mirror of
https://github.com/iflytek/skillhub.git
synced 2026-11-14 09:01:16 +00:00
987068cc6f
Refs #989 Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
101 lines
4.4 KiB
Awk
101 lines
4.4 KiB
Awk
# Dependency-free, bounded JSON syntax/shape check using the image's BusyBox awk.
|
|
# Never prints input. Output is a fixed status/field, consumed by 40-analytics.sh.
|
|
# Tree nodes use numeric IDs, so hostile keys cannot forge a configuration path.
|
|
function bad(field) { print "invalid " field; exit 1 }
|
|
function ws() { while (substr(s,p,1) ~ /^[ \t\r\n]$/ && p<=length(s)) p++ }
|
|
function string( out,c,e,h,n,i,d) {
|
|
if (substr(s,p++,1)!="\"") bad("config")
|
|
out=""
|
|
while(p<=length(s)) {
|
|
c=substr(s,p++,1)
|
|
if(c=="\"") return out
|
|
if(c ~ /[[:cntrl:]]/) bad("config")
|
|
if(c=="\\") {
|
|
e=substr(s,p++,1)
|
|
if(e=="u") {
|
|
h=substr(s,p,4); p+=4
|
|
if(length(h)!=4 || h ~ /[^0-9a-fA-F]/) bad("config")
|
|
n=0
|
|
for(i=1;i<=4;i++) { d=index("0123456789abcdef",tolower(substr(h,i,1)))-1; n=n*16+d }
|
|
# ASCII escapes must compare exactly to ordinary keys/UUIDs. Non-ASCII
|
|
# is valid JSON but cannot match any deployment control field/value.
|
|
c=(n>0 && n<128) ? sprintf("%c",n) : "\\u" h
|
|
} else if(e=="\"" || e=="\\" || e=="/") c=e
|
|
else if(e=="b") c=sprintf("%c",8)
|
|
else if(e=="f") c=sprintf("%c",12)
|
|
else if(e=="n") c="\n"
|
|
else if(e=="r") c="\r"
|
|
else if(e=="t") c="\t"
|
|
else bad("config")
|
|
}
|
|
out=out c
|
|
}
|
|
bad("config")
|
|
}
|
|
function value(depth, id,c,key,item,token) {
|
|
if(depth>32) bad("config")
|
|
ws(); id=++nodes; c=substr(s,p,1)
|
|
if(c=="{") {
|
|
kind[id]="object"; p++; ws()
|
|
if(substr(s,p,1)=="}") { p++; return id }
|
|
while(1) {
|
|
ws(); key=string(); ws()
|
|
if(substr(s,p++,1)!=":") bad("config")
|
|
if((id SUBSEP key) in child) bad("config")
|
|
item=value(depth+1); child[id SUBSEP key]=item; count[id]++
|
|
ws(); c=substr(s,p++,1)
|
|
if(c=="}") return id
|
|
if(c!=",") bad("config")
|
|
}
|
|
} else if(c=="[") {
|
|
kind[id]="array"; p++; ws()
|
|
if(substr(s,p,1)=="]") { p++; return id }
|
|
while(1) {
|
|
item=value(depth+1); ws(); c=substr(s,p++,1)
|
|
if(c=="]") return id
|
|
if(c!=",") bad("config")
|
|
}
|
|
} else if(c=="\"") { kind[id]="string"; data[id]=string(); return id }
|
|
else {
|
|
token=substr(s,p)
|
|
if(match(token,/^-?(0|[1-9][0-9]*)(\.[0-9]+)?([eE][+-]?[0-9]+)?/)) { kind[id]="number"; data[id]=substr(token,1,RLENGTH)+0; p+=RLENGTH; return id }
|
|
if(substr(token,1,4)=="true") { kind[id]="boolean"; data[id]="true"; p+=4; return id }
|
|
if(substr(token,1,5)=="false") { kind[id]="boolean"; data[id]="false"; p+=5; return id }
|
|
if(substr(token,1,4)=="null") { kind[id]="null"; p+=4; return id }
|
|
bad("config")
|
|
}
|
|
}
|
|
{ s=s $0 "\n" }
|
|
END {
|
|
if(length(s)>65537) bad("config")
|
|
p=1; root=value(0); ws()
|
|
if(p<=length(s) || kind[root]!="object") bad("config")
|
|
for(k in child) if(index(k,root SUBSEP)==1) {
|
|
name=substr(k,length(root SUBSEP)+1)
|
|
if(name!="enabled" && name!="consent" && name!="adapter" && name!="rules" && name!="adapterConfig") bad("config")
|
|
}
|
|
enabled=child[root SUBSEP "enabled"]; consent=child[root SUBSEP "consent"]
|
|
adapter=child[root SUBSEP "adapter"]; settings=child[root SUBSEP "adapterConfig"]
|
|
if(enabled && kind[enabled]!="boolean") bad("enabled")
|
|
if(consent && (kind[consent]!="string" || (data[consent]!="denied" && data[consent]!="granted"))) bad("consent")
|
|
if(adapter && (kind[adapter]!="string" || (data[adapter]!="umami" && data[adapter]!="datafinder"))) bad("adapter")
|
|
if(settings && kind[settings]!="object") bad("adapterConfig")
|
|
if(data[enabled]=="true") {
|
|
if(kind[settings]!="object") bad("adapterConfig")
|
|
if(data[adapter]=="umami") {
|
|
website=child[settings SUBSEP "websiteId"]; uuid=data[website]
|
|
if(count[settings]!=1 || kind[website]!="string" || length(uuid)!=36 || uuid !~ /^[0-9a-fA-F-]+$/ || substr(uuid,9,1)!="-" || substr(uuid,14,1)!="-" || substr(uuid,19,1)!="-" || substr(uuid,24,1)!="-") bad("adapterConfig")
|
|
gsub(/-/,"",uuid); if(length(uuid)!=32) bad("adapterConfig")
|
|
} else if(data[adapter]=="datafinder") {
|
|
for(k in child) if(index(k,settings SUBSEP)==1) {
|
|
name=substr(k,length(settings SUBSEP)+1)
|
|
if(name!="appId" && name!="product") bad("adapterConfig")
|
|
}
|
|
app=child[settings SUBSEP "appId"]; product=child[settings SUBSEP "product"]
|
|
if(kind[app]!="number" || data[app]<1 || data[app]>2147483647 || int(data[app])!=data[app]) bad("adapterConfig.appId")
|
|
if(product && (kind[product]!="string" || length(data[product])>32 || data[product]!~/^[a-z][a-z0-9_]*$/)) bad("adapterConfig.product")
|
|
} else bad("adapter")
|
|
# Denied pages can later call start(), so retain valid public configuration.
|
|
print (data[consent]=="granted" ? "enabled" : "denied") " " data[adapter]
|
|
} else print "disabled"
|
|
}
|