Module: CGI::Escape

# File 'lib/cgi/escape.rb', line 229

alias escape_element escapeElement

# File 'lib/cgi/escape.rb', line 63

alias escape_uri_component escapeURIComponent

# File 'lib/cgi/escape.rb', line 198

def escapeElement(string, *elements)
  elements = elements[0] if elements[0].kind_of?(Array)
  unless elements.empty?
    string.gsub(/<\/?(?:#{elements.join("|")})\b[^<>]*+>?/im) do
      CGI.escapeHTML($&)
    end
  else
    string
  end
end

# File 'lib/cgi/escape.rb', line 91

def escapeHTML(string)
  enc = string.encoding
  unless enc.ascii_compatible?
    if enc.dummy?
      origenc = enc
      enc = Encoding::Converter.asciicompat_encoding(enc)
      string = enc ? string.encode(enc) : string.b
    end
    table = Hash[TABLE_FOR_ESCAPE_HTML__.map {|pair|pair.map {|s|s.encode(enc)}}]
    string = string.gsub(/#{"['&\"<>]".encode(enc)}/, table)
    string.encode!(origenc) if origenc
    string
  else
    string = string.b
    string.gsub!(/['&\"<>]/, TABLE_FOR_ESCAPE_HTML__)
    string.force_encoding(enc)
  end
end

# File 'lib/cgi/escape.rb', line 55

def escapeURIComponent(string)
  encoding = string.encoding
  buffer = string.b
  buffer.gsub!(/([^a-zA-Z0-9_.\-~]+)/) do |m|
    '%' + m.unpack('H2' * m.bytesize).join('%').upcase
  end
  buffer.force_encoding(encoding)
end

# File 'lib/cgi/escape.rb', line 41

def unescape(string, encoding = @@accept_charset)
  str = string.tr('+', ' ')
  str = str.b
  str.gsub!(/((?:%[0-9a-fA-F]{2})+)/) do |m|
    [m.delete('%')].pack('H*')
  end
  str.force_encoding(encoding)
  str.valid_encoding? ? str : str.force_encoding(string.encoding)
end

# File 'lib/cgi/escape.rb', line 231

alias unescape_element unescapeElement

# File 'lib/cgi/escape.rb', line 77

alias unescape_uri_component unescapeURIComponent

# File 'lib/cgi/escape.rb', line 218

def unescapeElement(string, *elements)
  elements = elements[0] if elements[0].kind_of?(Array)
  unless elements.empty?
    string.gsub(/<\/?(?:#{elements.join("|")})\b(?>[^&]|&(?![gl]t;)\w;)*(?:>)?/im) do
      unescapeHTML($&)
    end
  else
    string
  end
end

# File 'lib/cgi/escape.rb', line 113

def unescapeHTML(string)
  enc = string.encoding
  unless enc.ascii_compatible?
    if enc.dummy?
      origenc = enc
      enc = Encoding::Converter.asciicompat_encoding(enc)
      string = enc ? string.encode(enc) : string.b
    end
    string = string.gsub(Regexp.new('&(apos|amp|quot|gt|lt|#[0-9]|#x[0-9A-Fa-f]);'.encode(enc))) do
      case $1.encode(Encoding::US_ASCII)
      when 'apos'                then "'".encode(enc)
      when 'amp'                 then '&'.encode(enc)
      when 'quot'                then '"'.encode(enc)
      when 'gt'                  then '>'.encode(enc)
      when 'lt'                  then '<'.encode(enc)
      when /\A#0*(\d+)\z/        then $1.to_i.chr(enc)
      when /\A#x([0-9a-f]+)\z/i  then $1.hex.chr(enc)
      end
    end
    string.encode!(origenc) if origenc
    return string
  end
  return string unless string.include? '&'
  charlimit = case enc
              when Encoding::UTF_8; 0x10ffff
              when Encoding::ISO_8859_1; 256
              else 128
              end
  string = string.b
  string.gsub!(/&(apos|amp|quot|gt|lt|\#[0-9]|\#[xX][0-9A-Fa-f]);/) do
    match = $1
    case match
    when 'apos'                then "'"
    when 'amp'                 then '&'
    when 'quot'                then '"'
    when 'gt'                  then '>'
    when 'lt'                  then '<'
    else
      # Numeric character reference. Decode into the binary buffer so that a
      # non-ASCII byte already present in it never triggers an encoding
      # compatibility error on concatenation; the trailing force_encoding
      # re-tags the whole buffer. This mirrors the C extension's
      # optimized_unescape_html.
      n = match.start_with?('#x', '#X') ? match[2..-1].hex : match[1..-1].to_i
      if n >= charlimit
        "&#{match};"            # out of range: keep the reference verbatim
      elsif charlimit > 256
        [n].pack('U').b         # UTF-8: code point bytes, surrogates included (like rb_enc_mbcput)
      else
        n.chr.b                 # ISO-8859-1 / ASCII: single byte
      end
    end
  end
  string.force_encoding enc
end

# File 'lib/cgi/escape.rb', line 68

def unescapeURIComponent(string, encoding = @@accept_charset)
  str = string.b
  str.gsub!(/((?:%[0-9a-fA-F]{2})+)/) do |m|
    [m.delete('%')].pack('H*')
  end
  str.force_encoding(encoding)
  str.valid_encoding? ? str : str.force_encoding(string.encoding)
end