blob: ae81fbb1e57091dcbb0698ad465b1449d3b2c227 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
package Apache::Inject::Handler;
use 5.010000;
use strict;
use mod_perl2;
use Apache2::Const qw/OK DECLINED/;
use Apache2::Log ();
use Apache2::RequestRec ();
use Apache2::RequestUtil ();
my $doc = qr{
\A
(?<head> \s*
( <!-- .*? --> )? \s*
( <!doctype[^>]*> )? \s*
( <!-- .*? --> )? \s*
( <html[^>]*> )? \s*
( <!-- .*? --> )? \s*
( <head[^>]*> .*? </head> \s*
| ( <meta[^>]*> \s*
| <link[^>]*> \s*
| <title[^>]*> .*? </title> \s*
| <style[^>]*> .*? </style> \s*
| <script[^>]*> .*? </script> \s*
| <base[^>]*> \s*
| <!-- .*? --> \s*
)+
)?
( <!-- .*? --> )? \s*
( <body[^>]*> )? \s*
)?
(?<body> .*? )
(?<rest> </html> \s*
( <!-- .*? --> )? \s*
)?
\z
}xmsi;
sub handler {
my $r = shift;
return DECLINED if not $r->content_type eq 'text/html';
my $content = ${$r->slurp_filename};
return DECLINED if not $content =~ /$doc/;
if (not $r->document_root) {
$r->warn('Inject: Declining request due to empty document root');
return DECLINED;
}
print $+{head} if $+{head};
inject($r, "InjectHead");
print $+{body} if $+{body};
inject($r, "InjectFoot");
print $+{rest} if $+{rest};
return OK;
}
sub inject {
my ($r, $var) = @_;
# Retrieve value implicitly set by Inject directive
return if not (my $val = $r->dir_config($var));
return if $val eq '-'; # special value signifying absence of argument
# Validate path
if ($val =~ m{^/}) {
$r->log_error("Inject: $var should not begin with slash, as it is already always relative to document root");
}
if ($val =~ m{^../|/../|/..$}) {
$r->log_error("Inject: $var cannot extend past document root");
return;
}
# note: document root has been confirmed not to be empty
my $root = $r->document_root;
# Read contents of specified file
open my $fh, '<', "$root/$val" or do {
$r->log_error("Inject: $var $root/$val does not exist");
return;
};
print for <$fh>;
close $fh;
}
1;
|