caido-convert 1.0.0

Encoding library for web security applications
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

#[cfg(target_family = "wasm")]
use serde::{Deserialize, Serialize};

use crate::Operation;
use crate::OperationError;

#[derive(Clone)]
#[cfg_attr(target_family = "wasm", derive(Serialize, Deserialize))]
pub struct HtmlDecode {}

// Inspired by this https://doc.rust-lang.org/stable/nightly-rustc/src/rustdoc/html/escape.rs.html#1-40
// and this http://stackoverflow.com/questions/7381974
impl Operation for HtmlDecode {
    fn execute(&self, input: &[u8]) -> Result<Vec<u8>, OperationError> {
        let mut decoded = vec![];
        let mut i = 0;
        while i < input.len() {
            if let Some(window) = input.get(i..i + 4) {
                match window {
                    b"&gt;" => {
                        decoded.push(b'>');
                        i += 4;
                        continue;
                    }
                    b"&lt;" => {
                        decoded.push(b'<');
                        i += 4;
                        continue;
                    }
                    _ => (),
                };
            }
            if let Some(window) = input.get(i..i + 5) {
                match window {
                    b"&amp;" => {
                        decoded.push(b'&');
                        i += 5;
                        continue;
                    }
                    b"&#39;" => {
                        decoded.push(b'\\');
                        i += 5;
                        continue;
                    }

                    _ => (),
                }
            }
            if let Some(window) = input.get(i..i + 6) {
                if window == b"&quot;" {
                    decoded.push(b'"');
                    i += 6;
                    continue;
                }
            }
            decoded.push(input[i]);
            i += 1;
        }
        Ok(decoded)
    }
}

impl HtmlDecode {
    pub fn new() -> Self {
        HtmlDecode {}
    }
}

#[derive(Clone)]
#[cfg_attr(target_family = "wasm", derive(Serialize, Deserialize))]
pub struct HtmlEncode {}

impl Operation for HtmlEncode {
    fn execute(&self, input: &[u8]) -> Result<Vec<u8>, OperationError> {
        let mut encoded = vec![];
        for ch in input {
            match ch {
                b'>' => encoded.extend_from_slice(b"&gt;"),
                b'<' => encoded.extend_from_slice(b"&lt;"),
                b'&' => encoded.extend_from_slice(b"&amp;"),
                b'\\' => encoded.extend_from_slice(b"&#39;"),
                b'"' => encoded.extend_from_slice(b"&quot;"),
                byte => encoded.push(*byte),
            };
        }
        Ok(encoded)
    }
}

impl HtmlEncode {
    pub fn new() -> Self {
        HtmlEncode {}
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn url_decode() {
        let encoder = HtmlDecode::new();
        let actual = encoder
            .execute(b"&#39;&amp;&lt;script&gt;alert(1)&lt;/script&gt;a&quot;")
            .unwrap();
        let expected = b"\\&<script>alert(1)</script>a\"".to_vec();
        assert_eq!(actual, expected);
    }

    #[test]
    fn url_encode() {
        let encoder = HtmlEncode::new();
        let actual = encoder.execute(b"\\&<script>alert(1)</script>a\"").unwrap();
        let expected = b"&#39;&amp;&lt;script&gt;alert(1)&lt;/script&gt;a&quot;".to_vec();
        assert_eq!(actual, expected);
    }
}