wiki.techinc.nl/includes/resourceloader/ResourceLoaderContext.php

370 lines
8.8 KiB
PHP
Raw Normal View History

<?php
/**
* Context for ResourceLoader modules.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*
* @file
* @author Trevor Parscal
* @author Roan Kattouw
*/
use MediaWiki\Logger\LoggerFactory;
/**
* Object passed around to modules which contains information about the state
* of a specific loader request
*/
class ResourceLoaderContext {
/* Protected Members */
2010-09-04 12:53:01 +00:00
protected $resourceLoader;
protected $request;
// Module content vary
protected $skin;
protected $language;
protected $debug;
protected $user;
// Request vary (in addition to cache vary)
protected $modules;
protected $only;
protected $version;
protected $raw;
protected $image;
protected $variant;
protected $format;
protected $direction;
protected $hash;
protected $userObj;
protected $imageObj;
2010-09-04 12:53:01 +00:00
/* Methods */
2010-09-04 12:53:01 +00:00
/**
* @param ResourceLoader $resourceLoader
* @param WebRequest $request
*/
public function __construct( ResourceLoader $resourceLoader, WebRequest $request ) {
$this->resourceLoader = $resourceLoader;
$this->request = $request;
// List of modules
$modules = $request->getVal( 'modules' );
$this->modules = $modules ? self::expandModuleNames( $modules ) : array();
// Various parameters
$this->user = $request->getVal( 'user' );
$this->debug = $request->getFuzzyBool(
'debug',
$resourceLoader->getConfig()->get( 'ResourceLoaderDebug' )
);
$this->only = $request->getVal( 'only', null );
$this->version = $request->getVal( 'version', null );
$this->raw = $request->getFuzzyBool( 'raw' );
// Image requests
$this->image = $request->getVal( 'image' );
$this->variant = $request->getVal( 'variant' );
$this->format = $request->getVal( 'format' );
2010-09-04 12:53:01 +00:00
$this->skin = $request->getVal( 'skin' );
In ResourceLoaderContext, normalize invalid skin names to $wgDefaultSkin . This should help a lot with the pollution of the module_deps table, which is currently littered with invalid skin names from people trying to hack the site. I found 3,897 (!!) distinct values for md_skin Sample from the query result: | md_module | md_skin | |-----------------------------|----------------------------------| | ext.vector.collapsibleNav | vector' | | ext.vector.collapsibleNav | vector' and 1=1-- | | ext.vector.collapsibleNav | vector' and 1=2-- | | ext.vector.collapsibleNav | vector')waitfor delay'0:0:20'-- | | ext.vector.collapsibleNav | vector',0)waitfor delay'0:0:20'- | | ext.vector.collapsibleNav | vector',0,0)waitfor delay'0:0:20 | | ext.vector.collapsibleNav | vector',0,0,0)waitfor delay'0:0: | | ext.vector.collapsibleNav | vector'waitfor delay'0:0:20'-- | | ext.vector.collapsibleNav | vector../../../../../../../../.. | [...] | ext.vector.sectionEditLinks | vector<script src= | | ext.vector.sectionEditLinks | vector?.tri.co.id/ | | ext.vector.sectionEditLinks | vector??id=jCustomerWAPProv | | ext.vector.sectionEditLinks | vector??id=wap.mauj.com.... | | ext.vector.sectionEditLinks | vector?id=202.87.41.147.... | | ext.vector.sectionEditLinks | vector?java | | ext.vector.sectionEditLinks | vector?m.vuclip.com/ | | ext.vector.sectionEditLinks | vector?toyota.co.id | | ext.vector.sectionEditLinks | vectorGET | | ext.vector.sectionEditLinks | vector]]>> | | ext.vector.sectionEditLinks | vector`ping -c 20 127.0.0.1` | | ext.vector.sectionEditLinks | vector|echo 9e7f7fd5750593ab cef | | ext.vector.sectionEditLinks | vector|ping -c 20 127.0.0.1||x |
2012-02-27 22:41:20 +00:00
$skinnames = Skin::getSkinNames();
// If no skin is specified, or we don't recognize the skin, use the default skin
if ( !$this->skin || !isset( $skinnames[$this->skin] ) ) {
$this->skin = $resourceLoader->getConfig()->get( 'DefaultSkin' );
}
}
/**
* Expand a string of the form jquery.foo,bar|jquery.ui.baz,quux to
* an array of module names like array( 'jquery.foo', 'jquery.bar',
* 'jquery.ui.baz', 'jquery.ui.quux' )
* @param string $modules Packed module name list
* @return array Array of module names
*/
public static function expandModuleNames( $modules ) {
$retval = array();
$exploded = explode( '|', $modules );
foreach ( $exploded as $group ) {
if ( strpos( $group, ',' ) === false ) {
// This is not a set of modules in foo.bar,baz notation
// but a single module
$retval[] = $group;
} else {
// This is a set of modules in foo.bar,baz notation
$pos = strrpos( $group, '.' );
if ( $pos === false ) {
// Prefixless modules, i.e. without dots
$retval = array_merge( $retval, explode( ',', $group ) );
} else {
// We have a prefix and a bunch of suffixes
$prefix = substr( $group, 0, $pos ); // 'foo'
$suffixes = explode( ',', substr( $group, $pos + 1 ) ); // array( 'bar', 'baz' )
foreach ( $suffixes as $suffix ) {
$retval[] = "$prefix.$suffix";
}
}
}
}
return $retval;
}
/**
* Return a dummy ResourceLoaderContext object suitable for passing into
* things that don't "really" need a context.
* @return ResourceLoaderContext
*/
public static function newDummyContext() {
return new self( new ResourceLoader(
ConfigFactory::getDefaultInstance()->makeConfig( 'main' ),
LoggerFactory::getInstance( 'resourceloader' )
), new FauxRequest( array() ) );
}
/**
* @return ResourceLoader
*/
public function getResourceLoader() {
return $this->resourceLoader;
}
/**
* @return WebRequest
*/
public function getRequest() {
return $this->request;
}
2010-09-04 12:53:01 +00:00
/**
* @return array
*/
public function getModules() {
return $this->modules;
}
2010-09-04 12:53:01 +00:00
/**
* @return string
*/
public function getLanguage() {
if ( $this->language === null ) {
// Must be a valid language code after this point (T64849)
// Only support uselang values that follow built-in conventions (T102058)
$lang = $this->getRequest()->getVal( 'lang', '' );
// Stricter version of RequestContext::sanitizeLangCode()
if ( !Language::isValidBuiltInCode( $lang ) ) {
wfDebug( "Invalid user language code\n" );
global $wgLanguageCode;
$lang = $wgLanguageCode;
}
$this->language = $lang;
}
return $this->language;
}
/**
* @return string
*/
public function getDirection() {
if ( $this->direction === null ) {
$this->direction = $this->getRequest()->getVal( 'dir' );
if ( !$this->direction ) {
// Determine directionality based on user language (bug 6100)
$this->direction = Language::factory( $this->getLanguage() )->getDir();
}
}
return $this->direction;
}
2010-09-04 12:53:01 +00:00
/**
* @return string
*/
public function getSkin() {
return $this->skin;
}
2010-09-04 12:53:01 +00:00
/**
* @return string|null
*/
public function getUser() {
return $this->user;
}
/**
* Get the possibly-cached User object for the specified username
*
* @since 1.25
* @return User|bool false if a valid object cannot be created
*/
public function getUserObj() {
if ( $this->userObj === null ) {
$username = $this->getUser();
if ( $username ) {
// Optimize: Avoid loading a new User object if possible
global $wgUser;
if ( is_object( $wgUser ) && $wgUser->getName() === $username ) {
$this->userObj = $wgUser;
} else {
$this->userObj = User::newFromName( $username );
}
} else {
$this->userObj = new User; // Anonymous user
}
}
return $this->userObj;
}
/**
* @return bool
*/
public function getDebug() {
return $this->debug;
}
2010-09-04 12:53:01 +00:00
/**
* @return string|null
*/
public function getOnly() {
return $this->only;
}
2010-09-04 12:53:01 +00:00
/**
resourceloader: Replace timestamp system with version hashing Modules now track their version via getVersionHash() instead of getModifiedTime(). == Background == While some resources have observeable timestamps (e.g. files stored on disk), many other resources do not. E.g. config variables, and module definitions. For static file modules, one can e.g. revert one of more files in a module to a previous version and not affect the max timestamp. Wiki modules include pages only if they exist. The user module supports common.js and skin.js. By default neither exists. If a user has both, and then the less-recently modified one is deleted, the max-timestamp remains unchanged. For client-side caching, batch requests use "Math.max" on the relevant timestamps. Again, if a module changes but another module is more recent (e.g. out-of-order deployment, or out-of-order discovery), the change would not result in a cache miss. More scenarios can be found in the associated Phabricator tasks. == Version hash == Previously we virtually mapped these variables to a timestamp by storing the current time alongside a hash of the value in ObjectCache. Considering the number of possible request contexts (wikis * modules * users * skins * languages) this doesn't work well. It results in needless cache invalidation when the first time observation is purged due to LRU algorithms. It also has other minor bugs leading to fewer cache hits. All modules automatically get the benefits of version hashing with this change. The old getDefinitionMtime() and getHashMtime() have been replaced with dummies that return 1. These functions are often called from getModifiedTime() in subclasses. For backward-compatibility, their respective values (definition summary and hash) are now included in getVersionHash directly. As examples, the following modules have been updated to use getVersionHash directly. Other modules still work fine and can be updated later. * ResourceLoaderFileModule * ResourceLoaderEditToolbarModule * ResourceLoaderStartUpModule * ResourceLoaderWikiModule The presence of hashes in place of timestamps increases the startup module size on a default MediaWiki install from 4.4k to 5.8k (after gzip and minification). == ETag == Since timestamps are no longer tracked, we need a different way to implement caching for cache proxies (e.g. Varnish) and web browsers. Previously we used the Last-Modified header (in combination with Cache-Control and Expires). Instead of Last-Modified (and If-Modified-Since), we use ETag (and If-None-Match). Entity tags (new in HTTP/1.1) are much stricter than Last-Modified by default. They instruct browsers to allow usage of partial Range requests. Since our responses are dynamically generated, we need to use the Weak version of ETag. While this sounds bad, it's no different than Last-Modified. As reassured by RFC 2616 <http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13.3.3> the specified behaviour behind Last-Modified follows the same "Weak" caching logic as Entity tags. It's just that entity tags are capable of a stricter mode (whereas Last-Modified is inherently weak). == File cache == If $wgUseFileCache is enabled, ResourceLoader uses ResourceFileCache to cache load.php responses. While the blind TTL handling (during the allowed expiry period) is still maxage/timestamp based, tryRespondNotModified() now requires the caller to know the expected ETag. For this to work, the FileCache handling had to be moved from the top of ResoureLoader::respond() to after the expected ETag is computed. This also allows us to remove the duplicate tryRespondNotModified() handling since that's is already handled by ResourceLoader::respond() meanwhile. == Misc == * Remove redundant modifiedTime cache in ResourceLoaderFileModule. * Change bugzilla references to Phabricator. * Centralised inclusion of wgCacheEpoch using getDefinitionSummary. Previously this logic was duplicated in each place the modified timestamp was used. * It's easy to forget calling the parent class in getDefinitionSummary(). Previously this method only tracked 'class' by default. As such, various extensions hardcoded that one value instead of calling the parent and extending the array. To better prevent this in the future, getVersionHash() now asserts that the '_cacheEpoch' property made it through. * tests: Don't use getDefinitionSummary() as an API. Fix ResourceLoaderWikiModuleTest to call getPages properly. * In tests, the default timestamp used to be 1388534400000 (which is the unix time of 20140101000000; the unit tests' CacheEpoch). The new version hash of these modules is "XyCC+PSK", which is the base64 encoded prefix of the SHA1 digest of: '{"_class":"ResourceLoaderTestModule","_cacheEpoch":"20140101000000"}' * Add sha1.js library for client-side hash generation. Compared various different implementations for code size (after minfication/gzip), and speed (when used for short hexidecimal strings). https://jsperf.com/sha1-implementations - CryptoJS <https://code.google.com/p/crypto-js/#SHA-1> (min+gzip: 2.5k) http://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/sha1.js Chrome: 45k, Firefox: 89k, Safari: 92k - jsSHA <https://github.com/Caligatio/jsSHA> https://github.com/Caligatio/jsSHA/blob/3c1d4f2e/src/sha1.js (min+gzip: 1.8k) Chrome: 65k, Firefox: 53k, Safari: 69k - phpjs-sha1 <https://github.com/kvz/phpjs> (RL min+gzip: 0.8k) https://github.com/kvz/phpjs/blob/1eaab15d/functions/strings/sha1.js Chrome: 200k, Firefox: 280k, Safari: 78k Modern browsers implement the HTML5 Crypto API. However, this API is asynchronous, only enabled when on HTTPS in Chromium, and is quite low-level. It requires boilerplate code to actually use with TextEncoder, ArrayBuffer and Uint32Array. Due this being needed in the module loader, we'd have to load the fallback regardless. Considering this is not used in a critical path for performance, it's not worth shipping two implementations for this optimisation. May also resolve: * T44094 * T90411 * T94810 Bug: T94074 Change-Id: Ibb292d2416839327d1807a66c78fd96dac0637d0
2015-04-29 22:53:24 +00:00
* @see ResourceLoaderModule::getVersionHash
* @see OutputPage::makeResourceLoaderLink
* @return string|null
*/
public function getVersion() {
return $this->version;
}
/**
* @return bool
*/
public function getRaw() {
return $this->raw;
}
/**
* @return string|null
*/
public function getImage() {
return $this->image;
}
/**
* @return string|null
*/
public function getVariant() {
return $this->variant;
}
/**
* @return string|null
*/
public function getFormat() {
return $this->format;
}
/**
* If this is a request for an image, get the ResourceLoaderImage object.
*
* @since 1.25
* @return ResourceLoaderImage|bool false if a valid object cannot be created
*/
public function getImageObj() {
if ( $this->imageObj === null ) {
$this->imageObj = false;
if ( !$this->image ) {
return $this->imageObj;
}
$modules = $this->getModules();
if ( count( $modules ) !== 1 ) {
return $this->imageObj;
}
$module = $this->getResourceLoader()->getModule( $modules[0] );
if ( !$module || !$module instanceof ResourceLoaderImageModule ) {
return $this->imageObj;
}
$image = $module->getImage( $this->image, $this );
if ( !$image ) {
return $this->imageObj;
}
$this->imageObj = $image;
}
return $this->imageObj;
}
/**
* @return bool
*/
public function shouldIncludeScripts() {
return $this->getOnly() === null || $this->getOnly() === 'scripts';
}
2010-09-04 12:53:01 +00:00
/**
* @return bool
*/
public function shouldIncludeStyles() {
return $this->getOnly() === null || $this->getOnly() === 'styles';
}
2010-09-04 12:53:01 +00:00
/**
* @return bool
*/
public function shouldIncludeMessages() {
return $this->getOnly() === null;
}
2010-09-04 12:53:01 +00:00
/**
* All factors that uniquely identify this request, except 'modules'.
*
* The list of modules is excluded here for legacy reasons as most callers already
* split up handling of individual modules. Including it here would massively fragment
* the cache and decrease its usefulness.
*
* E.g. Used by RequestFileCache to form a cache key for storing the reponse output.
*
* @return string
*/
public function getHash() {
if ( !isset( $this->hash ) ) {
$this->hash = implode( '|', array(
// Module content vary
$this->getLanguage(),
$this->getSkin(),
$this->getDebug(),
$this->getUser(),
// Request vary
$this->getOnly(),
$this->getVersion(),
$this->getImage(),
$this->getVariant(),
$this->getFormat(),
) );
}
return $this->hash;
}
}