From 6cdcc8b8e11cb88d04b7b149e97b6ceffcfe2d3e Mon Sep 17 00:00:00 2001
From: "Edward Z. Yang" <edwardzyang@thewritingpot.com>
Date: Wed, 5 Mar 2008 05:03:01 +0000
Subject: [PATCH] Implement native VarParser.

git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@1604 48356398-32a2-884e-a903-53898d9a118a
---
 library/HTMLPurifier.includes.php           |  1 +
 library/HTMLPurifier/VarParser/Native.php   | 25 +++++++++++++++++++++
 tests/HTMLPurifier/VarParser/NativeTest.php | 10 +++++++++
 3 files changed, 36 insertions(+)
 create mode 100644 library/HTMLPurifier/VarParser/Native.php
 create mode 100644 tests/HTMLPurifier/VarParser/NativeTest.php

diff --git a/library/HTMLPurifier.includes.php b/library/HTMLPurifier.includes.php
index b8bf41f5..992c2dd7 100644
--- a/library/HTMLPurifier.includes.php
+++ b/library/HTMLPurifier.includes.php
@@ -201,3 +201,4 @@ require 'HTMLPurifier/URIScheme/mailto.php';
 require 'HTMLPurifier/URIScheme/news.php';
 require 'HTMLPurifier/URIScheme/nntp.php';
 require 'HTMLPurifier/VarParser/Flexible.php';
+require 'HTMLPurifier/VarParser/Native.php';
diff --git a/library/HTMLPurifier/VarParser/Native.php b/library/HTMLPurifier/VarParser/Native.php
new file mode 100644
index 00000000..3bfa90ae
--- /dev/null
+++ b/library/HTMLPurifier/VarParser/Native.php
@@ -0,0 +1,25 @@
+<?php
+
+/**
+ * This variable parser uses PHP's internal code engine. Because it does
+ * this, it can represent all inputs; however, it is dangerous and cannot
+ * be used by users.
+ */
+class HTMLPurifier_VarParser_Native extends HTMLPurifier_VarParser
+{
+    
+    protected function parseImplementation($var, $type, $allow_null) {
+        return $this->evalExpression($var);
+    }
+    
+    protected function evalExpression($expr) {
+        $var = null;
+        $result = eval("\$var = $expr;");
+        if ($result === false) {
+            throw new HTMLPurifier_VarParserException("Fatal error in evaluated code");
+        }
+        return $var;
+    }
+    
+}
+
diff --git a/tests/HTMLPurifier/VarParser/NativeTest.php b/tests/HTMLPurifier/VarParser/NativeTest.php
new file mode 100644
index 00000000..7d75b503
--- /dev/null
+++ b/tests/HTMLPurifier/VarParser/NativeTest.php
@@ -0,0 +1,10 @@
+<?php
+
+class HTMLPurifier_VarParser_NativeTest extends HTMLPurifier_VarParserHarness
+{
+    
+    public function testValidateSimple() {
+        $this->assertValid('"foo\\\\"', 'string', 'foo\\');
+    }
+    
+}