mirror of
https://github.com/yusing/godoxy.git
synced 2025-05-20 12:42:34 +02:00
334 lines
7.3 KiB
Go
334 lines
7.3 KiB
Go
package json
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"reflect"
|
|
"unicode/utf8"
|
|
)
|
|
|
|
// Copyright 2016 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
//
|
|
// safeSet, htmlSafeSet, hex and AppendString are copied from encoding/json.
|
|
|
|
// safeSet holds the value true if the ASCII character with the given array
|
|
// position can be represented inside a JSON string without any further
|
|
// escaping.
|
|
//
|
|
// All values are true except for the ASCII control characters (0-31), the
|
|
// double quote ("), and the backslash character ("\").
|
|
var safeSet = [utf8.RuneSelf]bool{
|
|
' ': true,
|
|
'!': true,
|
|
'"': false,
|
|
'#': true,
|
|
'$': true,
|
|
'%': true,
|
|
'&': true,
|
|
'\'': true,
|
|
'(': true,
|
|
')': true,
|
|
'*': true,
|
|
'+': true,
|
|
',': true,
|
|
'-': true,
|
|
'.': true,
|
|
'/': true,
|
|
'0': true,
|
|
'1': true,
|
|
'2': true,
|
|
'3': true,
|
|
'4': true,
|
|
'5': true,
|
|
'6': true,
|
|
'7': true,
|
|
'8': true,
|
|
'9': true,
|
|
':': true,
|
|
';': true,
|
|
'<': true,
|
|
'=': true,
|
|
'>': true,
|
|
'?': true,
|
|
'@': true,
|
|
'A': true,
|
|
'B': true,
|
|
'C': true,
|
|
'D': true,
|
|
'E': true,
|
|
'F': true,
|
|
'G': true,
|
|
'H': true,
|
|
'I': true,
|
|
'J': true,
|
|
'K': true,
|
|
'L': true,
|
|
'M': true,
|
|
'N': true,
|
|
'O': true,
|
|
'P': true,
|
|
'Q': true,
|
|
'R': true,
|
|
'S': true,
|
|
'T': true,
|
|
'U': true,
|
|
'V': true,
|
|
'W': true,
|
|
'X': true,
|
|
'Y': true,
|
|
'Z': true,
|
|
'[': true,
|
|
'\\': false,
|
|
']': true,
|
|
'^': true,
|
|
'_': true,
|
|
'`': true,
|
|
'a': true,
|
|
'b': true,
|
|
'c': true,
|
|
'd': true,
|
|
'e': true,
|
|
'f': true,
|
|
'g': true,
|
|
'h': true,
|
|
'i': true,
|
|
'j': true,
|
|
'k': true,
|
|
'l': true,
|
|
'm': true,
|
|
'n': true,
|
|
'o': true,
|
|
'p': true,
|
|
'q': true,
|
|
'r': true,
|
|
's': true,
|
|
't': true,
|
|
'u': true,
|
|
'v': true,
|
|
'w': true,
|
|
'x': true,
|
|
'y': true,
|
|
'z': true,
|
|
'{': true,
|
|
'|': true,
|
|
'}': true,
|
|
'~': true,
|
|
'\u007f': true,
|
|
}
|
|
|
|
// htmlSafeSet holds the value true if the ASCII character with the given
|
|
// array position can be safely represented inside a JSON string, embedded
|
|
// inside of HTML <script> tags, without any additional escaping.
|
|
//
|
|
// All values are true except for the ASCII control characters (0-31), the
|
|
// double quote ("), the backslash character ("\"), HTML opening and closing
|
|
// tags ("<" and ">"), and the ampersand ("&").
|
|
var htmlSafeSet = [utf8.RuneSelf]bool{
|
|
' ': true,
|
|
'!': true,
|
|
'"': false,
|
|
'#': true,
|
|
'$': true,
|
|
'%': true,
|
|
'&': false,
|
|
'\'': true,
|
|
'(': true,
|
|
')': true,
|
|
'*': true,
|
|
'+': true,
|
|
',': true,
|
|
'-': true,
|
|
'.': true,
|
|
'/': true,
|
|
'0': true,
|
|
'1': true,
|
|
'2': true,
|
|
'3': true,
|
|
'4': true,
|
|
'5': true,
|
|
'6': true,
|
|
'7': true,
|
|
'8': true,
|
|
'9': true,
|
|
':': true,
|
|
';': true,
|
|
'<': false,
|
|
'=': true,
|
|
'>': false,
|
|
'?': true,
|
|
'@': true,
|
|
'A': true,
|
|
'B': true,
|
|
'C': true,
|
|
'D': true,
|
|
'E': true,
|
|
'F': true,
|
|
'G': true,
|
|
'H': true,
|
|
'I': true,
|
|
'J': true,
|
|
'K': true,
|
|
'L': true,
|
|
'M': true,
|
|
'N': true,
|
|
'O': true,
|
|
'P': true,
|
|
'Q': true,
|
|
'R': true,
|
|
'S': true,
|
|
'T': true,
|
|
'U': true,
|
|
'V': true,
|
|
'W': true,
|
|
'X': true,
|
|
'Y': true,
|
|
'Z': true,
|
|
'[': true,
|
|
'\\': false,
|
|
']': true,
|
|
'^': true,
|
|
'_': true,
|
|
'`': true,
|
|
'a': true,
|
|
'b': true,
|
|
'c': true,
|
|
'd': true,
|
|
'e': true,
|
|
'f': true,
|
|
'g': true,
|
|
'h': true,
|
|
'i': true,
|
|
'j': true,
|
|
'k': true,
|
|
'l': true,
|
|
'm': true,
|
|
'n': true,
|
|
'o': true,
|
|
'p': true,
|
|
'q': true,
|
|
'r': true,
|
|
's': true,
|
|
't': true,
|
|
'u': true,
|
|
'v': true,
|
|
'w': true,
|
|
'x': true,
|
|
'y': true,
|
|
'z': true,
|
|
'{': true,
|
|
'|': true,
|
|
'}': true,
|
|
'~': true,
|
|
'\u007f': true,
|
|
}
|
|
|
|
const hex = "0123456789abcdef"
|
|
|
|
// String returns a quoted, escaped string or []byte.
|
|
func String[Bytes []byte | string](src Bytes) string {
|
|
return string(AppendString(nil, src))
|
|
}
|
|
|
|
// AppendString append a quoted, escaped string or []byte to dst.
|
|
func AppendString[Bytes []byte | string](dst []byte, src Bytes) []byte {
|
|
dst = append(dst, '"')
|
|
start := 0
|
|
for i := 0; i < len(src); {
|
|
if b := src[i]; b < utf8.RuneSelf {
|
|
if htmlSafeSet[b] || safeSet[b] {
|
|
i++
|
|
continue
|
|
}
|
|
dst = append(dst, src[start:i]...)
|
|
switch b {
|
|
case '\\', '"':
|
|
dst = append(dst, '\\', b)
|
|
case '\b':
|
|
dst = append(dst, '\\', 'b')
|
|
case '\f':
|
|
dst = append(dst, '\\', 'f')
|
|
case '\n':
|
|
dst = append(dst, '\\', 'n')
|
|
case '\r':
|
|
dst = append(dst, '\\', 'r')
|
|
case '\t':
|
|
dst = append(dst, '\\', 't')
|
|
default:
|
|
// This encodes bytes < 0x20 except for \b, \f, \n, \r and \t.
|
|
// If escapeHTML is set, it also escapes <, >, and &
|
|
// because they can lead to security holes when
|
|
// user-controlled strings are rendered into JSON
|
|
// and served to some browsers.
|
|
dst = append(dst, '\\', 'u', '0', '0', hex[b>>4], hex[b&0xF])
|
|
}
|
|
i++
|
|
start = i
|
|
continue
|
|
}
|
|
// TODO(https://go.dev/issue/56948): Use generic utf8 functionality.
|
|
// For now, cast only a small portion of byte slices to a string
|
|
// so that it can be stack allocated. This slows down []byte slightly
|
|
// due to the extra copy, but keeps string performance roughly the same.
|
|
n := len(src) - i
|
|
if n > utf8.UTFMax {
|
|
n = utf8.UTFMax
|
|
}
|
|
c, size := utf8.DecodeRuneInString(string(src[i : i+n]))
|
|
if c == utf8.RuneError && size == 1 {
|
|
dst = append(dst, src[start:i]...)
|
|
dst = append(dst, `\ufffd`...)
|
|
i += size
|
|
start = i
|
|
continue
|
|
}
|
|
// U+2028 is LINE SEPARATOR.
|
|
// U+2029 is PARAGRAPH SEPARATOR.
|
|
// They are both technically valid characters in JSON strings,
|
|
// but don't work in JSONP, which has to be evaluated as JavaScript,
|
|
// and can lead to security holes there. It is valid JSON to
|
|
// escape them, so we do so unconditionally.
|
|
// See https://en.wikipedia.org/wiki/JSON#Safety.
|
|
if c == '\u2028' || c == '\u2029' {
|
|
dst = append(dst, src[start:i]...)
|
|
dst = append(dst, '\\', 'u', '2', '0', '2', hex[c&0xF])
|
|
i += size
|
|
start = i
|
|
continue
|
|
}
|
|
i += size
|
|
}
|
|
dst = append(dst, src[start:]...)
|
|
dst = append(dst, '"')
|
|
return dst
|
|
}
|
|
|
|
func appendString(v reflect.Value, buf []byte) []byte {
|
|
return AppendString(buf, v.String())
|
|
}
|
|
|
|
var (
|
|
typeStringSlice = reflect.TypeOf([]string{})
|
|
typeBytes = reflect.TypeOf([]byte{})
|
|
)
|
|
|
|
func appendStringSlice(v reflect.Value, buf []byte) []byte {
|
|
str := v.Convert(typeStringSlice).Interface().([]string)
|
|
buf = append(buf, '[')
|
|
oldN := len(buf)
|
|
for _, s := range str {
|
|
buf = AppendString(buf, s)
|
|
buf = append(buf, ',')
|
|
}
|
|
n := len(buf)
|
|
if oldN != n {
|
|
buf = buf[:n-1]
|
|
}
|
|
return append(buf, ']')
|
|
}
|
|
|
|
func appendBytesAsBase64(v reflect.Value, buf []byte) []byte {
|
|
buf = append(buf, '"')
|
|
buf = base64.StdEncoding.AppendEncode(buf, v.Convert(typeBytes).Interface().([]byte))
|
|
return append(buf, '"')
|
|
}
|