blob: 8deb3ea8be31a5be9a1619c36559c1d9209186d8 [file] [log] [blame]
/*
* Copyright (C) 2006-2021 Apple Inc. All rights reserved.
* Copyright (C) 2010, 2011, 2012 Google Inc. All rights reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Library General Public
* License as published by the Free Software Foundation; either
* version 2 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Library General Public License for more details.
*
* You should have received a copy of the GNU Library General Public License
* along with this library; see the file COPYING.LIB. If not, write to
* the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
* Boston, MA 02110-1301, USA.
*/
#include "config.h"
#include "FormController.h"
#include "HTMLFormElement.h"
#include "HTMLInputElement.h"
#include "ScriptDisallowedScope.h"
#include "TypedElementDescendantIterator.h"
#include <wtf/NeverDestroyed.h>
#include <wtf/WeakHashMap.h>
#include <wtf/text/StringBuilder.h>
#include <wtf/text/StringConcatenateNumbers.h>
#include <wtf/text/StringToIntegerConversion.h>
namespace WebCore {
static HTMLFormElement* ownerForm(const HTMLFormControlElementWithState& control)
{
// Assume controls with form attribute have no owners because we restore
// state during parsing and form owners of such controls might be
// indeterminate.
return control.hasAttributeWithoutSynchronization(HTMLNames::formAttr) ? nullptr : control.form();
}
struct StringVectorReader {
const Vector<String>& vector;
size_t index { 0 };
const String& consumeString();
Vector<String> consumeSubvector(size_t subvectorSize);
};
const String& StringVectorReader::consumeString()
{
if (index == vector.size())
return nullString();
return vector[index++];
}
Vector<String> StringVectorReader::consumeSubvector(size_t subvectorSize)
{
if (subvectorSize > vector.size() - index)
return { };
auto subvectorIndex = index;
index += subvectorSize;
return { vector.data() + subvectorIndex, subvectorSize };
}
// ----------------------------------------------------------------------------
// Serialized form of FormControlState:
// (',' means strings around it are separated in stateVector.)
//
// SerializedControlState ::= SkipState | RestoreState
// SkipState ::= '0'
// RestoreState ::= UnsignedNumber, ControlValue+
// UnsignedNumber ::= [0-9]+
// ControlValue ::= arbitrary string
//
// The UnsignedNumber in RestoreState is the length of the sequence of ControlValues.
static void appendSerializedFormControlState(Vector<String>& vector, const FormControlState& state)
{
vector.append(String::number(state.size()));
for (auto& value : state)
vector.append(value.isNull() ? emptyString() : value);
}
static std::optional<FormControlState> consumeSerializedFormControlState(StringVectorReader& reader)
{
auto sizeString = reader.consumeString();
if (sizeString.isNull())
return std::nullopt;
return reader.consumeSubvector(parseInteger<size_t>(sizeString).value_or(0));
}
// ----------------------------------------------------------------------------
// ----------------------------------------------------------------------------
class FormController::SavedFormState {
public:
static SavedFormState consumeSerializedState(StringVectorReader&);
bool isEmpty() const { return m_map.isEmpty(); }
using FormElementKey = std::pair<AtomString, AtomString>;
FormControlState takeControlState(const FormElementKey&);
void appendReferencedFilePaths(Vector<String>&) const;
private:
HashMap<FormElementKey, Deque<FormControlState>> m_map;
};
FormController::SavedFormState FormController::SavedFormState::consumeSerializedState(StringVectorReader& reader)
{
auto isNotFormControlTypeCharacter = [](UChar character) {
return !(character == '-' || isASCIILower(character));
};
SavedFormState result;
auto count = parseInteger<size_t>(reader.consumeString()).value_or(0);
while (count--) {
auto& name = reader.consumeString();
auto& type = reader.consumeString();
if (type.isEmpty() || StringView { type }.contains(isNotFormControlTypeCharacter))
return { };
auto state = consumeSerializedFormControlState(reader);
if (!state)
return { };
result.m_map.add({ name, type }, Deque<FormControlState> { }).iterator->value.append(WTFMove(*state));
}
return result;
}
FormControlState FormController::SavedFormState::takeControlState(const FormElementKey& key)
{
auto iterator = m_map.find(key);
if (iterator == m_map.end())
return { };
auto state = iterator->value.takeFirst();
if (iterator->value.isEmpty())
m_map.remove(iterator);
return state;
}
void FormController::SavedFormState::appendReferencedFilePaths(Vector<String>& vector) const
{
for (auto& element : m_map) {
if (element.key.second != "file") // type
continue;
for (auto& state : element.value) {
for (auto& file : HTMLInputElement::filesFromFileInputFormControlState(state))
vector.append(file.path);
}
}
}
// ----------------------------------------------------------------------------
class FormController::FormKeyGenerator {
WTF_MAKE_NONCOPYABLE(FormKeyGenerator);
WTF_MAKE_FAST_ALLOCATED;
public:
FormKeyGenerator() = default;
String formKey(const HTMLFormControlElementWithState&);
void willDeleteForm(HTMLFormElement&);
private:
WeakHashMap<HTMLFormElement, String> m_formToKeyMap;
HashMap<String, unsigned> m_formSignatureToNextIndexMap;
};
static String formSignature(const HTMLFormElement& form)
{
StringBuilder builder;
// Remove the query part because it might contain volatile parameters such as a session key.
// FIXME: But leave the fragment identifier? Perhaps we should switch to removeQueryAndFragmentIdentifier.
URL actionURL = form.getURLAttribute(HTMLNames::actionAttr);
actionURL.setQuery({ });
builder.append(actionURL.string());
// Two named controls seems to be enough to distinguish similar but different forms.
constexpr unsigned maxNamedControlsToBeRecorded = 2;
ScriptDisallowedScope::InMainThread scriptDisallowedScope;
unsigned count = 0;
builder.append(" [");
for (auto& control : form.unsafeAssociatedElements()) {
auto element = control->asFormAssociatedElement();
if (!is<HTMLFormControlElementWithState>(element))
continue;
Ref controlWithState = downcast<HTMLFormControlElementWithState>(*element);
if (!ownerForm(controlWithState))
continue;
auto& name = controlWithState->name();
if (name.isEmpty())
continue;
builder.append(name, ' ');
if (++count >= maxNamedControlsToBeRecorded)
break;
}
builder.append(']');
return builder.toString();
}
String FormController::FormKeyGenerator::formKey(const HTMLFormControlElementWithState& control)
{
RefPtr form = ownerForm(control);
if (!form) {
static MainThreadNeverDestroyed<String> formKeyForNoOwner(MAKE_STATIC_STRING_IMPL("No owner"));
return formKeyForNoOwner;
}
return m_formToKeyMap.ensure(*form, [this, form] {
auto signature = formSignature(*form);
auto nextIndex = m_formSignatureToNextIndexMap.add(signature, 0).iterator->value++;
return makeString(signature, " #", nextIndex);
}).iterator->value;
}
void FormController::FormKeyGenerator::willDeleteForm(HTMLFormElement& form)
{
m_formToKeyMap.remove(form);
}
// ----------------------------------------------------------------------------
FormController::FormController() = default;
FormController::~FormController() = default;
static String formStateSignature()
{
// In the legacy version of serialized state, the first item was a name attribute
// value of a form control. The following string literal contains some characters
// which are rarely used for name attribute values so it won't match.
static MainThreadNeverDestroyed<String> signature(MAKE_STATIC_STRING_IMPL("\n\r?% WebKit serialized form state version 8 \n\r=&"));
return signature;
}
Vector<String> FormController::formElementsState(const Document& document) const
{
struct Control {
Ref<const HTMLFormControlElementWithState> control;
String formKey;
};
Vector<Control> controls;
{
// FIXME: We should be saving the state of form controls in shadow trees, too.
FormKeyGenerator keyGenerator;
for (auto& control : descendantsOfType<HTMLFormControlElementWithState>(document)) {
ASSERT(control.insertionIndex());
if (control.shouldSaveAndRestoreFormControlState())
controls.append({ control, keyGenerator.formKey(control) });
}
}
if (controls.isEmpty())
return { };
std::sort(controls.begin(), controls.end(), [](auto& a, auto& b) {
if (a.formKey != b.formKey)
return codePointCompareLessThan(a.formKey, b.formKey);
return a.control->insertionIndex() < b.control->insertionIndex();
});
Vector<String> stateVector;
stateVector.append(formStateSignature());
for (size_t i = 0, size = controls.size(); i < size; ) {
auto formStart = i;
auto formKey = controls[formStart].formKey;
while (++i < size && controls[i].formKey == formKey) { }
stateVector.append(formKey);
stateVector.append(String::number(i - formStart));
for (size_t j = formStart; j < i; ++j) {
auto& control = controls[j].control.get();
stateVector.append(control.name());
stateVector.append(control.type());
appendSerializedFormControlState(stateVector, control.saveFormControlState());
}
}
stateVector.shrinkToFit();
return stateVector;
}
void FormController::setStateForNewFormElements(const Vector<String>& stateVector)
{
m_savedFormStateMap = parseStateVector(stateVector);
}
FormControlState FormController::takeStateForFormElement(const HTMLFormControlElementWithState& control)
{
if (m_savedFormStateMap.isEmpty())
return { };
if (!m_formKeyGenerator)
m_formKeyGenerator = makeUnique<FormKeyGenerator>();
auto iterator = m_savedFormStateMap.find(m_formKeyGenerator->formKey(control));
if (iterator == m_savedFormStateMap.end())
return { };
auto state = iterator->value.takeControlState({ control.name(), control.type() });
if (iterator->value.isEmpty())
m_savedFormStateMap.remove(iterator);
return state;
}
FormController::SavedFormStateMap FormController::parseStateVector(const Vector<String>& stateVector)
{
StringVectorReader reader { stateVector };
if (reader.consumeString() != formStateSignature())
return { };
SavedFormStateMap map;
while (true) {
auto formKey = reader.consumeString();
if (formKey.isNull())
return map;
auto state = SavedFormState::consumeSerializedState(reader);
if (state.isEmpty())
return { };
map.add(formKey, WTFMove(state));
}
}
void FormController::willDeleteForm(HTMLFormElement& form)
{
if (m_formKeyGenerator)
m_formKeyGenerator->willDeleteForm(form);
}
void FormController::restoreControlStateFor(HTMLFormControlElementWithState& control)
{
// We don't save state of a control when shouldSaveAndRestoreFormControlState()
// is false. But we need to skip restoring process too because a control in
// another form might have the same pair of name and type and saved its state.
if (!control.shouldSaveAndRestoreFormControlState() || ownerForm(control))
return;
auto state = takeStateForFormElement(control);
if (!state.isEmpty())
control.restoreFormControlState(state);
}
void FormController::restoreControlStateIn(HTMLFormElement& form)
{
for (auto& element : form.copyAssociatedElementsVector()) {
if (!is<HTMLFormControlElementWithState>(element))
continue;
auto& control = downcast<HTMLFormControlElementWithState>(element.get());
if (!control.shouldSaveAndRestoreFormControlState() || ownerForm(control) != &form)
continue;
auto state = takeStateForFormElement(control);
if (!state.isEmpty())
control.restoreFormControlState(state);
}
}
bool FormController::hasFormStateToRestore() const
{
return !m_savedFormStateMap.isEmpty();
}
Vector<String> FormController::referencedFilePaths(const Vector<String>& stateVector)
{
Vector<String> paths;
auto parsedState = parseStateVector(stateVector);
for (auto& state : parsedState.values())
state.appendReferencedFilePaths(paths);
return paths;
}
} // namespace WebCore