mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/RSS
synced 2024-11-24 15:54:06 +00:00
100 lines
2.7 KiB
PHP
100 lines
2.7 KiB
PHP
<?php
|
|
|
|
class RSSHooks {
|
|
|
|
/**
|
|
* Tell the parser how to handle <rss> elements
|
|
* @param Parser $parser Parser Object
|
|
* @return bool
|
|
*/
|
|
static function onParserFirstCallInit( $parser ) {
|
|
// Install parser hook for <rss> tags
|
|
$parser->setHook( 'rss', [ __CLASS__, 'renderRss' ] );
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Static function wrapping RSSParser to handle rendering of RSS elements
|
|
* @param string $input text inside the tags.
|
|
* @param array $args value associative list of the element attributes and
|
|
* their values.
|
|
* @param Parser $parser
|
|
* @param PPFrame $frame parser context
|
|
* @return string
|
|
* @suppress SecurityCheck-XSS see T203210
|
|
*/
|
|
static function renderRss( $input, array $args, Parser $parser, PPFrame $frame ) {
|
|
global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces,
|
|
$wgRSSUrlWhitelist,$wgRSSAllowedFeeds;
|
|
|
|
if ( is_array( $wgRSSNamespaces ) && count( $wgRSSNamespaces ) ) {
|
|
$ns = $parser->getTitle()->getNamespace();
|
|
$checkNS = array_flip( $wgRSSNamespaces );
|
|
|
|
if ( !isset( $checkNS[$ns] ) ) {
|
|
return RSSUtils::RSSError( 'rss-ns-permission' );
|
|
}
|
|
}
|
|
|
|
if ( isset( $wgRSSAllowedFeeds ) ) {
|
|
return RSSUtils::RSSError( 'rss-deprecated-wgrssallowedfeeds-found' );
|
|
}
|
|
|
|
# disallow because there is no whitelist at all or an empty whitelist
|
|
|
|
if ( !isset( $wgRSSUrlWhitelist )
|
|
|| !is_array( $wgRSSUrlWhitelist )
|
|
|| ( count( $wgRSSUrlWhitelist ) === 0 ) ) {
|
|
return RSSUtils::RSSError( 'rss-empty-whitelist',
|
|
$input
|
|
);
|
|
|
|
}
|
|
|
|
# disallow the feed url because the url is not whitelisted; or
|
|
# disallow because the wildcard joker is not present to allow any feed url
|
|
# which can be dangerous
|
|
|
|
if ( !( in_array( $input, $wgRSSUrlWhitelist ) )
|
|
&& !( in_array( "*", $wgRSSUrlWhitelist ) ) ) {
|
|
$listOfAllowed = $parser->getFunctionLang()->listToText( $wgRSSUrlWhitelist );
|
|
$numberAllowed = $parser->getFunctionLang()->formatNum( count( $wgRSSUrlWhitelist ) );
|
|
|
|
return RSSUtils::RSSError( 'rss-url-is-not-whitelisted',
|
|
[ $input, $listOfAllowed, $numberAllowed ]
|
|
);
|
|
|
|
}
|
|
|
|
if ( !Http::isValidURI( $input ) ) {
|
|
return RSSUtils::RSSError( 'rss-invalid-url', htmlspecialchars( $input ) );
|
|
}
|
|
|
|
if ( $wgRSSCacheCompare ) {
|
|
$timeout = $wgRSSCacheCompare;
|
|
} else {
|
|
$timeout = $wgRSSCacheAge;
|
|
}
|
|
|
|
$parser->getOutput()->updateCacheExpiry( $timeout );
|
|
|
|
$rss = new RSSParser( $input, $args );
|
|
|
|
$status = $rss->fetch();
|
|
|
|
# Check for errors.
|
|
if ( !$status->isGood() ) {
|
|
return wfMessage(
|
|
'rss-error', htmlspecialchars( $input ), Status::wrap( $status )->getWikitext()
|
|
)->escaped();
|
|
}
|
|
|
|
if ( !is_object( $rss->rss ) || !is_array( $rss->rss->items ) ) {
|
|
return RSSUtils::RSSError( 'rss-empty', htmlspecialchars( $input ) );
|
|
}
|
|
|
|
return $rss->renderFeed( $parser, $frame );
|
|
}
|
|
|
|
}
|