Argument #1 must be either a Garden\\Route or a string.", 500); |
||
| 76 | } |
||
| 77 | 44 | $this->routes[] = $route; |
|
| 78 | 44 | return $route; |
|
| 79 | } |
||
| 80 | |||
| 81 | /** |
||
| 82 | * Route to a GET request. |
||
| 83 | * |
||
| 84 | * @param string $pattern The url pattern to match. |
||
| 85 | * @param callable $callback The callback to execute on the route. |
||
| 86 | * @return CallbackRoute Returns the new route. |
||
| 87 | */ |
||
| 88 | 1 | public function get($pattern, callable $callback) { |
|
| 89 | 1 | return $this->route($pattern, $callback)->methods('GET'); |
|
|
0 ignored issues
–
show
Bug
Compatibility
introduced
by
Loading history...
|
|||
| 90 | } |
||
| 91 | |||
| 92 | /** |
||
| 93 | * Route to a POST request. |
||
| 94 | * |
||
| 95 | * @param string $pattern The url pattern to match. |
||
| 96 | * @param callable $callback The callback to execute on the route. |
||
| 97 | * @return CallbackRoute Returns the new route. |
||
| 98 | */ |
||
| 99 | public function post($pattern, callable $callback) { |
||
| 100 | return $this->route($pattern, $callback)->methods('POST'); |
||
|
0 ignored issues
–
show
|
|||
| 101 | } |
||
| 102 | |||
| 103 | /** |
||
| 104 | * Route to a PUT request. |
||
| 105 | * |
||
| 106 | * @param string $pattern The url pattern to match. |
||
| 107 | * @param callable $callback The callback to execute on the route. |
||
| 108 | * @return CallbackRoute Returns the new route. |
||
| 109 | */ |
||
| 110 | public function put($pattern, callable $callback) { |
||
| 111 | return $this->route($pattern, $callback)->methods('PUT'); |
||
|
0 ignored issues
–
show
|
|||
| 112 | } |
||
| 113 | |||
| 114 | /** |
||
| 115 | * Route to a PATCH request. |
||
| 116 | * |
||
| 117 | * @param string $pattern The url pattern to match. |
||
| 118 | * @param callable $callback The callback to execute on the route. |
||
| 119 | * @return CallbackRoute Returns the new route. |
||
| 120 | */ |
||
| 121 | public function patch($pattern, callable $callback) { |
||
| 122 | return $this->route($pattern, $callback)->methods('PATCH'); |
||
|
0 ignored issues
–
show
|
|||
| 123 | } |
||
| 124 | |||
| 125 | /** |
||
| 126 | * Route to a DELETE request. |
||
| 127 | * |
||
| 128 | * @param string $pattern The url pattern to match. |
||
| 129 | * @param callable $callback The callback to execute on the route. |
||
| 130 | * @return CallbackRoute Returns the new route. |
||
| 131 | */ |
||
| 132 | public function delete($pattern, callable $callback) { |
||
| 133 | return $this->route($pattern, $callback)->methods('DELETE'); |
||
|
0 ignored issues
–
show
|
|||
| 134 | } |
||
| 135 | |||
| 136 | /** |
||
| 137 | * Run the application against a {@link Request}. |
||
| 138 | * |
||
| 139 | * @param Request|null $request A {@link Request} to run the application against or null to run against a request |
||
| 140 | * on the current environment. |
||
| 141 | * @return mixed Returns a response appropriate to the request's ACCEPT header. |
||
| 142 | */ |
||
| 143 | 44 | public function run(Request $request = null) { |
|
| 144 | 44 | if ($request === null) { |
|
| 145 | $request = new Request(); |
||
| 146 | } |
||
| 147 | 44 | $this->request = $request; |
|
| 148 | 44 | $requestBak = Request::current($request); |
|
| 149 | |||
| 150 | // Grab all of the matched routes. |
||
| 151 | 44 | $routes = $this->matchRoutes($this->request); |
|
| 152 | |||
| 153 | // Try all of the matched routes in turn. |
||
| 154 | 44 | $dispatched = false; |
|
| 155 | 44 | $result = null; |
|
| 156 | try { |
||
| 157 | 44 | foreach ($routes as $route_args) { |
|
| 158 | 43 | list($route, $args) = $route_args; |
|
| 159 | |||
| 160 | try { |
||
| 161 | // Dispatch the first matched route. |
||
| 162 | 43 | ob_start(); |
|
| 163 | 43 | $response = $route->dispatch($request, $args); |
|
| 164 | 23 | $body = ob_get_clean(); |
|
| 165 | |||
| 166 | $result = [ |
||
| 167 | 23 | 'routing' => $args, |
|
| 168 | 23 | 'response' => $response, |
|
| 169 | 'body' => $body |
||
| 170 | 23 | ]; |
|
| 171 | |||
| 172 | // Once a route has been successfully dispatched we break and don't dispatch anymore. |
||
| 173 | 23 | $dispatched = true; |
|
| 174 | 23 | break; |
|
| 175 | 21 | } catch (Exception\Pass $pex) { |
|
| 176 | 2 | ob_end_clean(); |
|
| 177 | // If the route throws a pass then continue on to the next route. |
||
| 178 | 2 | continue; |
|
| 179 | 19 | } catch (\Exception $ex) { |
|
| 180 | 19 | ob_end_clean(); |
|
| 181 | 19 | throw $ex; |
|
| 182 | } |
||
| 183 | 25 | } |
|
| 184 | |||
| 185 | 25 | if (!$dispatched) { |
|
| 186 | 4 | throw new NotFoundException(); |
|
| 187 | } |
||
| 188 | 44 | } catch (\Exception $ex) { |
|
| 189 | 23 | $result = $ex; |
|
| 190 | } |
||
| 191 | |||
| 192 | 44 | $result = $this->finalize($result); |
|
| 193 | 23 | Request::current($requestBak); |
|
| 194 | |||
| 195 | 23 | return $result; |
|
| 196 | } |
||
| 197 | |||
| 198 | /** |
||
| 199 | * Finalize the result from a dispatch. |
||
| 200 | * |
||
| 201 | * @param mixed $result The result of the dispatch. |
||
| 202 | * @return mixed Returns relevant debug data or processes the response. |
||
| 203 | * @throws \Exception Throws an exception when finalizing internal content types and the result is an exception. |
||
| 204 | */ |
||
| 205 | 44 | protected function finalize($result) { |
|
| 206 | 44 | $response = Response::create($result); |
|
| 207 | 44 | $response->meta(['request' => $this->request], true); |
|
| 208 | 44 | $response->contentTypeFromAccept($this->request->getEnv('HTTP_ACCEPT')); |
|
| 209 | 44 | $response->contentAsset($this->request->getEnv('HTTP_X_ASSET')); |
|
| 210 | |||
| 211 | 44 | $contentType = $response->contentType(); |
|
| 212 | |||
| 213 | 44 | if ($this->request->getMethod() === Request::METHOD_HEAD) { |
|
| 214 | $response->flushHeaders(); |
||
| 215 | return null; |
||
| 216 | } |
||
| 217 | |||
| 218 | // Check for known response types. |
||
| 219 | switch ($contentType) { |
||
| 220 | 44 | case 'application/internal': |
|
| 221 | 44 | if ($result instanceof \Exception) { |
|
| 222 | 23 | throw $result; |
|
| 223 | } |
||
| 224 | |||
| 225 | 23 | if ($response->contentAsset() === 'response') { |
|
| 226 | return $response; |
||
| 227 | } else { |
||
| 228 | 23 | return $response->jsonSerialize(); |
|
| 229 | } |
||
| 230 | // No break because everything returns. |
||
| 231 | case 'application/json': |
||
| 232 | $response->flushHeaders(); |
||
| 233 | echo json_encode($response, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES); |
||
| 234 | break; |
||
| 235 | default: |
||
| 236 | $data = $response->data(); |
||
| 237 | if (is_string($data)) { |
||
| 238 | $response->flushHeaders(); |
||
| 239 | echo $data; |
||
| 240 | } else { |
||
| 241 | $response->status(415); |
||
| 242 | $response->flushHeaders(); |
||
| 243 | echo "Unsupported response type: $contentType"; |
||
| 244 | } |
||
| 245 | break; |
||
| 246 | } |
||
| 247 | return null; |
||
| 248 | } |
||
| 249 | } |
||
| 250 |