[catagits/Catalyst-Action-REST.git] / lib / Catalyst / Action / Deserialize / Data / Serializer.pm

package Catalyst::Action::Deserialize::Data::Serializer;

use Moose;
use namespace::autoclean;

extends 'Catalyst::Action';
use Data::Serializer;
use Safe;
my $compartment = Safe->new;
$compartment->permit_only( qw(padany null lineseq const pushmark list anonhash anonlist refgen leaveeval undef) );

our $VERSION = '0.88';
$VERSION = eval $VERSION;

sub execute {
    my $self = shift;
    my ( $controller, $c, $serializer ) = @_;

    my $sp = $serializer;
    $sp =~ s/::/\//g;
    $sp .= ".pm";
    eval {
        require $sp
    };
    if ($@) {
        $c->log->debug("Could not load $serializer, refusing to serialize: $@")
            if $c->debug;
        return 0;
    }
    my $body = $c->request->body;
    if ($body) {
        my $rbody;
        if ( -f $c->request->body ) {
            open( BODY, "<", $c->request->body );
            while ( my $line = <BODY> ) {
                $rbody .= $line;
            }
            close(BODY);
        }
        my $rdata;
        if ( $serializer eq "Data::Dumper" ) {
            # Taken from Data::Serialize::Data::Dumper::deserialize, but run within a Safe compartment
            my $code = $rbody =~ /^\{/ ? "+".$rbody : $rbody;
            $rdata = $compartment->reval( $code );
        }
        else {
            my $dso = Data::Serializer->new( serializer => $serializer );
            eval {
                $rdata = $dso->raw_deserialize($rbody);
            };
        }
        if ($@) {
            return $@;
        }
        $c->request->data($rdata);
    } else {
        $c->log->debug(
            'I would have deserialized, but there was nothing in the body!')
                if $c->debug;
    }
    return 1;
}

__PACKAGE__->meta->make_immutable;

1;
Commit	Line	Data
7ad87df9	1	package Catalyst::Action::Deserialize::Data::Serializer;
7ad87df9	2
930013e6	3	use Moose;
930013e6	4	use namespace::autoclean;
7ad87df9	5
930013e6	6	extends 'Catalyst::Action';
7ad87df9	7	use Data::Serializer;
0fd45d2a	8	use Safe;
	9	my $compartment = Safe->new;
	10	$compartment->permit_only( qw(padany null lineseq const pushmark list anonhash anonlist refgen leaveeval undef) );
7ad87df9	11
a9e5f3d2	12	our $VERSION = '0.88';
f465980c	13	$VERSION = eval $VERSION;
f465980c	14
7ad87df9	15	sub execute {
	16	my $self = shift;
	17	my ( $controller, $c, $serializer ) = @_;
eccb2137	18
e601adda	19	my $sp = $serializer;
	20	$sp =~ s/::/\//g;
	21	$sp .= ".pm";
	22	eval {
	23	require $sp
	24	};
	25	if ($@) {
d4611771	26	$c->log->debug("Could not load $serializer, refusing to serialize: $@")
d4611771	27	if $c->debug;
e601adda	28	return 0;
e601adda	29	}
7ad87df9	30	my $body = $c->request->body;
	31	if ($body) {
	32	my $rbody;
eccb2137	33	if ( -f $c->request->body ) {
	34	open( BODY, "<", $c->request->body );
	35	while ( my $line = <BODY> ) {
7ad87df9	36	$rbody .= $line;
	37	}
	38	close(BODY);
	39	}
e601adda	40	my $rdata;
0fd45d2a	41	if ( $serializer eq "Data::Dumper" ) {
	42	# Taken from Data::Serialize::Data::Dumper::deserialize, but run within a Safe compartment
	43	my $code = $rbody =~ /^\{/ ? "+".$rbody : $rbody;
	44	$rdata = $compartment->reval( $code );
	45	}
	46	else {
	47	my $dso = Data::Serializer->new( serializer => $serializer );
	48	eval {
	49	$rdata = $dso->raw_deserialize($rbody);
	50	};
	51	}
e601adda	52	if ($@) {
	53	return $@;
	54	}
7ad87df9	55	$c->request->data($rdata);
7ad87df9	56	} else {
eccb2137	57	$c->log->debug(
d4611771	58	'I would have deserialized, but there was nothing in the body!')
d4611771	59	if $c->debug;
7ad87df9	60	}
e601adda	61	return 1;
eccb2137	62	}
7ad87df9	63
24748286	64	__PACKAGE__->meta->make_immutable;
24748286	65
7ad87df9	66	1;