elements * @param Parser $parser Parser Object * @return bool */ static function onParserFirstCallInit( $parser ) { // Install parser hook for tags $parser->setHook( 'rss', [ __CLASS__, 'renderRss' ] ); return true; } /** * Static function wrapping RSSParser to handle rendering of RSS elements * @param string $input text inside the tags. * @param array $args value associative list of the element attributes and * their values. * @param Parser $parser * @param PPFrame $frame parser context * @return string */ static function renderRss( $input, array $args, Parser $parser, PPFrame $frame ) { global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces, $wgRSSUrlWhitelist,$wgRSSAllowedFeeds; if ( is_array( $wgRSSNamespaces ) && count( $wgRSSNamespaces ) ) { $ns = $parser->getTitle()->getNamespace(); $checkNS = array_flip( $wgRSSNamespaces ); if ( !isset( $checkNS[$ns] ) ) { return RSSUtils::RSSError( 'rss-ns-permission' ); } } if ( isset( $wgRSSAllowedFeeds ) ) { return RSSUtils::RSSError( 'rss-deprecated-wgrssallowedfeeds-found' ); } # disallow because there is no whitelist at all or an empty whitelist if ( !isset( $wgRSSUrlWhitelist ) || !is_array( $wgRSSUrlWhitelist ) || ( count( $wgRSSUrlWhitelist ) === 0 ) ) { return RSSUtils::RSSError( 'rss-empty-whitelist', $input ); } # disallow the feed url because the url is not whitelisted; or # disallow because the wildcard joker is not present to allow any feed url # which can be dangerous if ( !( in_array( $input, $wgRSSUrlWhitelist ) ) && !( in_array( "*", $wgRSSUrlWhitelist ) ) ) { $listOfAllowed = $parser->getFunctionLang()->listToText( $wgRSSUrlWhitelist ); $numberAllowed = $parser->getFunctionLang()->formatNum( count( $wgRSSUrlWhitelist ) ); return RSSUtils::RSSError( 'rss-url-is-not-whitelisted', [ $input, $listOfAllowed, $numberAllowed ] ); } if ( !Http::isValidURI( $input ) ) { return RSSUtils::RSSError( 'rss-invalid-url', htmlspecialchars( $input ) ); } if ( $wgRSSCacheCompare ) { $timeout = $wgRSSCacheCompare; } else { $timeout = $wgRSSCacheAge; } $parser->getOutput()->updateCacheExpiry( $timeout ); $rss = new RSSParser( $input, $args ); $status = $rss->fetch(); # Check for errors. if ( !$status->isGood() ) { return wfMessage( 'rss-error', htmlspecialchars( $input ), Status::wrap( $status )->getWikitext() )->escaped(); } if ( !is_object( $rss->rss ) || !is_array( $rss->rss->items ) ) { return RSSUtils::RSSError( 'rss-empty', htmlspecialchars( $input ) ); } return $rss->renderFeed( $parser, $frame ); } }