mirror of
https://github.com/netsurf-browser/netsurf
synced 2024-11-24 15:29:45 +03:00
8337acfc78
Fix form submitting with an empty file upload. Update form_textarea_value(). Purge xcalloc() etc from form.c and handle memory exhaustion. svn path=/import/netsurf/; revision=1195
399 lines
8.9 KiB
C
399 lines
8.9 KiB
C
/*
|
|
* This file is part of NetSurf, http://netsurf.sourceforge.net/
|
|
* Licensed under the GNU General Public License,
|
|
* http://www.opensource.org/licenses/gpl-license
|
|
* Copyright 2004 James Bursa <bursa@users.sourceforge.net>
|
|
* Copyright 2003 Phil Mellor <monkeyson@users.sourceforge.net>
|
|
*/
|
|
|
|
/** \file
|
|
* Form handling functions (implementation).
|
|
*/
|
|
|
|
#include <assert.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include "curl/curl.h"
|
|
#include "netsurf/render/box.h"
|
|
#include "netsurf/render/form.h"
|
|
#include "netsurf/utils/utils.h"
|
|
|
|
|
|
static char *form_textarea_value(struct form_control *textarea);
|
|
|
|
|
|
/**
|
|
* Create a struct form_control.
|
|
*
|
|
* \param type control type
|
|
* \return a new structure, or 0 on memory exhaustion
|
|
*/
|
|
|
|
struct form_control *form_new_control(form_control_type type)
|
|
{
|
|
struct form_control *control;
|
|
|
|
if ((control = malloc(sizeof *control)) == NULL)
|
|
return NULL;
|
|
control->type = type;
|
|
control->name = NULL;
|
|
control->value = NULL;
|
|
control->initial_value = NULL;
|
|
control->disabled = false;
|
|
control->form = NULL;
|
|
control->box = NULL;
|
|
control->caret_inline_container = NULL;
|
|
control->caret_text_box = NULL;
|
|
control->caret_box_offset = control->caret_form_offset = 0;
|
|
control->length = control->maxlength = 0;
|
|
control->selected = false;
|
|
control->prev = NULL;
|
|
control->next = NULL;
|
|
return control;
|
|
}
|
|
|
|
|
|
/**
|
|
* Add a control to the list of controls in a form.
|
|
*/
|
|
|
|
void form_add_control(struct form *form, struct form_control *control)
|
|
{
|
|
control->form = form;
|
|
if (form->controls != NULL) {
|
|
assert(form->last_control);
|
|
form->last_control->next = control;
|
|
control->prev = form->last_control;
|
|
control->next = NULL;
|
|
form->last_control = control;
|
|
} else {
|
|
form->controls = form->last_control = control;
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Free a struct form_control.
|
|
*
|
|
* \param control structure to free
|
|
*/
|
|
|
|
void form_free_control(struct form_control *control)
|
|
{
|
|
free(control->name);
|
|
free(control->value);
|
|
free(control->initial_value);
|
|
if (control->type == GADGET_SELECT) {
|
|
struct form_option *option, *next;
|
|
for (option = control->data.select.items; option;
|
|
option = next) {
|
|
next = option->next;
|
|
free(option->text);
|
|
free(option->value);
|
|
free(option);
|
|
}
|
|
}
|
|
free(control);
|
|
}
|
|
|
|
|
|
/**
|
|
* Identify 'successful' controls.
|
|
*
|
|
* \param form form to search for successful controls
|
|
* \param submit_button control used to submit the form, if any
|
|
* \parma successful_controls updated to point to linked list of
|
|
* form_successful_control, 0 if no controls
|
|
* \return true on success, false on memory exhaustion
|
|
*
|
|
* See HTML 4.01 section 17.13.2.
|
|
*/
|
|
|
|
bool form_successful_controls(struct form *form,
|
|
struct form_control *submit_button,
|
|
struct form_successful_control **successful_controls)
|
|
{
|
|
struct form_control *control;
|
|
struct form_option *option;
|
|
struct form_successful_control sentinel, *last_success, *success_new;
|
|
char *value;
|
|
|
|
last_success = &sentinel;
|
|
sentinel.next = 0;
|
|
|
|
for (control = form->controls; control; control = control->next) {
|
|
/* ignore disabled controls */
|
|
if (control->disabled)
|
|
continue;
|
|
|
|
/* ignore controls with no name */
|
|
if (!control->name)
|
|
continue;
|
|
|
|
switch (control->type) {
|
|
case GADGET_HIDDEN:
|
|
case GADGET_TEXTBOX:
|
|
case GADGET_PASSWORD:
|
|
value = strdup(control->value);
|
|
if (!value)
|
|
goto no_memory;
|
|
break;
|
|
|
|
case GADGET_RADIO:
|
|
case GADGET_CHECKBOX:
|
|
/* ignore checkboxes and radio buttons which
|
|
* aren't selected */
|
|
if (!control->selected)
|
|
continue;
|
|
value = strdup(control->value);
|
|
if (!value)
|
|
goto no_memory;
|
|
break;
|
|
|
|
case GADGET_SELECT:
|
|
/* select */
|
|
for (option = control->data.select.items;
|
|
option != NULL;
|
|
option = option->next) {
|
|
if (!option->selected)
|
|
continue;
|
|
success_new = malloc(sizeof(*success_new));
|
|
if (!success_new)
|
|
goto no_memory;
|
|
success_new->file = false;
|
|
success_new->name = strdup(control->name);
|
|
success_new->value = strdup(option->value);
|
|
success_new->next = NULL;
|
|
last_success->next = success_new;
|
|
last_success = success_new;
|
|
if (!success_new->name ||
|
|
!success_new->value)
|
|
goto no_memory;
|
|
}
|
|
|
|
continue;
|
|
break;
|
|
|
|
case GADGET_TEXTAREA:
|
|
/* textarea */
|
|
value = form_textarea_value(control);
|
|
if (!value)
|
|
goto no_memory;
|
|
if (value[0] == 0) {
|
|
free(value);
|
|
continue;
|
|
}
|
|
break;
|
|
|
|
case GADGET_IMAGE: {
|
|
/* image */
|
|
const size_t len = strlen(control->name) + 3;
|
|
|
|
/* x */
|
|
success_new = malloc(sizeof(*success_new));
|
|
if (!success_new)
|
|
goto no_memory;
|
|
success_new->file = false;
|
|
success_new->name = malloc(len);
|
|
success_new->value = malloc(20);
|
|
if (!success_new->name ||
|
|
!success_new->value) {
|
|
free(success_new->name);
|
|
free(success_new->value);
|
|
free(success_new);
|
|
goto no_memory;
|
|
}
|
|
sprintf(success_new->name, "%s.x",
|
|
control->name);
|
|
sprintf(success_new->value, "%i",
|
|
control->data.image.mx);
|
|
success_new->next = 0;
|
|
last_success->next = success_new;
|
|
last_success = success_new;
|
|
|
|
/* y */
|
|
success_new = malloc(sizeof(*success_new));
|
|
if (!success_new)
|
|
goto no_memory;
|
|
success_new->file = false;
|
|
success_new->name = malloc(len);
|
|
success_new->value = malloc(20);
|
|
if (!success_new->name ||
|
|
!success_new->value) {
|
|
free(success_new->name);
|
|
free(success_new->value);
|
|
free(success_new);
|
|
goto no_memory;
|
|
}
|
|
sprintf(success_new->name, "%s.y",
|
|
control->name);
|
|
sprintf(success_new->value, "%i",
|
|
control->data.image.my);
|
|
success_new->next = 0;
|
|
last_success->next = success_new;
|
|
last_success = success_new;
|
|
|
|
continue;
|
|
break;
|
|
}
|
|
|
|
case GADGET_SUBMIT:
|
|
/* only the activated submit button is
|
|
* successful */
|
|
if (control != submit_button)
|
|
continue;
|
|
value = strdup(control->value);
|
|
if (!value)
|
|
goto no_memory;
|
|
break;
|
|
|
|
case GADGET_RESET:
|
|
/* ignore reset */
|
|
continue;
|
|
break;
|
|
|
|
case GADGET_FILE:
|
|
/* file */
|
|
if (!control->value)
|
|
continue;
|
|
success_new = malloc(sizeof(*success_new));
|
|
if (!success_new)
|
|
goto no_memory;
|
|
success_new->file = true;
|
|
success_new->name = strdup(control->name);
|
|
success_new->value = strdup(control->value);
|
|
success_new->next = 0;
|
|
last_success->next = success_new;
|
|
last_success = success_new;
|
|
if (!success_new->name || !success_new->value)
|
|
goto no_memory;
|
|
|
|
continue;
|
|
break;
|
|
|
|
default:
|
|
assert(0);
|
|
break;
|
|
}
|
|
|
|
success_new = malloc(sizeof(*success_new));
|
|
if (!success_new)
|
|
goto no_memory;
|
|
success_new->file = false;
|
|
success_new->name = strdup(control->name);
|
|
success_new->value = value;
|
|
success_new->next = NULL;
|
|
last_success->next = success_new;
|
|
last_success = success_new;
|
|
if (!success_new->name)
|
|
goto no_memory;
|
|
}
|
|
|
|
*successful_controls = sentinel.next;
|
|
return true;
|
|
|
|
no_memory:
|
|
warn_user("NoMemory", 0);
|
|
form_free_successful(sentinel.next);
|
|
return false;
|
|
}
|
|
|
|
|
|
/**
|
|
* Find the value for a textarea control.
|
|
*
|
|
* \param textarea control of type GADGET_TEXTAREA
|
|
* \return the value as a UTF-8 string on heap, or 0 on memory exhaustion
|
|
*/
|
|
|
|
char *form_textarea_value(struct form_control *textarea)
|
|
{
|
|
unsigned int len = 0;
|
|
char *value, *s;
|
|
struct box *text_box;
|
|
|
|
/* find required length */
|
|
for (text_box = textarea->box->children->children; text_box;
|
|
text_box = text_box->next) {
|
|
if (text_box->type == BOX_INLINE)
|
|
len += text_box->length + 1;
|
|
else /* BOX_BR */
|
|
len += 2;
|
|
}
|
|
|
|
/* construct value */
|
|
s = value = malloc(len + 1);
|
|
if (!s)
|
|
return 0;
|
|
for (text_box = textarea->box->children->children; text_box;
|
|
text_box = text_box->next) {
|
|
if (text_box->type == BOX_INLINE) {
|
|
strncpy(s, text_box->text, text_box->length);
|
|
s += text_box->length;
|
|
*s++ = ' ';
|
|
} else { /* BOX_BR */
|
|
*s++ = '\r';
|
|
*s++ = '\n';
|
|
}
|
|
}
|
|
*s = 0;
|
|
|
|
return value;
|
|
}
|
|
|
|
|
|
/**
|
|
* Encode controls using application/x-www-form-urlencoded.
|
|
*
|
|
* \param control linked list of form_successful_control
|
|
* \return URL-encoded form, or 0 on memory exhaustion
|
|
*
|
|
* \todo encoding conversion
|
|
*/
|
|
|
|
char *form_url_encode(struct form_successful_control *control)
|
|
{
|
|
char *name, *value;
|
|
char *s = malloc(1), *s2;
|
|
unsigned int len = 0, len1;
|
|
|
|
if (!s)
|
|
return 0;
|
|
s[0] = 0;
|
|
|
|
for (; control; control = control->next) {
|
|
name = curl_escape(control->name, 0);
|
|
value = curl_escape(control->value, 0);
|
|
len1 = len + strlen(name) + strlen(value) + 2;
|
|
s2 = realloc(s, len1 + 1);
|
|
if (!s2) {
|
|
free(s);
|
|
return 0;
|
|
}
|
|
s = s2;
|
|
sprintf(s + len, "%s=%s&", name, value);
|
|
len = len1;
|
|
curl_free(name);
|
|
curl_free(value);
|
|
}
|
|
if (len)
|
|
s[len - 1] = 0;
|
|
return s;
|
|
}
|
|
|
|
|
|
/**
|
|
* Free a linked list of form_successful_control.
|
|
*/
|
|
|
|
void form_free_successful(struct form_successful_control *control)
|
|
{
|
|
struct form_successful_control *next;
|
|
for (; control; control = next) {
|
|
next = control->next;
|
|
free(control->name);
|
|
free(control->value);
|
|
free(control);
|
|
}
|
|
}
|