ApiFormatJson.php

Go to the documentation of this file.

<?php
class ApiFormatJson extends ApiFormatBase {

    private $isRaw;

    public function __construct( ApiMain $main, $format ) {
        parent::__construct( $main, $format );
        $this->isRaw = ( $format === 'rawfm' );

        if ( $this->getMain()->getCheck( 'callback' ) ) {
            # T94015: jQuery appends a useless '_' parameter in jsonp mode.
            # Mark the parameter as used in that case to avoid a warning that's
            # outside the control of the end user.
            # (and do it here because ApiMain::reportUnusedParams() gets called
            # before our ::execute())
            $this->getMain()->markParamsUsed( '_' );
        }
    }

    public function getMimeType() {
        $params = $this->extractRequestParams();
        // callback:
        if ( isset( $params['callback'] ) ) {
            return 'text/javascript';
        }

        return 'application/json';
    }

    public function getWantsHelp() {
        wfDeprecated( __METHOD__, '1.25' );
        // Help is always ugly in JSON
        return false;
    }

    public function execute() {
        $params = $this->extractRequestParams();

        $opt = 0;
        if ( $this->isRaw ) {
            $opt |= FormatJson::ALL_OK;
            $transform = [];
        } else {
            switch ( $params['formatversion'] ) {
                case 1:
                    $opt |= $params['utf8'] ? FormatJson::ALL_OK : FormatJson::XMLMETA_OK;
                    $transform = [
                        'BC' => [],
                        'Types' => [ 'AssocAsObject' => true ],
                        'Strip' => 'all',
                    ];
                    break;

                case 2:
                case 'latest':
                    $opt |= $params['ascii'] ? FormatJson::XMLMETA_OK : FormatJson::ALL_OK;
                    $transform = [
                        'Types' => [ 'AssocAsObject' => true ],
                        'Strip' => 'all',
                    ];
                    break;

                default:
                    $this->dieUsage( __METHOD__ .
                        ': Unknown value for \'formatversion\'', 'unknownformatversion' );
            }
        }
        $data = $this->getResult()->getResultData( null, $transform );
        $json = FormatJson::encode( $data, $this->getIsHtml(), $opt );

        // Bug 66776: wfMangleFlashPolicy() is needed to avoid a nasty bug in
        // Flash, but what it does isn't friendly for the API, so we need to
        // work around it.
        if ( preg_match( '/<\s*cross-domain-policy(?=\s|>)/i', $json ) ) {
            $json = preg_replace(
                '/<(\s*cross-domain-policy(?=\s|>))/i', '\\u003C$1', $json
            );
        }

        if ( isset( $params['callback'] ) ) {
            $callback = preg_replace( "/[^][.\\'\\\"_A-Za-z0-9]/", '', $params['callback'] );
            # Prepend a comment to try to avoid attacks against content
            # sniffers, such as bug 68187.
            $this->printText( "/**/$callback($json)" );
        } else {
            $this->printText( $json );
        }
    }

    public function getAllowedParams() {
        if ( $this->isRaw ) {
            return parent::getAllowedParams();
        }

        $ret = parent::getAllowedParams() + [
            'callback' => [
                ApiBase::PARAM_HELP_MSG => 'apihelp-json-param-callback',
            ],
            'utf8' => [
                ApiBase::PARAM_DFLT => false,
                ApiBase::PARAM_HELP_MSG => 'apihelp-json-param-utf8',
            ],
            'ascii' => [
                ApiBase::PARAM_DFLT => false,
                ApiBase::PARAM_HELP_MSG => 'apihelp-json-param-ascii',
            ],
            'formatversion' => [
                ApiBase::PARAM_TYPE => [ 1, 2, 'latest' ],
                ApiBase::PARAM_DFLT => 1,
                ApiBase::PARAM_HELP_MSG => 'apihelp-json-param-formatversion',
            ],
        ];
        return $ret;
    }
}