--- parser3/src/main/untaint.C	2009/01/12 07:17:20	1.143
+++ parser3/src/main/untaint.C	2009/07/07 12:14:00	1.150
@@ -5,7 +5,7 @@
 	Author: Alexandr Petrosian <paf@design.ru> (http://paf.design.ru)
 */
 
-static const char * const IDENT_UNTAINT_C="$Date: 2009/01/12 07:17:20 $";
+static const char * const IDENT_UNTAINT_C="$Date: 2009/07/07 12:14:00 $";
 
 
 #include "pa_string.h"
@@ -99,6 +99,10 @@ inline bool need_regex_escape(unsigned c
 	return strchr("\\^$.[]|()?*+{}-", c)!=0;
 }
 
+inline bool need_parser_code_escape(unsigned char c){
+	return strchr("^$;@()[]{}:#\"", c)!=0;
+}
+
 // String
 
 /*
@@ -185,21 +189,37 @@ int append_fragment_nonoptimizing(char a
 	or marking ALL pieces of it with a @a lang when @a forced to,
 	and propagating OPTIMIZE language bit.
 */
-String& String::append_to(String& dest, Language lang, bool forced) const {
+String& String::append_to(String& dest, Language ilang, bool forced) const {
 	if(is_empty())
 		return dest;
 
 	// first: fragment infos
 	
-	if(lang==L_PASS_APPENDED) // without language-change?
-		dest.langs.append(dest.body, body.length(), langs);
+	if(ilang==L_PASS_APPENDED) // without language-change?
+		dest.langs.appendHelper(dest.body, langs, body);
 	else if(forced) //forcing passed lang?
-		dest.langs.append(dest.body, lang, length());
-	else { 
-		Append_fragment_info info={lang, &dest.langs, dest.body.length()};
-	    langs.for_each(body, lang&L_OPTIMIZE_BIT?
-			append_fragment_optimizing
-			:append_fragment_nonoptimizing, &info);
+		dest.langs.appendHelper(dest.body, ilang, body);
+	else {
+		if(langs.opt.is_not_just_lang){
+			Append_fragment_info info={ilang, &dest.langs, dest.body.length()};
+			langs.for_each(body, ilang&L_OPTIMIZE_BIT?
+				append_fragment_optimizing
+				:append_fragment_nonoptimizing, &info);
+		} else {
+			Language lang=langs.opt.lang;
+			// see append_fragment_* for explanation
+			if(ilang&L_OPTIMIZE_BIT){
+				dest.langs.appendHelper(dest.body,
+					lang==String::L_TAINTED?
+						ilang
+						:lang==String::L_CLEAN?
+							(String::Language)(String::L_CLEAN|String::L_OPTIMIZE_BIT)
+							:lang,
+					body);
+			} else {
+				dest.langs.appendHelper(dest.body, lang==String::L_TAINTED ? ilang:lang, body);
+			}
+		}
 	}
 
 	// next: letters
@@ -301,13 +321,11 @@ struct Cstr_to_string_body_block_info {
 	const char* exception;
 };
 #endif
-int cstr_to_string_body_block(char alang, size_t fragment_length, Cstr_to_string_body_block_info* info) {
-	const String::Language fragment_lang=(String::Language)(unsigned char)alang;
+int cstr_to_string_body_block(String::Language to_lang, size_t fragment_length, Cstr_to_string_body_block_info* info) {
 	bool& whitespace=info->whitespace;
 	size_t fragment_end=info->fragment_begin+fragment_length;
-	//fprintf(stderr, "%d, %d =%s=\n", fragment_lang, fragment_length, info->body->cstr());
+	//fprintf(stderr, "%d, %d =%s=\n", to_lang, fragment_length, info->body->cstr());
 	
-	String::Language to_lang=info->lang==String::L_UNSPECIFIED?fragment_lang:info->lang;
 	bool optimize=(to_lang & String::L_OPTIMIZE_BIT)!=0;
 	if(!optimize)
 		whitespace=false;
@@ -339,6 +357,15 @@ int cstr_to_string_body_block(char alang
 			);
 		}
 		break;
+	case String::L_FILE_POST:
+		{
+			escape_fragment(switch(c) {
+				case '\0': to_string("\\0");  break;
+				case '\\': to_string("\\\\"); break;
+				default: _default; break;
+			});
+		}
+		break;
 	case String::L_URI:
 		// tainted, untaint language: uri
 		{
@@ -432,6 +459,7 @@ int cstr_to_string_body_block(char alang
 			case '\'': to_string("\\'");  break;
 			case '\\': to_string("\\\\");  break;
 			case '\xFF': to_string("\\\xFF");  break;
+			case '\r': to_string("\\r");  break;
 			default: _default; break;
 		});
 		break;
@@ -499,6 +527,14 @@ int cstr_to_string_body_block(char alang
 
 		}
 		break;
+	case String::L_PARSER_CODE:
+		// for auto-untaint in process
+		escape_fragment(
+			if(need_parser_code_escape(c))
+				to_char('^');
+			_default;
+		);
+		break;
 	default:
 		SAPI::abort("unknown untaint language #%d", 
 			static_cast<int>(to_lang)); // should never
@@ -511,9 +547,7 @@ int cstr_to_string_body_block(char alang
 }
 
 
-String::Body String::cstr_to_string_body(Language lang, 
-		  SQL_Connection* connection,
-		  const Request_charsets *charsets) const {
+String::Body String::cstr_to_string_body_taint(Language lang, SQL_Connection* connection, const Request_charsets *charsets) const {
 	if(is_empty())
 		return String::Body();
 
@@ -531,12 +565,54 @@ String::Body String::cstr_to_string_body
 	info.exception=0;
 	info.whitespace=true;
 
-	langs.for_each(body, cstr_to_string_body_block, &info);
-	if(info.exception){
+	cstr_to_string_body_block(lang, length(), &info);
+
+	if(info.exception)
+		throw Exception(0,
+			0,
+			info.exception);
+
+	return String::Body(CORD_ec_to_cord(info.result));
+}
+
+int cstr_to_string_body_block_untaint(char alang, size_t fragment_length, Cstr_to_string_body_block_info* info){
+	const String::Language lang=(String::Language)(unsigned char)alang;
+	// see append_fragment_* for explanation
+	if(info->lang&String::L_OPTIMIZE_BIT)
+		return cstr_to_string_body_block(
+			lang==String::L_TAINTED?
+				info->lang
+				:lang==String::L_CLEAN?
+					(String::Language)(String::L_CLEAN|String::L_OPTIMIZE_BIT)
+					:lang,
+			fragment_length, info);
+	else
+		return cstr_to_string_body_block(lang==String::L_TAINTED ? info->lang:lang, fragment_length, info);
+}
+
+String::Body String::cstr_to_string_body_untaint(Language lang, SQL_Connection* connection, const Request_charsets *charsets) const {
+	if(is_empty())
+		return String::Body();
+
+	Cstr_to_string_body_block_info info;
+	// input
+	info.lang=lang;
+	info.connection=connection;
+	info.charsets=charsets;
+	info.body=&body;
+	// output
+	CORD_ec_init(info.result);
+	// private
+	body.set_pos(info.pos, 0);
+	info.fragment_begin=0;
+	info.exception=0;
+	info.whitespace=true;
+
+	langs.for_each(body, cstr_to_string_body_block_untaint, &info);
+	if(info.exception)
 		throw Exception(0,
 			0,
 			info.exception);
-	}
 
 	return String::Body(CORD_ec_to_cord(info.result));
 }