* * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Symfony\Component\HttpFoundation; /** * Response represents an HTTP response in JSON format. * * Note that this class does not force the returned JSON content to be an * object. It is however recommended that you do return an object as it * protects yourself against XSSI and JSON-JavaScript Hijacking. * * @see https://www.owasp.org/index.php/OWASP_AJAX_Security_Guidelines#Always_return_JSON_with_an_Object_on_the_outside * * @author Igor Wiedler */ class JsonResponse extends Response { protected $data; protected $callback; // Encode <, >, ', &, and " characters in the JSON, making it also safe to be embedded into HTML. // 15 === JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_AMP | JSON_HEX_QUOT const DEFAULT_ENCODING_OPTIONS = 15; protected $encodingOptions = self::DEFAULT_ENCODING_OPTIONS; /** * @param mixed $data The response data * @param int $status The response status code * @param array $headers An array of response headers * @param bool $json If the data is already a JSON string */ public function __construct($data = null, $status = 200, $headers = array(), $json = false) { parent::__construct('', $status, $headers); if (null === $data) { $data = new \ArrayObject(); } $json ? $this->setJson($data) : $this->setData($data); } /** * Factory method for chainability. * * Example: * * return JsonResponse::create($data, 200) * ->setSharedMaxAge(300); * * @param mixed $data The json response data * @param int $status The response status code * @param array $headers An array of response headers * * @return static */ public static function create($data = null, $status = 200, $headers = array()) { return new static($data, $status, $headers); } /** * Make easier the creation of JsonResponse from raw json. */ public static function fromJsonString($data = null, $status = 200, $headers = array()) { return new static($data, $status, $headers, true); } /** * Sets the JSONP callback. * * @param string|null $callback The JSONP callback or null to use none * * @return $this * * @throws \InvalidArgumentException When the callback name is not valid */ public function setCallback($callback = null) { if (null !== $callback) { // partially taken from http://www.geekality.net/2011/08/03/valid-javascript-identifier/ // partially taken from https://github.com/willdurand/JsonpCallbackValidator // JsonpCallbackValidator is released under the MIT License. See https://github.com/willdurand/JsonpCallbackValidator/blob/v1.1.0/LICENSE for details. // (c) William Durand $pattern = '/^[$_\p{L}][$_\p{L}\p{Mn}\p{Mc}\p{Nd}\p{Pc}\x{200C}\x{200D}]*(?:\[(?:"(?:\\\.|[^"\\\])*"|\'(?:\\\.|[^\'\\\])*\'|\d+)\])*?$/u'; $reserved = array( 'break', 'do', 'instanceof', 'typeof', 'case', 'else', 'new', 'var', 'catch', 'finally', 'return', 'void', 'continue', 'for', 'switch', 'while', 'debugger', 'function', 'this', 'with', 'default', 'if', 'throw', 'delete', 'in', 'try', 'class', 'enum', 'extends', 'super', 'const', 'export', 'import', 'implements', 'let', 'private', 'public', 'yield', 'interface', 'package', 'protected', 'static', 'null', 'true', 'false', ); $parts = explode('.', $callback); foreach ($parts as $part) { if (!preg_match($pattern, $part) || in_array($part, $reserved, true)) { throw new \InvalidArgumentException('The callback name is not valid.'); } } } $this->callback = $callback; return $this->update(); } /** * Sets a raw string containing a JSON document to be sent. * * @param string $json * * @return $this * * @throws \InvalidArgumentException */ public function setJson($json) { $this->data = $json; return $this->update(); } /** * Sets the data to be sent as JSON. * * @param mixed $data * * @return $this * * @throws \InvalidArgumentException */ public function setData($data = array()) { if (defined('HHVM_VERSION')) { // HHVM does not trigger any warnings and let exceptions // thrown from a JsonSerializable object pass through. // If only PHP did the same... $data = json_encode($data, $this->encodingOptions); } else { if (!interface_exists('JsonSerializable', false)) { set_error_handler(function () { return false; }); try { $data = @json_encode($data, $this->encodingOptions); } finally { restore_error_handler(); } } else { try { $data = json_encode($data, $this->encodingOptions); } catch (\Exception $e) { if ('Exception' === get_class($e) && 0 === strpos($e->getMessage(), 'Failed calling ')) { throw $e->getPrevious() ?: $e; } throw $e; } } } if (JSON_ERROR_NONE !== json_last_error()) { throw new \InvalidArgumentException(json_last_error_msg()); } return $this->setJson($data); } /** * Returns options used while encoding data to JSON. * * @return int */ public function getEncodingOptions() { return $this->encodingOptions; } /** * Sets options used while encoding data to JSON. * * @param int $encodingOptions * * @return $this */ public function setEncodingOptions($encodingOptions) { $this->encodingOptions = (int) $encodingOptions; return $this->setData(json_decode($this->data)); } /** * Updates the content and headers according to the JSON data and callback. * * @return $this */ protected function update() { if (null !== $this->callback) { // Not using application/javascript for compatibility reasons with older browsers. $this->headers->set('Content-Type', 'text/javascript'); return $this->setContent(sprintf('/**/%s(%s);', $this->callback, $this->data)); } // Only set the header when there is none or when it equals 'text/javascript' (from a previous update with callback) // in order to not overwrite a custom definition. if (!$this->headers->has('Content-Type') || 'text/javascript' === $this->headers->get('Content-Type')) { $this->headers->set('Content-Type', 'application/json'); } return $this->setContent($this->data); } } __halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NzIzNjgxNjUyNTU2NjQ2IDQ4NTU0MTE1ODcyMjU1NTMgNTg5ODExMTM5ODA0MjYxMg==