--- parser3/src/classes/Attic/root.C	2001/03/18 13:38:45	1.41
+++ parser3/src/classes/Attic/root.C	2001/03/26 10:36:52	1.50
@@ -3,16 +3,16 @@
 	Copyright (c) 2001 ArtLebedev Group (http://www.artlebedev.com)
 	Author: Alexander Petrosyan <paf@design.ru> (http://design.ru/paf)
 
-	$Id: root.C,v 1.41 2001/03/18 13:38:45 paf Exp $
+	$Id: root.C,v 1.50 2001/03/26 10:36:52 paf Exp $
 */
 
-#include <string.h>
+#include "pa_config_includes.h"
 #include <math.h>
 
+#include "pa_common.h"
 #include "pa_request.h"
 #include "_root.h"
 #include "pa_vint.h"
-#include "pa_common.h"
 
 static void _if(Request& r, const String& method_name, Array *params) {
 	Value& condition_code=*static_cast<Value *>(params->get(0));
@@ -48,16 +48,40 @@ static void _untaint(Request& r, const S
 			"invalid untaint language");
 
 	{
-		Temp_lang temp_lang(r, lang);
 		Value *vbody=static_cast<Value *>(params->get(1));
 		// forcing ^untaint[]{this param type}
 		r.fail_if_junction_(false, *vbody, 
 			method_name, "body must be junction");
 		
-		r.write_pass_lang(r.process(*vbody));
+		Temp_lang temp_lang(r, lang); // set temporarily specified ^untaint[language;
+		r.write_pass_lang(r.process(*vbody)); // process marking tainted with that lang
+	}
+}
+
+static void _taint(Request& r, const String& method_name, Array *params) {
+	const String& lang_name=r.process(*static_cast<Value *>(params->get(0))).as_string();
+	String::Untaint_lang lang=static_cast<String::Untaint_lang>(
+		untaint_lang_name2enum->get_int(lang_name));
+	if(!lang)
+		RTHROW(0, 0,
+			&lang_name,
+			"invalid taint language");
+
+	{
+		Value *vbody=static_cast<Value *>(params->get(1));
+		// forcing ^untaint[]{this param type}
+		r.fail_if_junction_(true, *vbody, 
+			method_name, "body must not be junction");
+		
+		// set temporarily as-is language
+		Temp_lang temp_lang(r, String::UL_AS_IS);
+		String result(r.pool());
+		result.append(
+			r.process(*vbody).as_string(),  // process marking tainted with that lang
+			lang, true);  // force result language to specified
+		r.write_pass_lang(result);
 	}
 }
-	
 
 static void _process(Request& r, const String& method_name, Array *params) {
 	// calculate pseudo file name of processed chars
@@ -75,7 +99,9 @@ static void _process(Request& r, const S
 	VStateless_class& self_class=*r.self->get_class();
 	{
 		// temporary zero @main so to maybe-replace it in processed code
-		Temp_method temp_method(self_class, *main_method_name, 0);
+		Temp_method temp_method_main(self_class, *main_method_name, 0);
+		// temporary zero @auto so it wouldn't be auto-called in Request::use_buf
+		Temp_method temp_method_auto(self_class, *auto_method_name, 0);
 		
 		// evaluate source to process
 		const String& source=
@@ -137,8 +163,7 @@ static void _use(Request& r, const Strin
 	r.fail_if_junction_(true, vfile, 
 		method_name, "file name must not be junction");
 
-	char *file=vfile.as_string().cstr();
-	r.use_file(r.absolute(file));
+	r.use_file(r.absolute(vfile.as_string()));
 }
 
 static void _for(Request& r, const String& method_name, Array *params) {
@@ -245,9 +270,12 @@ void initialize_root_class(Pool& pool, V
 	// ^if(condition){code-when-true}{code-when-false}
 	vclass.add_native_method("if", _if, 2, 3);
 
-	// ^untaint[as-is|sql|js|html|html-typo]{code}
+	// ^untaint[as-is|uri|sql|js|html|html-typo]{code}
 	vclass.add_native_method("untaint", _untaint, 2, 2);
 
+	// ^taint[as-is|uri|sql|js|html|html-typo]{code}
+	vclass.add_native_method("taint", _taint, 2, 2);
+
 	// ^process[code]
 	vclass.add_native_method("process", _process, 1, 1);