Code Coverage |
||||||||||
Lines |
Functions and Methods |
Classes and Traits |
||||||||
| Total | |
74.36% |
58 / 78 |
|
54.55% |
6 / 11 |
CRAP | |
0.00% |
0 / 1 |
| AntiSpoof | |
74.36% |
58 / 78 |
|
54.55% |
6 / 11 |
60.08 | |
0.00% |
0 / 1 |
| getEquivSet | |
100.00% |
3 / 3 |
|
100.00% |
1 / 1 |
2 | |||
| getScriptCode | |
75.00% |
3 / 4 |
|
0.00% |
0 / 1 |
4.25 | |||
| isSubsetOf | |
100.00% |
1 / 1 |
|
100.00% |
1 / 1 |
1 | |||
| isAllowedScriptCombination | |
75.00% |
3 / 4 |
|
0.00% |
0 / 1 |
3.14 | |||
| stringToList | |
85.71% |
6 / 7 |
|
0.00% |
0 / 1 |
3.03 | |||
| listToString | |
100.00% |
4 / 4 |
|
100.00% |
1 / 1 |
2 | |||
| hardjoin | |
100.00% |
1 / 1 |
|
100.00% |
1 / 1 |
1 | |||
| normalizeString | |
100.00% |
1 / 1 |
|
100.00% |
1 / 1 |
1 | |||
| stripScript | |
100.00% |
6 / 6 |
|
100.00% |
1 / 1 |
3 | |||
| badCharErr | |
0.00% |
0 / 8 |
|
0.00% |
0 / 1 |
12 | |||
| checkUnicodeStringStatus | |
76.92% |
30 / 39 |
|
0.00% |
0 / 1 |
16.41 | |||
| 1 | <?php |
| 2 | declare( strict_types=1 ); |
| 3 | /** |
| 4 | * AntiSpoof.php |
| 5 | * Username spoofing prevention for MediaWiki |
| 6 | * Version 0.04 |
| 7 | * |
| 8 | * Copyright (C) Neil Harris 2006 |
| 9 | * Python->PHP conversion by Brooke Vibber <bvibber@pobox.com> |
| 10 | * |
| 11 | * 2006-06-30 Handles non-CJK scripts as per UTR #39 + my extensions |
| 12 | * 2006-07-01 Now handles Simplified <-> Traditional Chinese rules, as |
| 13 | * per JET Guidelines for Internationalized Domain Names, |
| 14 | * and the ICANN language registry values for .cn |
| 15 | * 2006-09-14 Now handles 'rn' etc better, and uses stdin for input |
| 16 | * 2006-09-18 Added exception handling for nasty cases, eg BiDi violations |
| 17 | * 2006-09-19 Converted to PHP for easier integration into a MW extension |
| 18 | * |
| 19 | * This program is free software; you can redistribute it and/or modify |
| 20 | * it under the terms of the GNU General Public License as published by |
| 21 | * the Free Software Foundation; either version 2 of the License, or |
| 22 | * (at your option) any later version. |
| 23 | * |
| 24 | * This program is distributed in the hope that it will be useful, but |
| 25 | * WITHOUT ANY WARRANTY; without even the implied warranty of |
| 26 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 27 | * General Public License for more details. |
| 28 | * |
| 29 | * You should have received a copy of the GNU General Public License |
| 30 | * along with this program; if not, write to the Free Software |
| 31 | * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 |
| 32 | * USA |
| 33 | */ |
| 34 | |
| 35 | namespace MediaWiki\Extension\AntiSpoof; |
| 36 | |
| 37 | use MediaWiki\Config\ConfigException; |
| 38 | use MediaWiki\Status\Status; |
| 39 | use UtfNormal\Utils; |
| 40 | use UtfNormal\Validator; |
| 41 | use Wikimedia\Equivset\Equivset; |
| 42 | |
| 43 | class AntiSpoof { |
| 44 | |
| 45 | private const SCRIPT_DEPRECATED = 'DEPRECATED'; |
| 46 | private const SCRIPT_UNASSIGNED = 'UNASSIGNED'; |
| 47 | |
| 48 | private const SCRIPT_ARABIC = 'ARABIC'; |
| 49 | private const SCRIPT_ARMENIAN = 'ARMENIAN'; |
| 50 | private const SCRIPT_ASCII_DIGITS = 'ASCII_DIGITS'; |
| 51 | private const SCRIPT_ASCII_PUNCTUATION = 'ASCII_PUNCTUATION'; |
| 52 | private const SCRIPT_BENGALI = 'BENGALI'; |
| 53 | private const SCRIPT_BOPOMOFO = 'BOPOMOFO'; |
| 54 | private const SCRIPT_BUGINESE = 'BUGINESE'; |
| 55 | private const SCRIPT_BUHID = 'BUHID'; |
| 56 | private const SCRIPT_CANADIAN_ABORIGINAL = 'CANADIAN_ABORIGINAL'; |
| 57 | private const SCRIPT_CHEROKEE = 'CHEROKEE'; |
| 58 | private const SCRIPT_COMBINING_MARKS = 'COMBINING_MARKS'; |
| 59 | private const SCRIPT_COPTIC = 'COPTIC'; |
| 60 | private const SCRIPT_COPTIC_EXTRAS = 'COPTIC_EXTRAS'; |
| 61 | private const SCRIPT_CYPRIOT = 'CYPRIOT'; |
| 62 | private const SCRIPT_CYRILLIC = 'CYRILLIC'; |
| 63 | private const SCRIPT_DESERET = 'DESERET'; |
| 64 | private const SCRIPT_DEVANAGARI = 'DEVANAGARI'; |
| 65 | private const SCRIPT_ETHIOPIC = 'ETHIOPIC'; |
| 66 | private const SCRIPT_GEORGIAN = 'GEORGIAN'; |
| 67 | private const SCRIPT_GLAGOLITIC = 'GLAGOLITIC'; |
| 68 | private const SCRIPT_GOTHIC = 'GOTHIC'; |
| 69 | private const SCRIPT_GREEK = 'GREEK'; |
| 70 | private const SCRIPT_GUJARATI = 'GUJARATI'; |
| 71 | private const SCRIPT_GURMUKHI = 'GURMUKHI'; |
| 72 | private const SCRIPT_HAN = 'HAN'; |
| 73 | private const SCRIPT_HANGUL = 'HANGUL'; |
| 74 | private const SCRIPT_HANUNOO = 'HANUNOO'; |
| 75 | private const SCRIPT_HEBREW = 'HEBREW'; |
| 76 | private const SCRIPT_HIRAGANA = 'HIRAGANA'; |
| 77 | private const SCRIPT_KANNADA = 'KANNADA'; |
| 78 | private const SCRIPT_KATAKANA = 'KATAKANA'; |
| 79 | private const SCRIPT_KHAROSHTHI = 'KHAROSHTHI'; |
| 80 | private const SCRIPT_KHMER = 'KHMER'; |
| 81 | private const SCRIPT_LAO = 'LAO'; |
| 82 | private const SCRIPT_LATIN = 'LATIN'; |
| 83 | private const SCRIPT_LIMBU = 'LIMBU'; |
| 84 | private const SCRIPT_LINEAR_B = 'LINEAR_B'; |
| 85 | private const SCRIPT_MALAYALAM = 'MALAYALAM'; |
| 86 | private const SCRIPT_MEETEI_MAYEK = 'MEETEI_MAYEK'; |
| 87 | private const SCRIPT_MEETEI_MAYEK_EXTENSIONS = 'MEETEI_MAYEK_EXTENSIONS'; |
| 88 | private const SCRIPT_MONGOLIAN = 'MONGOLIAN'; |
| 89 | private const SCRIPT_MYANMAR = 'MYANMAR'; |
| 90 | private const SCRIPT_NEW_TAI_LUE = 'NEW_TAI_LUE'; |
| 91 | private const SCRIPT_NKO = 'NKO'; |
| 92 | private const SCRIPT_OGHAM = 'OGHAM'; |
| 93 | private const SCRIPT_OL_CHIKI = 'OL_CHIKI'; |
| 94 | private const SCRIPT_OLD_ITALIC = 'OLD_ITALIC'; |
| 95 | private const SCRIPT_OLD_PERSIAN = 'OLD_PERSIAN'; |
| 96 | private const SCRIPT_ORIYA = 'ORIYA'; |
| 97 | private const SCRIPT_OSMANYA = 'OSMANYA'; |
| 98 | private const SCRIPT_RUNIC = 'RUNIC'; |
| 99 | private const SCRIPT_SHAVIAN = 'SHAVIAN'; |
| 100 | private const SCRIPT_SINHALA = 'SINHALA'; |
| 101 | private const SCRIPT_SYLOTI_NAGRI = 'SYLOTI_NAGRI'; |
| 102 | private const SCRIPT_SYRIAC = 'SYRIAC'; |
| 103 | private const SCRIPT_TAGALOG = 'TAGALOG'; |
| 104 | private const SCRIPT_TAGBANWA = 'TAGBANWA'; |
| 105 | private const SCRIPT_TAI_LE = 'TAI_LE'; |
| 106 | private const SCRIPT_TAMIL = 'TAMIL'; |
| 107 | private const SCRIPT_TELUGU = 'TELUGU'; |
| 108 | private const SCRIPT_THAANA = 'THAANA'; |
| 109 | private const SCRIPT_THAI = 'THAI'; |
| 110 | private const SCRIPT_TIBETAN = 'TIBETAN'; |
| 111 | private const SCRIPT_TIFINAGH = 'TIFINAGH'; |
| 112 | private const SCRIPT_UGARITIC = 'UGARITIC'; |
| 113 | private const SCRIPT_WARANG_CITI = 'WARANG_CITI'; |
| 114 | private const SCRIPT_YI = 'YI'; |
| 115 | |
| 116 | // phpcs:disable MediaWiki.WhiteSpace.SpaceBeforeSingleLineComment.NewLineComment |
| 117 | |
| 118 | /** |
| 119 | * Define script tag codes for various Unicode codepoint ranges |
| 120 | * If it does not have a code here, it does not have a script assignment |
| 121 | * NB: Braille is not in this list since it is a transliteration system, not a script; |
| 122 | * this does not disadvantage blind people, who will use Braille input/output methods |
| 123 | * and not raw Braille... |
| 124 | * NB: Middle dot is included in SCRIPT_LATIN for use in Catalan |
| 125 | * NB: All scripts described by the Unicode Consortium as "Other Scripts" or "Ancient Scripts" |
| 126 | * are commented out: these are either not in modern use, or only used for specialized |
| 127 | * religious purposes, or only of literary interest |
| 128 | */ |
| 129 | private const ALL_SCRIPT_RANGES = [ |
| 130 | [ 0x0020, 0x002F, |
| 131 | self::SCRIPT_ASCII_PUNCTUATION ], // ASCII Punctuation 1, Hyphen, ASCII Punctuation 2 |
| 132 | [ 0x0030, 0x0039, self::SCRIPT_ASCII_DIGITS ], // ASCII Digits |
| 133 | [ 0x003A, 0x0040, self::SCRIPT_ASCII_PUNCTUATION ], // Colon, ASCII Punctuation 3 |
| 134 | [ 0x0041, 0x005A, self::SCRIPT_LATIN ], // ASCII Uppercase |
| 135 | [ 0x005B, 0x0060, |
| 136 | self::SCRIPT_ASCII_PUNCTUATION ], // ASCII Punctuation 4, Underscore, ASCII Punctuation 5 |
| 137 | [ 0x0061, 0x007A, self::SCRIPT_LATIN ], // ASCII Lowercase |
| 138 | [ 0x007B, 0x007E, self::SCRIPT_ASCII_PUNCTUATION ], // ASCII Punctuation 5 |
| 139 | [ 0x00B7, 0x00B7, self::SCRIPT_LATIN ], // Middle Dot |
| 140 | [ 0x00C0, 0x00D6, self::SCRIPT_LATIN ], // Latin-1 Letters 1 |
| 141 | [ 0x00D8, 0x00F6, self::SCRIPT_LATIN ], // Latin-1 Letters 2 |
| 142 | [ 0x00F8, 0x02AF, |
| 143 | self::SCRIPT_LATIN ], // Latin-1 Letters 3, Latin Extended-A, Latin Extended-B, IPA Extensions |
| 144 | [ 0x0300, 0x036F, self::SCRIPT_COMBINING_MARKS ], // Combining Diacritical Marks |
| 145 | [ 0x0370, 0x03E1, self::SCRIPT_GREEK ], // Greek and Coptic (Greek) |
| 146 | [ 0x03E2, 0x03EF, self::SCRIPT_COPTIC_EXTRAS ], // Greek and Coptic (Coptic-unique) |
| 147 | [ 0x03F0, 0x03FF, self::SCRIPT_GREEK ], // Greek and Coptic (Greek) |
| 148 | [ 0x0400, 0x052F, self::SCRIPT_CYRILLIC ], // Cyrillic, Cyrillic Supplement |
| 149 | [ 0x0530, 0x058F, self::SCRIPT_ARMENIAN ], // Armenian |
| 150 | [ 0x0590, 0x05FF, self::SCRIPT_HEBREW ], // Hebrew |
| 151 | [ 0x0600, 0x06FF, self::SCRIPT_ARABIC ], // Arabic |
| 152 | [ 0x0700, 0x074F, self::SCRIPT_SYRIAC ], // Syriac |
| 153 | [ 0x0750, 0x077F, self::SCRIPT_ARABIC ], // Arabic Supplement |
| 154 | [ 0x0780, 0x07BF, self::SCRIPT_THAANA ], // Thaana |
| 155 | [ 0x07C0, 0x07FF, self::SCRIPT_NKO ], // NKo (N'Ko) |
| 156 | [ 0x0900, 0x097F, self::SCRIPT_DEVANAGARI ], // Devanagari |
| 157 | [ 0x0980, 0x09FF, self::SCRIPT_BENGALI ], // Bengali |
| 158 | [ 0x0A00, 0x0A7F, self::SCRIPT_GURMUKHI ], // Gurmukhi |
| 159 | [ 0x0A80, 0x0AFF, self::SCRIPT_GUJARATI ], // Gujarati |
| 160 | [ 0x0B00, 0x0B7F, self::SCRIPT_ORIYA ], // Oriya |
| 161 | [ 0x0B80, 0x0BFF, self::SCRIPT_TAMIL ], // Tamil |
| 162 | [ 0x0C00, 0x0C7F, self::SCRIPT_TELUGU ], // Telugu |
| 163 | [ 0x0C80, 0x0CFF, self::SCRIPT_KANNADA ], // Kannada |
| 164 | [ 0x0D00, 0x0D7F, self::SCRIPT_MALAYALAM ], // Malayalam |
| 165 | [ 0x0D80, 0x0DFF, self::SCRIPT_SINHALA ], // Sinhala |
| 166 | [ 0x0E00, 0x0E7F, self::SCRIPT_THAI ], // Thai |
| 167 | [ 0x0E80, 0x0EFF, self::SCRIPT_LAO ], // Lao |
| 168 | [ 0x0F00, 0x0FFF, self::SCRIPT_TIBETAN ], // Tibetan |
| 169 | [ 0x1000, 0x109F, self::SCRIPT_MYANMAR ], // Myanmar |
| 170 | [ 0x10A0, 0x10FF, self::SCRIPT_GEORGIAN ], // Georgian |
| 171 | [ 0x1100, 0x11FF, self::SCRIPT_HANGUL ], // Hangul Jamo |
| 172 | [ 0x1200, 0x139F, self::SCRIPT_ETHIOPIC ], // Ethiopic, Ethiopic Supplement |
| 173 | [ 0x13A0, 0x13FF, self::SCRIPT_CHEROKEE ], // Cherokee |
| 174 | [ 0x1400, 0x167F, self::SCRIPT_CANADIAN_ABORIGINAL ], // Unified Canadian Aboriginal Syllabics |
| 175 | // [ 0x1680, 0x169F, self::SCRIPT_OGHAM ], // Ogham |
| 176 | // [ 0x16A0, 0x16FF, self::SCRIPT_RUNIC ], // Runic |
| 177 | [ 0x1700, 0x171F, self::SCRIPT_TAGALOG ], // Tagalog |
| 178 | [ 0x1720, 0x173F, self::SCRIPT_HANUNOO ], // Hanunoo |
| 179 | [ 0x1740, 0x175F, self::SCRIPT_BUHID ], // Buhid |
| 180 | [ 0x1760, 0x177F, self::SCRIPT_TAGBANWA ], // Tagbanwa |
| 181 | [ 0x1780, 0x17FF, self::SCRIPT_KHMER ], // Khmer |
| 182 | [ 0x1800, 0x18AF, self::SCRIPT_MONGOLIAN ], // Mongolian |
| 183 | [ 0x1900, 0x194F, self::SCRIPT_LIMBU ], // Limbu |
| 184 | [ 0x1950, 0x197F, self::SCRIPT_TAI_LE ], // Tai Le |
| 185 | [ 0x1980, 0x19DF, self::SCRIPT_NEW_TAI_LUE ], // New Tai Lue |
| 186 | [ 0x1A00, 0x1A1F, self::SCRIPT_BUGINESE ], // Buginese |
| 187 | [ 0x1C50, 0x1C7F, self::SCRIPT_OL_CHIKI ], // Ol Chiki |
| 188 | [ 0x1C90, 0x1CBF, self::SCRIPT_GEORGIAN ], // Georgian Extended |
| 189 | [ 0x1E00, 0x1EFF, self::SCRIPT_LATIN ], // Latin Extended Additional |
| 190 | [ 0x1F00, 0x1FFF, self::SCRIPT_GREEK ], // Greek Extended |
| 191 | // [ 0x2C00, 0x2C5F, self::SCRIPT_GLAGOLITIC ], // Glagolitic |
| 192 | [ 0x2C80, 0x2CFF, self::SCRIPT_COPTIC ], // Coptic |
| 193 | [ 0x2D00, 0x2D2F, self::SCRIPT_GEORGIAN ], // Georgian Supplement |
| 194 | [ 0x2D30, 0x2D7F, self::SCRIPT_TIFINAGH ], // Tifinagh |
| 195 | [ 0x2D80, 0x2DDF, self::SCRIPT_ETHIOPIC ], // Ethiopic Extended |
| 196 | [ 0x2E80, 0x2FDF, self::SCRIPT_DEPRECATED ], // CJK Radicals Supplement, Kangxi Radicals |
| 197 | [ 0x3040, 0x309F, self::SCRIPT_HIRAGANA ], // Hiragana |
| 198 | [ 0x30A0, 0x30FF, self::SCRIPT_KATAKANA ], // Katakana |
| 199 | [ 0x3100, 0x312F, self::SCRIPT_BOPOMOFO ], // Bopomofo |
| 200 | [ 0x3130, 0x318F, self::SCRIPT_HANGUL ], // Hangul Compatibility Jamo |
| 201 | [ 0x31A0, 0x31BF, self::SCRIPT_BOPOMOFO ], // Bopomofo Extended |
| 202 | [ 0x31F0, 0x31FF, self::SCRIPT_KATAKANA ], // Katakana Phonetic Extensions |
| 203 | [ 0x3400, 0x4DBF, self::SCRIPT_HAN ], // CJK Unified Ideographs Extension A |
| 204 | [ 0x4E00, 0x9FFF, self::SCRIPT_HAN ], // CJK Unified Ideographs |
| 205 | [ 0xA000, 0xA4CF, self::SCRIPT_YI ], // Yi Syllables, Yi Radicals |
| 206 | [ 0xA800, 0xA82F, self::SCRIPT_SYLOTI_NAGRI ], // Syloti Nagri |
| 207 | // [ 0xAAE0, 0xAAFF, self::SCRIPT_MEETEI_MAYEK_EXTENSIONS ] // Meetei Mayek Extensions |
| 208 | [ 0xAB70, 0xABBF, self::SCRIPT_CHEROKEE ], // Cherokee Supplement |
| 209 | [ 0xABC0, 0xABFF, self::SCRIPT_MEETEI_MAYEK ], // Meetei Mayek |
| 210 | [ 0xAC00, 0xD7AF, self::SCRIPT_HANGUL ], // Hangul Syllables |
| 211 | [ 0xF900, 0xFAFF, self::SCRIPT_DEPRECATED ], // CJK Compatibility Ideographs |
| 212 | // [ 0x10000, 0x100FF, self::SCRIPT_LINEAR_B ], // Linear B Syllabary, Linear B Ideograms |
| 213 | // [ 0x10140, 0x1018F, self::SCRIPT_GREEK ], // Ancient Greek Numbers |
| 214 | // [ 0x10300, 0x1032F, self::SCRIPT_OLD_ITALIC ], // Old Italic |
| 215 | [ 0x10330, 0x1034F, self::SCRIPT_GOTHIC ], // Gothic |
| 216 | // [ 0x10380, 0x1039F, self::SCRIPT_UGARITIC ], // Ugaritic |
| 217 | // [ 0x103A0, 0x103DF, self::SCRIPT_OLD_PERSIAN ], // Old Persian |
| 218 | // [ 0x10400, 0x1044F, self::SCRIPT_DESERET ], // Deseret |
| 219 | // [ 0x10450, 0x1047F, self::SCRIPT_SHAVIAN ], // Shavian |
| 220 | // [ 0x10480, 0x104AF, self::SCRIPT_OSMANYA ], // Osmanya |
| 221 | // [ 0x10800, 0x1083F, self::SCRIPT_CYPRIOT ], // Cypriot Syllabary |
| 222 | [ 0x10A00, 0x10A5F, self::SCRIPT_KHAROSHTHI ], // Kharoshthi |
| 223 | [ 0x118A0, 0x118FF, self::SCRIPT_WARANG_CITI ], // Warang Citi |
| 224 | [ 0x20000, 0x2A6DF, self::SCRIPT_HAN ], // CJK Unified Ideographs Extension B |
| 225 | [ 0x2F800, 0x2FA1F, self::SCRIPT_DEPRECATED ] // CJK Compatibility Ideographs Supplement |
| 226 | ]; |
| 227 | |
| 228 | private const ALLOWED_SCRIPT_COMBINATIONS = [ |
| 229 | [ self::SCRIPT_COPTIC, self::SCRIPT_COPTIC_EXTRAS ], # Coptic, using old Greek chars |
| 230 | [ self::SCRIPT_GREEK, self::SCRIPT_COPTIC_EXTRAS ], # Coptic, using new Coptic chars |
| 231 | [ self::SCRIPT_HAN, self::SCRIPT_BOPOMOFO ], # Chinese |
| 232 | [ self::SCRIPT_HAN, self::SCRIPT_HANGUL ], # Korean |
| 233 | [ self::SCRIPT_HAN, self::SCRIPT_KATAKANA, self::SCRIPT_HIRAGANA ] # Japanese |
| 234 | ]; |
| 235 | |
| 236 | // phpcs:enable MediaWiki.WhiteSpace.SpaceBeforeSingleLineComment.NewLineComment |
| 237 | |
| 238 | private static ?Equivset $equivset = null; |
| 239 | |
| 240 | public static function getEquivSet(): Equivset { |
| 241 | if ( self::$equivset === null ) { |
| 242 | self::$equivset = new Equivset(); |
| 243 | } |
| 244 | |
| 245 | return self::$equivset; |
| 246 | } |
| 247 | |
| 248 | private static function getScriptCode( int $ch ): string { |
| 249 | # Linear search: binary chop would be faster... |
| 250 | foreach ( self::ALL_SCRIPT_RANGES as $range ) { |
| 251 | if ( $ch >= $range[0] && $ch <= $range[1] ) { |
| 252 | return $range[2]; |
| 253 | } |
| 254 | } |
| 255 | # Otherwise... |
| 256 | return self::SCRIPT_UNASSIGNED; |
| 257 | } |
| 258 | |
| 259 | private static function isSubsetOf( array $aList, array $bList ): bool { |
| 260 | return count( array_diff( $aList, $bList ) ) === 0; |
| 261 | } |
| 262 | |
| 263 | /** |
| 264 | * Is this an allowed script mixture? |
| 265 | */ |
| 266 | private static function isAllowedScriptCombination( array $scriptList ): bool { |
| 267 | foreach ( self::ALLOWED_SCRIPT_COMBINATIONS as $allowedCombo ) { |
| 268 | if ( self::isSubsetOf( $scriptList, $allowedCombo ) ) { |
| 269 | return true; |
| 270 | } |
| 271 | } |
| 272 | return false; |
| 273 | } |
| 274 | |
| 275 | /** |
| 276 | * Convert string into an array of Unicode code points as integers |
| 277 | * @return int[] |
| 278 | */ |
| 279 | private static function stringToList( string $str ): array { |
| 280 | $ar = []; |
| 281 | if ( !preg_match_all( '/./us', $str, $ar ) ) { |
| 282 | return []; |
| 283 | } |
| 284 | $out = []; |
| 285 | foreach ( $ar[0] as $char ) { |
| 286 | $out[] = Utils::utf8ToCodepoint( $char ); |
| 287 | } |
| 288 | return $out; |
| 289 | } |
| 290 | |
| 291 | private static function listToString( array $list ): string { |
| 292 | $out = ''; |
| 293 | foreach ( $list as $cp ) { |
| 294 | $out .= Utils::codepointToUtf8( $cp ); |
| 295 | } |
| 296 | return $out; |
| 297 | } |
| 298 | |
| 299 | private static function hardjoin( array $a_list ): string { |
| 300 | return implode( '', $a_list ); |
| 301 | } |
| 302 | |
| 303 | public static function normalizeString( string $testName ): string { |
| 304 | return self::getEquivSet()->normalize( $testName ); |
| 305 | } |
| 306 | |
| 307 | /** |
| 308 | * @param int[] $text |
| 309 | * @param string $script |
| 310 | * @return int[] |
| 311 | */ |
| 312 | private static function stripScript( array $text, string $script ): array { |
| 313 | $scripts = array_map( [ __CLASS__, 'getScriptCode' ], $text ); |
| 314 | $out = []; |
| 315 | foreach ( $text as $index => $char ) { |
| 316 | if ( $scripts[$index] !== $script ) { |
| 317 | $out[] = $char; |
| 318 | } |
| 319 | } |
| 320 | return $out; |
| 321 | } |
| 322 | |
| 323 | /** |
| 324 | * Helper function for checkUnicodeStringStatus: Return an error on a bad character. |
| 325 | * @todo I would like to show Unicode character name, but it is not clear how to get it. |
| 326 | * @param string $msgId message identifier. |
| 327 | * @param int $point codepoint of the bad character. |
| 328 | * @return Status |
| 329 | */ |
| 330 | private static function badCharErr( string $msgId, int $point ): Status { |
| 331 | $symbol = Utils::codepointToUtf8( $point ); |
| 332 | // Combining marks are combined with the previous character. If abusing character is a |
| 333 | // combining mark, prepend it with space to show them correctly. |
| 334 | if ( self::getScriptCode( $point ) === self::SCRIPT_COMBINING_MARKS ) { |
| 335 | $symbol = ' ' . $symbol; |
| 336 | } |
| 337 | $code = sprintf( 'U+%04X', $point ); |
| 338 | if ( preg_match( '/\A\p{C}\z/u', $symbol ) ) { |
| 339 | $char = wfMessage( 'antispoof-bad-char-non-printable', $code ); |
| 340 | } else { |
| 341 | $char = wfMessage( 'antispoof-bad-char', $symbol, $code ); |
| 342 | } |
| 343 | return Status::newFatal( wfMessage( $msgId, $char ) ); |
| 344 | } |
| 345 | |
| 346 | /** |
| 347 | * TODO: does too much in one routine, refactor... |
| 348 | * @return Status<string> |
| 349 | * @since 1.32 |
| 350 | */ |
| 351 | public static function checkUnicodeStringStatus( string $testName ): Status { |
| 352 | global $wgAntiSpoofProhibitedCharacters; |
| 353 | |
| 354 | // Start with some sanity checking |
| 355 | if ( !is_array( $wgAntiSpoofProhibitedCharacters ) ) { |
| 356 | throw new ConfigException( '$wgAntiSpoofProhibitedCharacters should be an array!' ); |
| 357 | } |
| 358 | |
| 359 | if ( $testName === '' ) { |
| 360 | return Status::newFatal( 'antispoof-empty' ); |
| 361 | } |
| 362 | |
| 363 | foreach ( self::stringToList( $testName ) as $char ) { |
| 364 | if ( in_array( $char, $wgAntiSpoofProhibitedCharacters ) ) { |
| 365 | return self::badCharErr( 'antispoof-prohibited', $char ); |
| 366 | } |
| 367 | } |
| 368 | |
| 369 | // Perform Unicode _compatibility_ decomposition |
| 370 | $testName = Validator::toNFKD( $testName ); |
| 371 | $testChars = self::stringToList( $testName ); |
| 372 | |
| 373 | // Be paranoid: check again, just in case Unicode normalization code changes... |
| 374 | foreach ( $testChars as $char ) { |
| 375 | if ( in_array( $char, $wgAntiSpoofProhibitedCharacters ) ) { |
| 376 | return self::badCharErr( 'antispoof-prohibited', $char ); |
| 377 | } |
| 378 | } |
| 379 | |
| 380 | // Check for this: should not happen in any valid Unicode string |
| 381 | if ( self::getScriptCode( $testChars[0] ) === self::SCRIPT_COMBINING_MARKS ) { |
| 382 | return self::badCharErr( 'antispoof-combining', $testChars[0] ); |
| 383 | } |
| 384 | |
| 385 | // Strip all combining characters in order to crudely strip accents |
| 386 | // Note: NFKD normalization should have decomposed all accented chars earlier |
| 387 | $testChars = self::stripScript( $testChars, self::SCRIPT_COMBINING_MARKS ); |
| 388 | |
| 389 | $testScripts = array_map( [ __CLASS__, 'getScriptCode' ], $testChars ); |
| 390 | $unassigned = array_search( self::SCRIPT_UNASSIGNED, $testScripts ); |
| 391 | if ( $unassigned !== false ) { |
| 392 | return self::badCharErr( 'antispoof-unassigned', $testChars[$unassigned] ); |
| 393 | } |
| 394 | $deprecated = array_search( self::SCRIPT_DEPRECATED, $testScripts ); |
| 395 | if ( $deprecated !== false ) { |
| 396 | return self::badCharErr( 'antispoof-deprecated', $testChars[$deprecated] ); |
| 397 | } |
| 398 | $testScripts = array_unique( $testScripts ); |
| 399 | |
| 400 | // We don't mind ASCII punctuation or digits |
| 401 | $testScripts = array_diff( $testScripts, |
| 402 | [ self::SCRIPT_ASCII_PUNCTUATION, self::SCRIPT_ASCII_DIGITS ] ); |
| 403 | |
| 404 | if ( !$testScripts ) { |
| 405 | return Status::newFatal( 'antispoof-noletters' ); |
| 406 | } |
| 407 | |
| 408 | if ( count( $testScripts ) > 1 && !self::isAllowedScriptCombination( $testScripts ) ) { |
| 409 | return Status::newFatal( 'antispoof-mixedscripts' ); |
| 410 | } |
| 411 | |
| 412 | // At this point, we should probably check for BiDi violations if they aren't |
| 413 | // caught above... |
| 414 | |
| 415 | // Squeeze out all punctuation chars |
| 416 | // TODO: almost the same code occurs twice, refactor into own routine |
| 417 | $testChars = self::stripScript( $testChars, self::SCRIPT_ASCII_PUNCTUATION ); |
| 418 | |
| 419 | $testName = self::listToString( $testChars ); |
| 420 | |
| 421 | // Replace characters in confusables set with equivalence chars |
| 422 | $testName = self::normalizeString( $testName ); |
| 423 | |
| 424 | // Do very simple sequence processing: "vv" -> "w", "rn" -> "m"... |
| 425 | // Not exhaustive, but ups the ante... |
| 426 | // Do this _after_ canonicalization: looks weird, but needed for consistency |
| 427 | $testName = str_replace( 'VV', 'W', $testName ); |
| 428 | $testName = str_replace( 'RN', 'M', $testName ); |
| 429 | |
| 430 | // Remove all remaining spaces, just in case any have snuck through... |
| 431 | $testName = self::hardjoin( explode( " ", $testName ) ); |
| 432 | |
| 433 | // Reduce repeated char sequences to single character |
| 434 | // BUG: TODO: implement this |
| 435 | |
| 436 | if ( $testName === '' ) { |
| 437 | return Status::newFatal( 'antispoof-tooshort' ); |
| 438 | } |
| 439 | |
| 440 | // Don't ASCIIfy: we assume we are UTF-8 capable on output |
| 441 | |
| 442 | // Prepend version string, for futureproofing if this algorithm changes |
| 443 | $testName = "v2:" . $testName; |
| 444 | |
| 445 | // And return the canonical version of the name |
| 446 | return Status::newGood( $testName ); |
| 447 | } |
| 448 | } |