1/* html.c: helper functions for html output
  2 *
  3 * Copyright (C) 2006-2014 cgit Development Team <cgit@lists.zx2c4.com>
  4 *
  5 * Licensed under GNU General Public License v2
  6 *   (see COPYING for full license text)
  7 */
  8
  9#include "cgit.h"
 10#include "html.h"
 11#include <unistd.h>
 12#include <stdio.h>
 13#include <stdlib.h>
 14#include <stdarg.h>
 15#include <string.h>
 16#include <errno.h>
 17
 18/* Percent-encoding of each character, except: a-zA-Z0-9!$()*,./:;@- */
 19static const char* url_escape_table[256] = {
 20	"%00", "%01", "%02", "%03", "%04", "%05", "%06", "%07", "%08", "%09",
 21	"%0a", "%0b", "%0c", "%0d", "%0e", "%0f", "%10", "%11", "%12", "%13",
 22	"%14", "%15", "%16", "%17", "%18", "%19", "%1a", "%1b", "%1c", "%1d",
 23	"%1e", "%1f", "%20", 0, "%22", "%23", 0, "%25", "%26", "%27", 0, 0, 0,
 24	"%2b", 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, "%3c", "%3d",
 25	"%3e", "%3f", 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
 26	0, 0, 0, 0, 0, 0, 0, 0, 0, "%5c", 0, "%5e", 0, "%60", 0, 0, 0, 0, 0,
 27	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, "%7b",
 28	"%7c", "%7d", 0, "%7f", "%80", "%81", "%82", "%83", "%84", "%85",
 29	"%86", "%87", "%88", "%89", "%8a", "%8b", "%8c", "%8d", "%8e", "%8f",
 30	"%90", "%91", "%92", "%93", "%94", "%95", "%96", "%97", "%98", "%99",
 31	"%9a", "%9b", "%9c", "%9d", "%9e", "%9f", "%a0", "%a1", "%a2", "%a3",
 32	"%a4", "%a5", "%a6", "%a7", "%a8", "%a9", "%aa", "%ab", "%ac", "%ad",
 33	"%ae", "%af", "%b0", "%b1", "%b2", "%b3", "%b4", "%b5", "%b6", "%b7",
 34	"%b8", "%b9", "%ba", "%bb", "%bc", "%bd", "%be", "%bf", "%c0", "%c1",
 35	"%c2", "%c3", "%c4", "%c5", "%c6", "%c7", "%c8", "%c9", "%ca", "%cb",
 36	"%cc", "%cd", "%ce", "%cf", "%d0", "%d1", "%d2", "%d3", "%d4", "%d5",
 37	"%d6", "%d7", "%d8", "%d9", "%da", "%db", "%dc", "%dd", "%de", "%df",
 38	"%e0", "%e1", "%e2", "%e3", "%e4", "%e5", "%e6", "%e7", "%e8", "%e9",
 39	"%ea", "%eb", "%ec", "%ed", "%ee", "%ef", "%f0", "%f1", "%f2", "%f3",
 40	"%f4", "%f5", "%f6", "%f7", "%f8", "%f9", "%fa", "%fb", "%fc", "%fd",
 41	"%fe", "%ff"
 42};
 43
 44char *fmt(const char *format, ...)
 45{
 46	static char buf[8][1024];
 47	static int bufidx;
 48	int len;
 49	va_list args;
 50
 51	bufidx++;
 52	bufidx &= 7;
 53
 54	va_start(args, format);
 55	len = vsnprintf(buf[bufidx], sizeof(buf[bufidx]), format, args);
 56	va_end(args);
 57	if (len > sizeof(buf[bufidx])) {
 58		fprintf(stderr, "[html.c] string truncated: %s\n", format);
 59		exit(1);
 60	}
 61	return buf[bufidx];
 62}
 63
 64char *fmtalloc(const char *format, ...)
 65{
 66	struct strbuf sb = STRBUF_INIT;
 67	va_list args;
 68
 69	va_start(args, format);
 70	strbuf_vaddf(&sb, format, args);
 71	va_end(args);
 72
 73	return strbuf_detach(&sb, NULL);
 74}
 75
 76void html_raw(const char *data, size_t size)
 77{
 78	if (write(STDOUT_FILENO, data, size) != size)
 79		die_errno("write error on html output");
 80}
 81
 82void html(const char *txt)
 83{
 84	html_raw(txt, strlen(txt));
 85}
 86
 87void htmlf(const char *format, ...)
 88{
 89	va_list args;
 90	struct strbuf buf = STRBUF_INIT;
 91
 92	va_start(args, format);
 93	strbuf_vaddf(&buf, format, args);
 94	va_end(args);
 95	html(buf.buf);
 96	strbuf_release(&buf);
 97}
 98
 99void html_txtf(const char *format, ...)
100{
101	va_list args;
102
103	va_start(args, format);
104	html_vtxtf(format, args);
105	va_end(args);
106}
107
108void html_vtxtf(const char *format, va_list ap)
109{
110	va_list cp;
111	struct strbuf buf = STRBUF_INIT;
112
113	va_copy(cp, ap);
114	strbuf_vaddf(&buf, format, cp);
115	va_end(cp);
116	html_txt(buf.buf);
117	strbuf_release(&buf);
118}
119
120void html_status(int code, const char *msg, int more_headers)
121{
122	htmlf("Status: %d %s\n", code, msg);
123	if (!more_headers)
124		html("\n");
125}
126
127void html_txt(const char *txt)
128{
129	const char *t = txt;
130	while (t && *t) {
131		int c = *t;
132		if (c == '<' || c == '>' || c == '&') {
133			html_raw(txt, t - txt);
134			if (c == '>')
135				html("&gt;");
136			else if (c == '<')
137				html("&lt;");
138			else if (c == '&')
139				html("&amp;");
140			txt = t + 1;
141		}
142		t++;
143	}
144	if (t != txt)
145		html(txt);
146}
147
148void html_ntxt(int len, const char *txt)
149{
150	const char *t = txt;
151	while (t && *t && len--) {
152		int c = *t;
153		if (c == '<' || c == '>' || c == '&') {
154			html_raw(txt, t - txt);
155			if (c == '>')
156				html("&gt;");
157			else if (c == '<')
158				html("&lt;");
159			else if (c == '&')
160				html("&amp;");
161			txt = t + 1;
162		}
163		t++;
164	}
165	if (t != txt)
166		html_raw(txt, t - txt);
167	if (len < 0)
168		html("...");
169}
170
171void html_attrf(const char *fmt, ...)
172{
173	va_list ap;
174	struct strbuf sb = STRBUF_INIT;
175
176	va_start(ap, fmt);
177	strbuf_vaddf(&sb, fmt, ap);
178	va_end(ap);
179
180	html_attr(sb.buf);
181	strbuf_release(&sb);
182}
183
184void html_attr(const char *txt)
185{
186	const char *t = txt;
187	while (t && *t) {
188		int c = *t;
189		if (c == '<' || c == '>' || c == '\'' || c == '\"' || c == '&') {
190			html_raw(txt, t - txt);
191			if (c == '>')
192				html("&gt;");
193			else if (c == '<')
194				html("&lt;");
195			else if (c == '\'')
196				html("&#x27;");
197			else if (c == '"')
198				html("&quot;");
199			else if (c == '&')
200				html("&amp;");
201			txt = t + 1;
202		}
203		t++;
204	}
205	if (t != txt)
206		html(txt);
207}
208
209void html_url_path(const char *txt)
210{
211	const char *t = txt;
212	while (t && *t) {
213		unsigned char c = *t;
214		const char *e = url_escape_table[c];
215		if (e && c != '+' && c != '&') {
216			html_raw(txt, t - txt);
217			html(e);
218			txt = t + 1;
219		}
220		t++;
221	}
222	if (t != txt)
223		html(txt);
224}
225
226void html_url_arg(const char *txt)
227{
228	const char *t = txt;
229	while (t && *t) {
230		unsigned char c = *t;
231		const char *e = url_escape_table[c];
232		if (c == ' ')
233			e = "+";
234		if (e) {
235			html_raw(txt, t - txt);
236			html(e);
237			txt = t + 1;
238		}
239		t++;
240	}
241	if (t != txt)
242		html(txt);
243}
244
245void html_hidden(const char *name, const char *value)
246{
247	html("<input type='hidden' name='");
248	html_attr(name);
249	html("' value='");
250	html_attr(value);
251	html("'/>");
252}
253
254void html_option(const char *value, const char *text, const char *selected_value)
255{
256	html("<option value='");
257	html_attr(value);
258	html("'");
259	if (selected_value && !strcmp(selected_value, value))
260		html(" selected='selected'");
261	html(">");
262	html_txt(text);
263	html("</option>\n");
264}
265
266void html_intoption(int value, const char *text, int selected_value)
267{
268	htmlf("<option value='%d'%s>", value,
269	      value == selected_value ? " selected='selected'" : "");
270	html_txt(text);
271	html("</option>");
272}
273
274void html_link_open(const char *url, const char *title, const char *class)
275{
276	html("<a href='");
277	html_attr(url);
278	if (title) {
279		html("' title='");
280		html_attr(title);
281	}
282	if (class) {
283		html("' class='");
284		html_attr(class);
285	}
286	html("'>");
287}
288
289void html_link_close(void)
290{
291	html("</a>");
292}
293
294void html_fileperm(unsigned short mode)
295{
296	htmlf("%c%c%c", (mode & 4 ? 'r' : '-'),
297	      (mode & 2 ? 'w' : '-'), (mode & 1 ? 'x' : '-'));
298}
299
300int html_include(const char *filename)
301{
302	FILE *f;
303	char buf[4096];
304	size_t len;
305
306	if (!(f = fopen(filename, "r"))) {
307		fprintf(stderr, "[cgit] Failed to include file %s: %s (%d).\n",
308			filename, strerror(errno), errno);
309		return -1;
310	}
311	while ((len = fread(buf, 1, 4096, f)) > 0)
312		html_raw(buf, len);
313	fclose(f);
314	return 0;
315}
316
317static int hextoint(char c)
318{
319	if (c >= 'a' && c <= 'f')
320		return 10 + c - 'a';
321	else if (c >= 'A' && c <= 'F')
322		return 10 + c - 'A';
323	else if (c >= '0' && c <= '9')
324		return c - '0';
325	else
326		return -1;
327}
328
329static char *convert_query_hexchar(char *txt)
330{
331	int d1, d2, n;
332	n = strlen(txt);
333	if (n < 3) {
334		*txt = '\0';
335		return txt-1;
336	}
337	d1 = hextoint(*(txt + 1));
338	d2 = hextoint(*(txt + 2));
339	if (d1 < 0 || d2 < 0) {
340		memmove(txt, txt + 3, n - 2);
341		return txt-1;
342	} else {
343		*txt = d1 * 16 + d2;
344		memmove(txt + 1, txt + 3, n - 2);
345		return txt;
346	}
347}
348
349int http_parse_querystring(const char *txt_, void (*fn)(const char *name, const char *value))
350{
351	char *o, *t, *txt, *value = NULL, c;
352
353	if (!txt_)
354		return 0;
355
356	o = t = txt = xstrdup(txt_);
357	while ((c=*t) != '\0') {
358		if (c == '=') {
359			*t = '\0';
360			value = t + 1;
361		} else if (c == '+') {
362			*t = ' ';
363		} else if (c == '%') {
364			t = convert_query_hexchar(t);
365		} else if (c == '&') {
366			*t = '\0';
367			(*fn)(txt, value);
368			txt = t + 1;
369			value = NULL;
370		}
371		t++;
372	}
373	if (t != txt)
374		(*fn)(txt, value);
375	free(o);
376	return 0;
377}