| /* |
| * Copyright (C) 2006-2021 Apple Inc. All rights reserved. |
| * Copyright (C) 2010, 2011, 2012 Google Inc. All rights reserved. |
| * |
| * This library is free software; you can redistribute it and/or |
| * modify it under the terms of the GNU Library General Public |
| * License as published by the Free Software Foundation; either |
| * version 2 of the License, or (at your option) any later version. |
| * |
| * This library is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| * Library General Public License for more details. |
| * |
| * You should have received a copy of the GNU Library General Public License |
| * along with this library; see the file COPYING.LIB. If not, write to |
| * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, |
| * Boston, MA 02110-1301, USA. |
| */ |
| |
| #include "config.h" |
| #include "FormController.h" |
| |
| #include "HTMLFormElement.h" |
| #include "HTMLInputElement.h" |
| #include "ScriptDisallowedScope.h" |
| #include "TypedElementDescendantIterator.h" |
| #include <wtf/NeverDestroyed.h> |
| #include <wtf/WeakHashMap.h> |
| #include <wtf/text/StringBuilder.h> |
| #include <wtf/text/StringConcatenateNumbers.h> |
| #include <wtf/text/StringToIntegerConversion.h> |
| |
| namespace WebCore { |
| |
| static HTMLFormElement* ownerForm(const HTMLFormControlElementWithState& control) |
| { |
| // Assume controls with form attribute have no owners because we restore |
| // state during parsing and form owners of such controls might be |
| // indeterminate. |
| return control.hasAttributeWithoutSynchronization(HTMLNames::formAttr) ? nullptr : control.form(); |
| } |
| |
| struct StringVectorReader { |
| const Vector<String>& vector; |
| size_t index { 0 }; |
| |
| const String& consumeString(); |
| Vector<String> consumeSubvector(size_t subvectorSize); |
| }; |
| |
| const String& StringVectorReader::consumeString() |
| { |
| if (index == vector.size()) |
| return nullString(); |
| return vector[index++]; |
| } |
| |
| Vector<String> StringVectorReader::consumeSubvector(size_t subvectorSize) |
| { |
| if (subvectorSize > vector.size() - index) |
| return { }; |
| auto subvectorIndex = index; |
| index += subvectorSize; |
| return { vector.data() + subvectorIndex, subvectorSize }; |
| } |
| |
| // ---------------------------------------------------------------------------- |
| |
| // Serialized form of FormControlState: |
| // (',' means strings around it are separated in stateVector.) |
| // |
| // SerializedControlState ::= SkipState | RestoreState |
| // SkipState ::= '0' |
| // RestoreState ::= UnsignedNumber, ControlValue+ |
| // UnsignedNumber ::= [0-9]+ |
| // ControlValue ::= arbitrary string |
| // |
| // The UnsignedNumber in RestoreState is the length of the sequence of ControlValues. |
| |
| static void appendSerializedFormControlState(Vector<String>& vector, const FormControlState& state) |
| { |
| vector.append(String::number(state.size())); |
| for (auto& value : state) |
| vector.append(value.isNull() ? emptyString() : value); |
| } |
| |
| static std::optional<FormControlState> consumeSerializedFormControlState(StringVectorReader& reader) |
| { |
| auto sizeString = reader.consumeString(); |
| if (sizeString.isNull()) |
| return std::nullopt; |
| return reader.consumeSubvector(parseInteger<size_t>(sizeString).value_or(0)); |
| } |
| |
| // ---------------------------------------------------------------------------- |
| |
| // ---------------------------------------------------------------------------- |
| |
| class FormController::SavedFormState { |
| public: |
| static SavedFormState consumeSerializedState(StringVectorReader&); |
| |
| bool isEmpty() const { return m_map.isEmpty(); } |
| |
| using FormElementKey = std::pair<AtomString, AtomString>; |
| FormControlState takeControlState(const FormElementKey&); |
| |
| void appendReferencedFilePaths(Vector<String>&) const; |
| |
| private: |
| HashMap<FormElementKey, Deque<FormControlState>> m_map; |
| }; |
| |
| FormController::SavedFormState FormController::SavedFormState::consumeSerializedState(StringVectorReader& reader) |
| { |
| auto isNotFormControlTypeCharacter = [](UChar character) { |
| return !(character == '-' || isASCIILower(character)); |
| }; |
| |
| SavedFormState result; |
| auto count = parseInteger<size_t>(reader.consumeString()).value_or(0); |
| while (count--) { |
| auto& name = reader.consumeString(); |
| auto& type = reader.consumeString(); |
| if (type.isEmpty() || StringView { type }.contains(isNotFormControlTypeCharacter)) |
| return { }; |
| auto state = consumeSerializedFormControlState(reader); |
| if (!state) |
| return { }; |
| result.m_map.add({ name, type }, Deque<FormControlState> { }).iterator->value.append(WTFMove(*state)); |
| } |
| return result; |
| } |
| |
| FormControlState FormController::SavedFormState::takeControlState(const FormElementKey& key) |
| { |
| auto iterator = m_map.find(key); |
| if (iterator == m_map.end()) |
| return { }; |
| auto state = iterator->value.takeFirst(); |
| if (iterator->value.isEmpty()) |
| m_map.remove(iterator); |
| return state; |
| } |
| |
| void FormController::SavedFormState::appendReferencedFilePaths(Vector<String>& vector) const |
| { |
| for (auto& element : m_map) { |
| if (element.key.second != "file") // type |
| continue; |
| for (auto& state : element.value) { |
| for (auto& file : HTMLInputElement::filesFromFileInputFormControlState(state)) |
| vector.append(file.path); |
| } |
| } |
| } |
| |
| // ---------------------------------------------------------------------------- |
| |
| class FormController::FormKeyGenerator { |
| WTF_MAKE_NONCOPYABLE(FormKeyGenerator); |
| WTF_MAKE_FAST_ALLOCATED; |
| |
| public: |
| FormKeyGenerator() = default; |
| String formKey(const HTMLFormControlElementWithState&); |
| void willDeleteForm(HTMLFormElement&); |
| |
| private: |
| WeakHashMap<HTMLFormElement, String> m_formToKeyMap; |
| HashMap<String, unsigned> m_formSignatureToNextIndexMap; |
| }; |
| |
| static String formSignature(const HTMLFormElement& form) |
| { |
| StringBuilder builder; |
| |
| // Remove the query part because it might contain volatile parameters such as a session key. |
| // FIXME: But leave the fragment identifier? Perhaps we should switch to removeQueryAndFragmentIdentifier. |
| |
| URL actionURL = form.getURLAttribute(HTMLNames::actionAttr); |
| actionURL.setQuery({ }); |
| builder.append(actionURL.string()); |
| |
| // Two named controls seems to be enough to distinguish similar but different forms. |
| constexpr unsigned maxNamedControlsToBeRecorded = 2; |
| |
| ScriptDisallowedScope::InMainThread scriptDisallowedScope; |
| unsigned count = 0; |
| builder.append(" ["); |
| for (auto& control : form.unsafeAssociatedElements()) { |
| auto element = control->asFormAssociatedElement(); |
| if (!is<HTMLFormControlElementWithState>(element)) |
| continue; |
| Ref controlWithState = downcast<HTMLFormControlElementWithState>(*element); |
| if (!ownerForm(controlWithState)) |
| continue; |
| auto& name = controlWithState->name(); |
| if (name.isEmpty()) |
| continue; |
| builder.append(name, ' '); |
| if (++count >= maxNamedControlsToBeRecorded) |
| break; |
| } |
| builder.append(']'); |
| |
| return builder.toString(); |
| } |
| |
| String FormController::FormKeyGenerator::formKey(const HTMLFormControlElementWithState& control) |
| { |
| RefPtr form = ownerForm(control); |
| if (!form) { |
| static MainThreadNeverDestroyed<String> formKeyForNoOwner(MAKE_STATIC_STRING_IMPL("No owner")); |
| return formKeyForNoOwner; |
| } |
| return m_formToKeyMap.ensure(*form, [this, form] { |
| auto signature = formSignature(*form); |
| auto nextIndex = m_formSignatureToNextIndexMap.add(signature, 0).iterator->value++; |
| return makeString(signature, " #", nextIndex); |
| }).iterator->value; |
| } |
| |
| void FormController::FormKeyGenerator::willDeleteForm(HTMLFormElement& form) |
| { |
| m_formToKeyMap.remove(form); |
| } |
| |
| // ---------------------------------------------------------------------------- |
| |
| FormController::FormController() = default; |
| |
| FormController::~FormController() = default; |
| |
| static String formStateSignature() |
| { |
| // In the legacy version of serialized state, the first item was a name attribute |
| // value of a form control. The following string literal contains some characters |
| // which are rarely used for name attribute values so it won't match. |
| static MainThreadNeverDestroyed<String> signature(MAKE_STATIC_STRING_IMPL("\n\r?% WebKit serialized form state version 8 \n\r=&")); |
| return signature; |
| } |
| |
| Vector<String> FormController::formElementsState(const Document& document) const |
| { |
| struct Control { |
| Ref<const HTMLFormControlElementWithState> control; |
| String formKey; |
| }; |
| |
| Vector<Control> controls; |
| { |
| // FIXME: We should be saving the state of form controls in shadow trees, too. |
| FormKeyGenerator keyGenerator; |
| for (auto& control : descendantsOfType<HTMLFormControlElementWithState>(document)) { |
| ASSERT(control.insertionIndex()); |
| if (control.shouldSaveAndRestoreFormControlState()) |
| controls.append({ control, keyGenerator.formKey(control) }); |
| } |
| } |
| if (controls.isEmpty()) |
| return { }; |
| std::sort(controls.begin(), controls.end(), [](auto& a, auto& b) { |
| if (a.formKey != b.formKey) |
| return codePointCompareLessThan(a.formKey, b.formKey); |
| return a.control->insertionIndex() < b.control->insertionIndex(); |
| }); |
| |
| Vector<String> stateVector; |
| stateVector.append(formStateSignature()); |
| for (size_t i = 0, size = controls.size(); i < size; ) { |
| auto formStart = i; |
| auto formKey = controls[formStart].formKey; |
| while (++i < size && controls[i].formKey == formKey) { } |
| stateVector.append(formKey); |
| stateVector.append(String::number(i - formStart)); |
| for (size_t j = formStart; j < i; ++j) { |
| auto& control = controls[j].control.get(); |
| stateVector.append(control.name()); |
| stateVector.append(control.type()); |
| appendSerializedFormControlState(stateVector, control.saveFormControlState()); |
| } |
| } |
| stateVector.shrinkToFit(); |
| return stateVector; |
| } |
| |
| void FormController::setStateForNewFormElements(const Vector<String>& stateVector) |
| { |
| m_savedFormStateMap = parseStateVector(stateVector); |
| } |
| |
| FormControlState FormController::takeStateForFormElement(const HTMLFormControlElementWithState& control) |
| { |
| if (m_savedFormStateMap.isEmpty()) |
| return { }; |
| if (!m_formKeyGenerator) |
| m_formKeyGenerator = makeUnique<FormKeyGenerator>(); |
| auto iterator = m_savedFormStateMap.find(m_formKeyGenerator->formKey(control)); |
| if (iterator == m_savedFormStateMap.end()) |
| return { }; |
| auto state = iterator->value.takeControlState({ control.name(), control.type() }); |
| if (iterator->value.isEmpty()) |
| m_savedFormStateMap.remove(iterator); |
| return state; |
| } |
| |
| FormController::SavedFormStateMap FormController::parseStateVector(const Vector<String>& stateVector) |
| { |
| StringVectorReader reader { stateVector }; |
| |
| if (reader.consumeString() != formStateSignature()) |
| return { }; |
| |
| SavedFormStateMap map; |
| while (true) { |
| auto formKey = reader.consumeString(); |
| if (formKey.isNull()) |
| return map; |
| auto state = SavedFormState::consumeSerializedState(reader); |
| if (state.isEmpty()) |
| return { }; |
| map.add(formKey, WTFMove(state)); |
| } |
| } |
| |
| void FormController::willDeleteForm(HTMLFormElement& form) |
| { |
| if (m_formKeyGenerator) |
| m_formKeyGenerator->willDeleteForm(form); |
| } |
| |
| void FormController::restoreControlStateFor(HTMLFormControlElementWithState& control) |
| { |
| // We don't save state of a control when shouldSaveAndRestoreFormControlState() |
| // is false. But we need to skip restoring process too because a control in |
| // another form might have the same pair of name and type and saved its state. |
| if (!control.shouldSaveAndRestoreFormControlState() || ownerForm(control)) |
| return; |
| auto state = takeStateForFormElement(control); |
| if (!state.isEmpty()) |
| control.restoreFormControlState(state); |
| } |
| |
| void FormController::restoreControlStateIn(HTMLFormElement& form) |
| { |
| for (auto& element : form.copyAssociatedElementsVector()) { |
| if (!is<HTMLFormControlElementWithState>(element)) |
| continue; |
| auto& control = downcast<HTMLFormControlElementWithState>(element.get()); |
| if (!control.shouldSaveAndRestoreFormControlState() || ownerForm(control) != &form) |
| continue; |
| auto state = takeStateForFormElement(control); |
| if (!state.isEmpty()) |
| control.restoreFormControlState(state); |
| } |
| } |
| |
| bool FormController::hasFormStateToRestore() const |
| { |
| return !m_savedFormStateMap.isEmpty(); |
| } |
| |
| Vector<String> FormController::referencedFilePaths(const Vector<String>& stateVector) |
| { |
| Vector<String> paths; |
| auto parsedState = parseStateVector(stateVector); |
| for (auto& state : parsedState.values()) |
| state.appendReferencedFilePaths(paths); |
| return paths; |
| } |
| |
| } // namespace WebCore |