1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
use std::collections::HashMap;
pub fn parse_query_string(string: &str) -> Option<HashMap<&str, &str>> {
let mut map = HashMap::new();
let mut offset = 0;
let len = string.as_bytes().len();
while offset < len {
let key_start = offset;
if let Some(found) = string[key_start..].find('=') {
let key_end = key_start + found;
let key = &string[key_start..key_end];
let value_start = key_end + 1;
let value_end = value_start
+ string[value_start..].find('&').unwrap_or_else(|| {
string[value_start..].as_bytes().len()
});
let value = &string[value_start..value_end];
map.insert(key, value);
offset = value_end + 1;
} else {
return None;
}
}
return Some(map);
}
pub fn create_query_string(params: HashMap<&str, &str>) -> String {
fn escape(s: &str) -> String {
s.replace("%", "%25")
.replace("&", "%26")
.replace("=", "%3D")
}
let mut parts = vec![];
for (k, v) in params {
let mut part = escape(k);
part.push_str("=");
part.push_str(&escape(v)[..]);
parts.push(part);
}
return parts.join("&");
}
#[test]
fn test_parse_query_string() {
let got = parse_query_string("foo=bar&baz=qux&zap=zazzle");
let mut expected = HashMap::new();
expected.insert("foo", "bar");
expected.insert("baz", "qux");
expected.insert("zap", "zazzle");
assert_eq!(got, Some(expected));
assert_eq!(parse_query_string("foo=bar&baz=qux&zapzazzle"), None);
}
#[test]
fn test_create_query_string() {
let mut params = HashMap::new();
params.insert("foo", "bar");
params.insert("baz", "qux");
params.insert("zap", "zazzle");
let got = create_query_string(params);
let expected1 = "foo=bar&baz=qux&zap=zazzle";
let expected2 = "foo=bar&zap=zazzle&baz=qux";
let expected3 = "baz=qux&foo=bar&zap=zazzle";
let expected4 = "baz=qux&zap=zazzle&foo=bar";
let expected5 = "zap=zazzle&foo=bar&baz=qux";
let expected6 = "zap=zazzle&baz=qux&foo=bar";
assert!(
got == expected1
|| got == expected2
|| got == expected3
|| got == expected4
|| got == expected5
|| got == expected6,
"didn't parse query string correctly: {}",
got
);
}
#[test]
fn test_create_query_string_malicious() {
let mut params = HashMap::new();
params.insert("email", "foo@bar.com&role=admin");
let got = create_query_string(params);
let expected = "email=foo@bar.com%26role%3Dadmin";
assert_eq!(got, expected);
}
|
