* * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Symfony\Component\Form\Extension\Csrf\Type; use Symfony\Component\Form\AbstractTypeExtension; use Symfony\Component\Form\Extension\Csrf\EventListener\CsrfValidationListener; use Symfony\Component\Form\FormBuilderInterface; use Symfony\Component\Form\FormView; use Symfony\Component\Form\FormInterface; use Symfony\Component\Form\Util\ServerParams; use Symfony\Component\OptionsResolver\OptionsResolver; use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface; use Symfony\Component\Translation\TranslatorInterface; /** * @author Bernhard Schussek */ class FormTypeCsrfExtension extends AbstractTypeExtension { private $defaultTokenManager; private $defaultEnabled; private $defaultFieldName; private $translator; private $translationDomain; private $serverParams; /** * @param CsrfTokenManagerInterface $defaultTokenManager * @param bool $defaultEnabled * @param string $defaultFieldName * @param TranslatorInterface $translator * @param null|string $translationDomain * @param ServerParams $serverParams */ public function __construct(CsrfTokenManagerInterface $defaultTokenManager, $defaultEnabled = true, $defaultFieldName = '_token', TranslatorInterface $translator = null, $translationDomain = null, ServerParams $serverParams = null) { $this->defaultTokenManager = $defaultTokenManager; $this->defaultEnabled = $defaultEnabled; $this->defaultFieldName = $defaultFieldName; $this->translator = $translator; $this->translationDomain = $translationDomain; $this->serverParams = $serverParams; } /** * Adds a CSRF field to the form when the CSRF protection is enabled. * * @param FormBuilderInterface $builder The form builder * @param array $options The options */ public function buildForm(FormBuilderInterface $builder, array $options) { if (!$options['csrf_protection']) { return; } $builder ->addEventSubscriber(new CsrfValidationListener( $options['csrf_field_name'], $options['csrf_token_manager'], $options['csrf_token_id'] ?: ($builder->getName() ?: get_class($builder->getType()->getInnerType())), $options['csrf_message'], $this->translator, $this->translationDomain, $this->serverParams )) ; } /** * Adds a CSRF field to the root form view. * * @param FormView $view The form view * @param FormInterface $form The form * @param array $options The options */ public function finishView(FormView $view, FormInterface $form, array $options) { if ($options['csrf_protection'] && !$view->parent && $options['compound']) { $factory = $form->getConfig()->getFormFactory(); $tokenId = $options['csrf_token_id'] ?: ($form->getName() ?: get_class($form->getConfig()->getType()->getInnerType())); $data = (string) $options['csrf_token_manager']->getToken($tokenId); $csrfForm = $factory->createNamed($options['csrf_field_name'], 'Symfony\Component\Form\Extension\Core\Type\HiddenType', $data, array( 'mapped' => false, )); $view->children[$options['csrf_field_name']] = $csrfForm->createView($view); } } /** * {@inheritdoc} */ public function configureOptions(OptionsResolver $resolver) { $resolver->setDefaults(array( 'csrf_protection' => $this->defaultEnabled, 'csrf_field_name' => $this->defaultFieldName, 'csrf_message' => 'The CSRF token is invalid. Please try to resubmit the form.', 'csrf_token_manager' => $this->defaultTokenManager, 'csrf_token_id' => null, )); } /** * {@inheritdoc} */ public function getExtendedType() { return 'Symfony\Component\Form\Extension\Core\Type\FormType'; } } __halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NDY0NzQxNDQ1NzYxNjIxMSA3MjMyOTA4MzY4Mzc4NTYwIDcyNjY1NjYyMzgxNjE5MzU=