first commit

node_modules/htmlencode/LICENSE

@@ -0,0 +1,25 @@
+----------------------------------------------------------------------
+node-htmlencode is released under the MIT License
+Copyright (c) 2013 Dan MacTough - http://yabfog.com
+Copyright (c) 2011 Robert Reid - Strictly-Software.com
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.

node_modules/htmlencode/README.md

@@ -0,0 +1,46 @@
+# node-htmlencode
+
+A wrapped version of http://www.strictly-software.com/htmlencode library --
+only two changes to the original:
+
+1. Renamed global `Encoder` object to `module.exports` so it can be used as a Node module.
+2. Fixed leaking global variable `arr` in `htmlDecode` method
+
+## Usage
+
+In addition to the very minor changes described above, the library is wrapped in
+a function to allow you to `require` just the individual method(s) you want.
+
+```js
+var htmlencode = require('htmlencode');
+htmlencode.htmlEncode('<h1>Welcome</h1>');
+// &lt;h1&gt;Welcome&lt;/h1&gt;
+```
+
+works the same as
+
+```js
+var htmlEncode = require('htmlencode').htmlEncode;
+htmlEncode('<h1>Welcome</h1>');
+// &lt;h1&gt;Welcome&lt;/h1&gt;
+```
+
+If you want to change to using numeric HTML entities, you'll still want to do
+something like this:
+
+```js
+var htmlencode = require('htmlencode');
+htmlencode.EncodeType = 'numerical'; // Don't blame me. I didn't name it.
+htmlencode.htmlEncode('<h1>Welcome</h1>');
+// &#60;h1&#62;Welcome&#60;/h1&#62;
+```
+
+Also provided is `module.exports.Encoder`, the wrapper class, so you can do
+something like this if you so choose:
+
+```js
+var htmlencode = require('htmlencode');
+var widget = new htmlencode.Encoder('numerical');
+widget.htmlEncode('<h1>Welcome</h1>');
+// &#60;h1&#62;Welcome&#60;/h1&#62;
+```

node_modules/htmlencode/encoder.js

@@ -0,0 +1,249 @@
+/**
+ * A Javascript object to encode and/or decode html characters using HTML or Numeric entities that handles double or partial encoding
+ * Author: R Reid
+ * source: http://www.strictly-software.com/htmlencode
+ * Licences: GPL, The MIT License (MIT)
+ * Copyright: (c) 2011 Robert Reid - Strictly-Software.com
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+ * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ * 
+ * Revision:
+ *  2011-07-14, Jacques-Yves Bleau: 
+ *       - fixed conversion error with capitalized accentuated characters
+ *       + converted arr1 and arr2 to object property to remove redundancy
+ *
+ * Revision:
+ *  2011-11-10, Ce-Yi Hio: 
+ *       - fixed conversion error with a number of capitalized entity characters
+ *
+ * Revision:
+ *  2011-11-10, Rob Reid: 
+ *		 - changed array format
+ *
+ * Revision:
+ *  2012-09-23, Alex Oss: 
+ *		 - replaced string concatonation in numEncode with string builder, push and join for peformance with ammendments by Rob Reid
+ *
+ * Revision:
+ * 2013-01-21, Dan MacTough:
+ * 		 - renamed Encoder to module.exports; fixed leaking global in htmlDecode
+ */
+
+// Encoder = {
+module.exports = {
+
+	// When encoding do we convert characters into html or numerical entities
+	EncodeType : "entity",  // entity OR numerical
+
+	isEmpty : function(val){
+		if(val){
+			return ((val===null) || val.length==0 || /^\s+$/.test(val));
+		}else{
+			return true;
+		}
+	},
+	
+	// arrays for conversion from HTML Entities to Numerical values
+	arr1: [' ','¡','¢','£','¤','¥','¦','§','¨','©','ª','«','¬','­','®','¯','°','±','²','³','´','µ','¶','·','¸','¹','º','»','¼','½','¾','¿','À','Á','Â','Ã','Ä','Å','Æ','Ç','È','É','Ê','Ë','Ì','Í','Î','Ï','Ð','Ñ','Ò','Ó','Ô','Õ','Ö','×','Ø','Ù','Ú','Û','Ü','Ý','Þ','ß','à','á','â','ã','ä','å','æ','ç','è','é','ê','ë','ì','í','î','ï','ð','ñ','ò','ó','ô','õ','ö','÷','ø','ù','ú','û','ü','ý','þ','ÿ','"','&','<','>','Œ','œ','Š','š','Ÿ','ˆ','˜',' ',' ',' ','‌','‍','‎','‏','–','—','‘','’','‚','“','”','„','†','‡','‰','‹','›','€','ƒ','Α','Β','Γ','Δ','Ε','Ζ','Η','Θ','Ι','Κ','Λ','Μ','Ν','Ξ','Ο','Π','Ρ','Σ','Τ','Υ','Φ','Χ','Ψ','Ω','α','β','γ','δ','ε','ζ','η','θ','ι','κ','λ','μ','ν','ξ','ο','π','ρ','ς','σ','τ','υ','φ','χ','ψ','ω','ϑ','ϒ','ϖ','•','…','′','″','‾','⁄','℘','ℑ','ℜ','™','ℵ','←','↑','→','↓','↔','↵','⇐','⇑','⇒','⇓','⇔','∀','∂','∃','∅','∇','∈','∉','∋','∏','∑','−','∗','√','∝','∞','∠','∧','∨','∩','∪','∫','∴','∼','≅','≈','≠','≡','≤','≥','⊂','⊃','⊄','⊆','⊇','⊕','⊗','⊥','⋅','⌈','⌉','⌊','⌋','⟨','⟩','◊','♠','♣','♥','♦'],
+	arr2: [' ','¡','¢','£','¤','¥','¦','§','¨','©','ª','«','¬','­','®','¯','°','±','²','³','´','µ','¶','·','¸','¹','º','»','¼','½','¾','¿','À','Á','Â','Ã','Ä','Å','Æ','Ç','È','É','Ê','Ë','Ì','Í','Î','Ï','Ð','Ñ','Ò','Ó','Ô','Õ','Ö','×','Ø','Ù','Ú','Û','Ü','Ý','Þ','ß','à','á','â','ã','ä','å','æ','ç','è','é','ê','ë','ì','í','î','ï','ð','ñ','ò','ó','ô','õ','ö','÷','ø','ù','ú','û','ü','ý','þ','ÿ','"','&','<','>','Œ','œ','Š','š','Ÿ','ˆ','˜',' ',' ',' ','‌','‍','‎','‏','–','—','‘','’','‚','“','”','„','†','‡','‰','‹','›','€','ƒ','Α','Β','Γ','Δ','Ε','Ζ','Η','Θ','Ι','Κ','Λ','Μ','Ν','Ξ','Ο','Π','Ρ','Σ','Τ','Υ','Φ','Χ','Ψ','Ω','α','β','γ','δ','ε','ζ','η','θ','ι','κ','λ','μ','ν','ξ','ο','π','ρ','ς','σ','τ','υ','φ','χ','ψ','ω','ϑ','ϒ','ϖ','•','…','′','″','‾','⁄','℘','ℑ','ℜ','™','ℵ','←','↑','→','↓','↔','↵','⇐','⇑','⇒','⇓','⇔','∀','∂','∃','∅','∇','∈','∉','∋','∏','∑','−','∗','√','∝','∞','∠','∧','∨','∩','∪','∫','∴','∼','≅','≈','≠','≡','≤','≥','⊂','⊃','⊄','⊆','⊇','⊕','⊗','⊥','⋅','⌈','⌉','⌊','⌋','〈','〉','◊','♠','♣','♥','♦'],
+		
+	// Convert HTML entities into numerical entities
+	HTML2Numerical : function(s){
+		return this.swapArrayVals(s,this.arr1,this.arr2);
+	},	
+
+	// Convert Numerical entities into HTML entities
+	NumericalToHTML : function(s){
+		return this.swapArrayVals(s,this.arr2,this.arr1);
+	},
+
+
+	// Numerically encodes all unicode characters
+	numEncode : function(s){ 
+		if(this.isEmpty(s)) return ""; 
+
+		var a = [],
+			l = s.length; 
+		
+		for (var i=0;i<l;i++){ 
+			var c = s.charAt(i); 
+			if (c < " " || c > "~"){ 
+				a.push("&#"); 
+				a.push(c.charCodeAt()); //numeric value of code point 
+				a.push(";"); 
+			}else{ 
+				a.push(c); 
+			} 
+		} 
+		
+		return a.join(""); 	
+	}, 
+	
+	// HTML Decode numerical and HTML entities back to original values
+	htmlDecode : function(s){
+
+		var c,m,d = s;
+		var arr;
+		
+		if(this.isEmpty(d)) return "";
+
+		// convert HTML entites back to numerical entites first
+		d = this.HTML2Numerical(d);
+		
+		// look for numerical entities &#34;
+		arr=d.match(/&#[0-9]{1,5};/g);
+		
+		// if no matches found in string then skip
+		if(arr!=null){
+			for(var x=0;x<arr.length;x++){
+				m = arr[x];
+				c = m.substring(2,m.length-1); //get numeric part which is refernce to unicode character
+				// if its a valid number we can decode
+				if(c >= -32768 && c <= 65535){
+					// decode every single match within string
+					d = d.replace(m, String.fromCharCode(c));
+				}else{
+					d = d.replace(m, ""); //invalid so replace with nada
+				}
+			}			
+		}
+
+		return d;
+	},		
+
+	// encode an input string into either numerical or HTML entities
+	htmlEncode : function(s,dbl){
+			
+		if(this.isEmpty(s)) return "";
+
+		// do we allow double encoding? E.g will &amp; be turned into &amp;amp;
+		dbl = dbl || false; //default to prevent double encoding
+		
+		// if allowing double encoding we do ampersands first
+		if(dbl){
+			if(this.EncodeType=="numerical"){
+				s = s.replace(/&/g, "&#38;");
+			}else{
+				s = s.replace(/&/g, "&amp;");
+			}
+		}
+
+		// convert the xss chars to numerical entities ' " < >
+		s = this.XSSEncode(s,false);
+		
+		if(this.EncodeType=="numerical" || !dbl){
+			// Now call function that will convert any HTML entities to numerical codes
+			s = this.HTML2Numerical(s);
+		}
+
+		// Now encode all chars above 127 e.g unicode
+		s = this.numEncode(s);
+
+		// now we know anything that needs to be encoded has been converted to numerical entities we
+		// can encode any ampersands & that are not part of encoded entities
+		// to handle the fact that I need to do a negative check and handle multiple ampersands &&&
+		// I am going to use a placeholder
+
+		// if we don't want double encoded entities we ignore the & in existing entities
+		if(!dbl){
+			s = s.replace(/&#/g,"##AMPHASH##");
+		
+			if(this.EncodeType=="numerical"){
+				s = s.replace(/&/g, "&#38;");
+			}else{
+				s = s.replace(/&/g, "&amp;");
+			}
+
+			s = s.replace(/##AMPHASH##/g,"&#");
+		}
+		
+		// replace any malformed entities
+		s = s.replace(/&#\d*([^\d;]|$)/g, "$1");
+
+		if(!dbl){
+			// safety check to correct any double encoded &amp;
+			s = this.correctEncoding(s);
+		}
+
+		// now do we need to convert our numerical encoded string into entities
+		if(this.EncodeType=="entity"){
+			s = this.NumericalToHTML(s);
+		}
+
+		return s;					
+	},
+
+	// Encodes the basic 4 characters used to malform HTML in XSS hacks
+	XSSEncode : function(s,en){
+		if(!this.isEmpty(s)){
+			en = en || true;
+			// do we convert to numerical or html entity?
+			if(en){
+				s = s.replace(/\'/g,"&#39;"); //no HTML equivalent as &apos is not cross browser supported
+				s = s.replace(/\"/g,"&quot;");
+				s = s.replace(/</g,"&lt;");
+				s = s.replace(/>/g,"&gt;");
+			}else{
+				s = s.replace(/\'/g,"&#39;"); //no HTML equivalent as &apos is not cross browser supported
+				s = s.replace(/\"/g,"&#34;");
+				s = s.replace(/</g,"&#60;");
+				s = s.replace(/>/g,"&#62;");
+			}
+			return s;
+		}else{
+			return "";
+		}
+	},
+
+	// returns true if a string contains html or numerical encoded entities
+	hasEncoded : function(s){
+		if(/&#[0-9]{1,5};/g.test(s)){
+			return true;
+		}else if(/&[A-Z]{2,6};/gi.test(s)){
+			return true;
+		}else{
+			return false;
+		}
+	},
+
+	// will remove any unicode characters
+	stripUnicode : function(s){
+		return s.replace(/[^\x20-\x7E]/g,"");
+		
+	},
+
+	// corrects any double encoded &amp; entities e.g &amp;amp;
+	correctEncoding : function(s){
+		return s.replace(/(&amp;)(amp;)+/,"$1");
+	},
+
+
+	// Function to loop through an array swaping each item with the value from another array e.g swap HTML entities with Numericals
+	swapArrayVals : function(s,arr1,arr2){
+		if(this.isEmpty(s)) return "";
+		var re;
+		if(arr1 && arr2){
+			//ShowDebug("in swapArrayVals arr1.length = " + arr1.length + " arr2.length = " + arr2.length)
+			// array lengths must match
+			if(arr1.length == arr2.length){
+				for(var x=0,i=arr1.length;x<i;x++){
+					re = new RegExp(arr1[x], 'g');
+					s = s.replace(re,arr2[x]); //swap arr1 item with matching item from arr2	
+				}
+			}
+		}
+		return s;
+	},
+
+	inArray : function( item, arr ) {
+		for ( var i = 0, x = arr.length; i < x; i++ ){
+			if ( arr[i] === item ){
+				return i;
+			}
+		}
+		return -1;
+	}
+
+}

node_modules/htmlencode/index.js

@@ -0,0 +1,34 @@
+/*!
+ * node-htmlencode - Wrapped version of http://www.strictly-software.com/htmlencode
+ * Copyright(c) 2013 Dan MacTough <danmactough@gmail.com>
+ * All rights reserved.
+ */
+
+var htmlencode = require('./encoder')
+  , extend = require('util')._extend;
+
+var Encoder = function (type) {
+  if (type) this.EncodeType = type;
+  return this;
+};
+extend(Encoder.prototype, htmlencode);
+
+var it = new Encoder();
+
+Object.defineProperty(module.exports, 'EncodeType', {
+  enumerable: true,
+  get: function () { return it.EncodeType; },
+  set: function (val) { return it.EncodeType = val; }
+});
+[ 'HTML2Numerical',
+  'NumericalToHTML',
+  'numEncode',
+  'htmlDecode',
+  'htmlEncode',
+  'XSSEncode',
+  'hasEncoded',
+  'stripUnicode',
+  'correctEncoding'].forEach(function (method) {
+  module.exports[method] = it[method].bind(it);
+});
+module.exports.Encoder = Encoder;

node_modules/htmlencode/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "htmlencode",
+  "version": "0.0.4",
+  "description": "Wrapped version of http://www.strictly-software.com/htmlencode",
+  "main": "index.js",
+  "scripts": {
+    "test": "env mocha"
+  },
+  "homepage": "https://github.com/danmactough/node-htmlencode",
+  "repository" :
+  {
+    "type" : "git",
+    "url" : "git://github.com/danmactough/node-htmlencode.git"
+  },
+  "keywords": [
+    "html",
+    "encode",
+    "decode"
+  ],
+  "author": "Dan MacTough <danmactough@gmail.com>",
+  "license": "MIT",
+  "devDependencies": {
+    "mocha": "~1"
+  },
+  "readmeFilename": "README.md",
+  "directories": {
+    "test": "test"
+  },
+  "dependencies": {}
+}

node_modules/htmlencode/test/htmlencode.js

@@ -0,0 +1,62 @@
+describe('htmlencode', function () {
+  var assert = require('assert');
+  var htmlencode = require('../');
+  var str = '<strong>';
+  var stru = '’90s';
+  var stru_n = '&#8217;90s';
+  var str_e = '&lt;strong&gt;';
+  var str_n = '&#60;strong&#62;';
+
+  describe('HTML2Numerical', function () {
+    it('should convert HTML entities into numerical entities', function () {
+      assert.equal(htmlencode.HTML2Numerical(str_e), str_n);
+    });
+  });
+
+  describe('NumericalToHTML', function () {
+    it('should convert Numerical entities into HTML entities', function () {
+      assert.equal(htmlencode.NumericalToHTML(str_n), str_e);
+    });
+  });
+
+  describe('numEncode', function () {
+    it('should numerically encodes all unicode characters', function () {
+      assert.equal(htmlencode.numEncode(stru), stru_n);
+    });
+  });
+
+  describe('htmlDecode', function () {
+    it('HTML Decode numerical and HTML entities back to original values', function () {
+      assert.equal(htmlencode.htmlDecode(str_e), str);
+      assert.equal(htmlencode.htmlDecode(str_n), str);
+    });
+  });
+
+  describe('htmlEncode', function () {
+    after(function () {
+      htmlencode.EncodeType = 'entity';
+    });
+    it('encode an input string into either numerical or HTML entities', function () {
+      htmlencode.EncodeType = 'entity';
+      assert.equal(htmlencode.htmlEncode(str), str_e);
+      htmlencode.EncodeType = 'numerical';
+      assert.equal(htmlencode.htmlEncode(str), str_n);
+    });
+  });
+
+  describe('hasEncoded', function () {
+    it('should return true if a string contains html or numerical encoded entities', function () {
+      assert.ok(htmlencode.hasEncoded(str_e));
+      assert.ok(htmlencode.hasEncoded(str_n));
+      assert.ok(htmlencode.hasEncoded(stru_n));
+    });
+  });
+
+  describe('Encoder Class', function () {
+    it('should create an instance that may have different properties', function () {
+      var alt = new htmlencode.Encoder('numerical');
+      assert.equal(alt.EncodeType, 'numerical');
+      assert.equal(htmlencode.EncodeType, 'entity');
+    });
+  });
+});

node_modules/htmlencode/test/mocha.opts

@@ -0,0 +1 @@
+--reporter spec