mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/RSS
synced 2024-11-13 17:57:07 +00:00
937cc81686
Bug: T87968 Change-Id: Iadd0a7baa826a1dee815c3b56b7a43c2c07e255b
100 lines
2.7 KiB
PHP
100 lines
2.7 KiB
PHP
<?php
|
|
|
|
class RSSHooks {
|
|
|
|
/**
|
|
* Tell the parser how to handle <rss> elements
|
|
* @param $parser Parser Object
|
|
* @return bool
|
|
*/
|
|
static function onParserFirstCallInit( $parser ) {
|
|
# Install parser hook for <rss> tags
|
|
$parser->setHook( 'rss', array( __CLASS__, 'renderRss' ) );
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Static function wrapping RSSParser to handle rendering of RSS elements
|
|
* @param $input String: text inside the tags.
|
|
* @param $args Array: value associative list of the element attributes and
|
|
* their values.
|
|
* @param $parser Parser
|
|
* @param $frame PPFrame parser context
|
|
* @return string
|
|
*/
|
|
static function renderRss( $input, array $args, Parser $parser, PPFrame $frame ) {
|
|
global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces,
|
|
$wgRSSUrlWhitelist,$wgRSSAllowedFeeds;
|
|
|
|
if ( is_array( $wgRSSNamespaces ) && count( $wgRSSNamespaces ) ) {
|
|
|
|
$ns = $parser->getTitle()->getNamespace();
|
|
$checkNS = array_flip( $wgRSSNamespaces );
|
|
|
|
if( !isset( $checkNS[$ns] ) ) {
|
|
return RSSUtils::RSSError( 'rss-ns-permission' );
|
|
}
|
|
}
|
|
|
|
if ( isset( $wgRSSAllowedFeeds ) ) {
|
|
return RSSUtils::RSSError( 'rss-deprecated-wgrssallowedfeeds-found' );
|
|
}
|
|
|
|
# disallow because there is no whitelist at all or an empty whitelist
|
|
|
|
if ( !isset( $wgRSSUrlWhitelist )
|
|
|| !is_array( $wgRSSUrlWhitelist )
|
|
|| ( count( $wgRSSUrlWhitelist ) === 0 ) ) {
|
|
|
|
return RSSUtils::RSSError( 'rss-empty-whitelist',
|
|
$input
|
|
);
|
|
|
|
}
|
|
|
|
# disallow the feed url because the url is not whitelisted; or
|
|
# disallow because the wildcard joker is not present to allow any feed url
|
|
# which can be dangerous
|
|
|
|
if ( !( in_array( $input, $wgRSSUrlWhitelist ) )
|
|
&& !( in_array( "*", $wgRSSUrlWhitelist ) ) ) {
|
|
|
|
$listOfAllowed = $parser->getFunctionLang()->listToText( $wgRSSUrlWhitelist );
|
|
$numberAllowed = $parser->getFunctionLang()->formatNum( count( $wgRSSUrlWhitelist ) );
|
|
|
|
return RSSUtils::RSSError( 'rss-url-is-not-whitelisted',
|
|
array( $input, $listOfAllowed, $numberAllowed )
|
|
);
|
|
|
|
}
|
|
|
|
if ( !Http::isValidURI( $input ) ) {
|
|
return RSSUtils::RSSError( 'rss-invalid-url', htmlspecialchars( $input ) );
|
|
}
|
|
|
|
if ( $wgRSSCacheCompare ) {
|
|
$timeout = $wgRSSCacheCompare;
|
|
} else {
|
|
$timeout = $wgRSSCacheAge;
|
|
}
|
|
|
|
$parser->getOutput()->updateCacheExpiry( $timeout );
|
|
|
|
$rss = new RSSParser( $input, $args );
|
|
|
|
$status = $rss->fetch();
|
|
|
|
# Check for errors.
|
|
if ( !$status->isGood() ) {
|
|
return wfMessage( 'rss-error', htmlspecialchars( $input ), $status->getWikiText() )->text();
|
|
}
|
|
|
|
if ( !is_object( $rss->rss ) || !is_array( $rss->rss->items ) ) {
|
|
return RSSUtils::RSSError( 'rss-empty', htmlspecialchars( $input ) );
|
|
}
|
|
|
|
return $rss->renderFeed( $parser, $frame );
|
|
}
|
|
|
|
}
|