// Copyright (c) 2011, Mike Samuel // All rights reserved. // // Redistribution and use in source and binary forms, with or without // modification, are permitted provided that the following conditions // are met: // // Redistributions of source code must retain the above copyright // notice, this list of conditions and the following disclaimer. // Redistributions in binary form must reproduce the above copyright // notice, this list of conditions and the following disclaimer in the // documentation and/or other materials provided with the distribution. // Neither the name of the OWASP nor the names of its contributors may // be used to endorse or promote products derived from this software // without specific prior written permission. // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS // FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE // COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, // INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, // BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; // LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER // CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT // LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN // ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE // POSSIBILITY OF SUCH DAMAGE. package org.owasp.html; import java.util.List; import javax.annotation.Nullable; import javax.annotation.concurrent.Immutable; /** * A policy that can be applied to an element to decide whether or not to * allow it in the output, possibly after transforming attributes. *

* Element policies are applied after * {@link AttributePolicy attribute policies} so * they can be used to add extra attributes. * * @author Mike Samuel * @see HtmlPolicyBuilder#allowElements(ElementPolicy, String...) */ @TCB public interface ElementPolicy { /** * @param elementName the lower-case element name. * @param attrs a list of alternating attribute names and values. * The list may be added to or removed from. When removing, be * careful to remove both the name and its associated value. * * @return {@code null} to disallow the element, or the adjusted element name. */ public @Nullable String apply(String elementName, List attrs); /** Utilities for working with element policies. */ public static final class Util { private Util() { /* uninstantiable */ } /** * Given zero or more element policies, returns an element policy equivalent * to applying them in order failing early if any of them fails. */ public static final ElementPolicy join(ElementPolicy... policies) { class PolicyJoiner { ElementPolicy last = null; ElementPolicy out = null; void join(ElementPolicy p) { if (p == REJECT_ALL_ELEMENT_POLICY) { out = p; } else if (out != REJECT_ALL_ELEMENT_POLICY) { if (p instanceof JoinedElementPolicy) { JoinedElementPolicy jep = (JoinedElementPolicy) p; join(jep.first); join(jep.second); } else if (p != last) { last = p; if (out == null || out == IDENTITY_ELEMENT_POLICY) { out = p; } else if (p != IDENTITY_ELEMENT_POLICY) { out = new JoinedElementPolicy(out, p); } } } } } PolicyJoiner pu = new PolicyJoiner(); for (ElementPolicy policy : policies) { if (policy == null) { continue; } pu.join(policy); } return pu.out != null ? pu.out : IDENTITY_ELEMENT_POLICY; } } public static final ElementPolicy IDENTITY_ELEMENT_POLICY = new ElementPolicy() { public String apply(String elementName, List attrs) { return elementName; } }; public static final ElementPolicy REJECT_ALL_ELEMENT_POLICY = new ElementPolicy() { public @Nullable String apply(String elementName, List attrs) { return null; } }; } @Immutable final class JoinedElementPolicy implements ElementPolicy { final ElementPolicy first, second; JoinedElementPolicy(ElementPolicy first, ElementPolicy second) { this.first = first; this.second = second; } public @Nullable String apply(String elementName, List attrs) { elementName = first.apply(elementName, attrs); return elementName != null ? second.apply(elementName, attrs) : null; } }