55 lines
1.5 KiB
PHP
55 lines
1.5 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Twig.
|
|
*
|
|
* (c) Fabien Potencier
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Twig\Node;
|
|
|
|
use Twig\Compiler;
|
|
use Twig\Node\Expression\ConstantExpression;
|
|
|
|
/**
|
|
* Adds a check for the __toString() method when the variable is an object and the sandbox is activated.
|
|
*
|
|
* When there is a simple Print statement, like {{ article }},
|
|
* and if the sandbox is enabled, we need to check that the __toString()
|
|
* method is allowed if 'article' is an object.
|
|
*
|
|
* Not used anymore, to be deprecated in 2.x and removed in 3.0
|
|
*
|
|
* @author Fabien Potencier <fabien@symfony.com>
|
|
*/
|
|
class SandboxedPrintNode extends PrintNode
|
|
{
|
|
public function compile(Compiler $compiler)
|
|
{
|
|
$compiler
|
|
->addDebugInfo($this)
|
|
->write('echo ')
|
|
;
|
|
$expr = $this->getNode('expr');
|
|
if ($expr instanceof ConstantExpression) {
|
|
$compiler
|
|
->subcompile($expr)
|
|
->raw(";\n")
|
|
;
|
|
} else {
|
|
$compiler
|
|
->write('$this->extensions[SandboxExtension::class]->ensureToStringAllowed(')
|
|
->subcompile($expr)
|
|
->raw(', ')
|
|
->repr($expr->getTemplateLine())
|
|
->raw(", \$this->source);\n")
|
|
;
|
|
}
|
|
}
|
|
}
|
|
|
|
class_alias('Twig\Node\SandboxedPrintNode', 'Twig_Node_SandboxedPrint');
|