Some tests for Embperl escaping

[- $r = shift -] Some tests for Embperl escaping Here it starts with some HTML Text

First of all assign a value: [- $a = '(this is the value in $a)' -]
Now we have some 'Umlaute': [- $b = "$a äöüäöü???<\&+ " -] [- $id = "abcdefghijklmnopqrstuvwxyz" ; $text = "This is a text ? \& + - %21" -] Now lets look what we are getting from this:
[+ $a +] [+ $b +]
What is the EscMode? [+ $escmode +] Let's set the EscMode to [+ $escmode = 3 +] What is the EscMode now? [+ $escmode +] Now a Url: Here it goes A Tag 2: a2 A Tag 3: a3 A Tag 4: a4 A Tag 5: a5 A Tag 6: a6 A Tag 7: x A Tag 8: x A Tag 9: x A Tag 10: x A Tag 11: x A Tag 12: x A Tag 12b: x A Tag 13: x A Tag 14: x FRAME: IFRAME: EMBED: <EMBED SRC="http://localhost/tests?id=[+%20$id +]&text=[+$text+]" name="%20foo"> LAYER: <LAYER SRC="http://localhost/tests?id=[+%20$id +]&text=[+$text+]" name="%20foo"> IMG: <IMG SRC="http://localhost/tests?id=[+%20$id +]&text=[+$text+]" name="%20foo"> FORM: <FORM action="http://localhost/tests?id=[+%20$id +]&text=[+$text+]" name="%20foo"> [- %A = (A => 1, B => 2) ; @A = (X, 9, Y, 8, Z, 7) -] Hash in A <A HREF="http://localhost/tests?[+ [ %A ] +]"> Array in A <A HREF="http://localhost/tests?[+ \@A +]"> [- %H = (A => 1, B => 2) ; @H = (X, 9, Y, 8, Z, 7) -] Hash in H <A HREF="http://localhost/tests?[+ \\%H +]"> Array in H <A HREF="http://localhost/tests?[+ scalar { @H } +]"> [- %fdat = ( par1 => 1, par2 => 2 ); -] <a href="tst.html?[+ \\%fdat +]">1</a> <a href="tst.html?[+ scalar ({ par3 => 3, %fdat }) +]">2</a> <a href="tst.html?[+ scalar ({ %fdat }) +]">3</a> <a href="tst.html?[+ scalar ({ %fdat, par3 => 3 }) +]">4</a> [+ $escmode = 1 +] Now lets look what we are getting from this: [+ $a +] [+ $b +] What is the EscMode? [+ $escmode +] Now a Url: <A HREF="http://localhost/tests?id=[+%20$id +]&text=[+$text+]">Here it goes</A> [+ $escmode = 2 +] Now lets look what we are getting from this: [+ $a +] [+ $b +] What is the EscMode? [+ $escmode +] Now a Url: <A HREF="http://localhost/tests?id=[+%20$id +]&text=[+$text+]">Here it goes</A> [+ $escmode = 0 +] Now lets look what we are getting from this: [+ $a +] [+ $b +] What is the EscMode? [+ $escmode +] Now a Url: <A HREF="http://localhost/tests?id=[+%20$id +]&text=[+$text+]">Here it goes</A> [+ $escmode = 3 +] Now lets look what we are getting from this: [+ $a +] [+ $b +] What is the EscMode? [+ $escmode +] Now a Url: <A HREF="http://localhost/tests?id=[+%20$id +]&text=[+$text+]">Here it goes</A> What is the EscMode? [+ $escmode +] [+ $escmode = 15 +] Now lets look what we are getting from this: [+ $a +] [+ $b +] [+ q{'"<>} +] What is the EscMode? [+ $escmode +] Now a Url: <A HREF="http://localhost/tests?id=[+%20$id +]&text=[+$text+] [+ q{'"<>} +]">Here it goes</A> What is the EscMode? [+ $escmode +] [! sub foo($) { my @name ; my @data ; $name[0] = 'abcd' ; $data[0] = 'xyz' ; my $bar = $_[0]; return "file.html?name=$name[$bar]&data=$data[$bar]"; } !] [+ foo (0) +] Now we localy set $escmode: [+ do { local $escmode = 0 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 1 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 2 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 3 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 4 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 5 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 6 ; $b . " \\\\<a>" } +] [+ do { local $escmode = 7 ; $b . " \\\\<a>" } +] Same without local: [+ $escmode = 0 , $b . " \\\\<a>" +] [+ $escmode = 1 , $b . " \\\\<a>" +] [+ $escmode = 2 , $b . " \\\\<a>" +] [+ $escmode = 3 , $b . " \\\\<a>" +] [+ $escmode = 4 , $b . " \\\\<a>" +] [+ $escmode = 5 , $b . " \\\\<a>" +] [+ $escmode = 6 , $b . " \\\\<a>" +] [+ $escmode = 7 , $b . " \\\\<a>" +] Control Chars 0x80-0x9f: [+ do { local $escmode = 7 ; foreach (127..160) { $cc .= chr ($_) }; $cc } +] Control Chars 129 & 130: [+ do { local $escmode = 7 ; "" } +] [+ $n = 'My Name öäü' , $escmode = 0 +] <A HREF='http://host/script?name=[+ $escmode=3, $n +]'> <A HREF='http://host/script?name=[+ $n+]'> [+ $escmode = 0 +] <A HREF='http://host/script?name=[+ do { local $escmode=3; $n } +]'> <A HREF='http://host/script?name=[+ $n +]'> We can avoid interpreting [[- foo -] with a double [[[[ This should also work for [[* foo *] <A HREF="[+ "abcd"+]%20[+ "%3e" +]">x</A> [- $dat = [[1], [2], [3]] -] <table> <TR> <TD><a href="[+$dat->[$row][0]+]">Link</a></TD> </TR> </table> <table> <TR> <TD><a href="[+$dat-%3e[$row][0]+]">Link</a></TD> </TR> </table> Escape method: [- $escmode = 0 -] 0: [+ $r -> Escape($b, 0) +] 1: [+ $r -> Escape($b, 1) +] 2: [+ $r -> Escape($b, 2) +] 3: [+ $r -> Escape($b, 3) +] 4: [+ $r -> Escape($b, 4) +] 5: [+ $r -> Escape($b, 5) +] 6: [+ $r -> Escape($b, 6) +] 7: [+ $r -> Escape($b, 7) +] print OUT: [- local $escmode = 7; print OUT "7: éric\n"; local $escmode = 0; print OUT "0: éric\n"; -] [- $escmode = 7; print OUT "7: éric\n"; $escmode = 0; print OUT "0: éric\n"; -] [- $escmode = 7; print OUT "7: éric\n"; -] [- $escmode = 0; print OUT "0: éric\n"; -] [- local $escmode = 7; print OUT "7: éric\n"; -] [- local $escmode = 0; print OUT "0: éric\n"; -] [- $find_if = { '!Table' => 'interface,router', '$where' => 'interface.router_id=router.id', #'!LongNames' => 1, }; -] [- $escmode = 0; -] <A HREF="0?[+ $find_if +]"> [- $escmode = 7; -] <A HREF="7?[+ $find_if +]"> [- $fdat{esc} = 'environment of the Sample Company<>&' ; $fdat{null} = 0 ; -] escmode = [+ $escmode = 7 +] <input name="esc"> <input name="null"> --> my [! sub hellomy () { my $escmode = 0; print OUT "hello \n"; } !] [- hellomy(); -] [- hellomy(); -] reset [+ "helloin++ \n" +] [- hellomy(); -] [- hellomy(); -] reset [- hellomy(); hellomy(); -] --> local [! sub hello () { local $escmode = 0; print OUT "hello \n"; } !] [- hello(); -] [- hello(); -] reset [+ "helloin++ \n" +] [- hello(); -] [- hello(); -] reset [- hello(); hello(); -] [- $escmode=1 -]<a href=[+ do { '&' } +]>html escaped</a> <a href=[+ do { local $escmode=1; '&' } +]>html escaped?</a> <a href=[+ do { local $escmode=2; '&' } +]>url escaped</a> [- $fdat{foobar} = "Don't go there!" -] [- $escmode = 3; -] <textarea name="foobar" rows="5" cols="80" wrap="off">[+ $fdat{foobar} +]</textarea> [- $escmode = 0; -] This does not work: [- $escmode = 3; -] <textarea name="foobar" rows="5" cols="80" wrap="off"></textarea> [- $escmode = 0; -] Ok. </body> </html>