text: /*
   * Copyright (C) 2009 Google Inc. All rights reserved.
   * Copyright (c) 2010 ACCESS CO., LTD. All rights reserved.
   *
   * Redistribution and use in source and binary forms, with or without
   * modification, are permitted provided that the following conditions are
   * met:
   *
   *     * Redistributions of source code must retain the above copyright
   * notice, this list of conditions and the following disclaimer.
   *     * Redistributions in binary form must reproduce the above
   * copyright notice, this list of conditions and the following disclaimer
   * in the documentation and/or other materials provided with the
   * distribution.
   *     * Neither the name of Google Inc. nor the names of its
   * contributors may be used to endorse or promote products derived from
   * this software without specific prior written permission.
   *
   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
   * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
   * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
   * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
   * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
   * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
   * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
   * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
   * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
   * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
   * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
   */
  
  #include "config.h"
  #include "ScriptEventListener.h"
  
  #include "Attribute.h"
  #include "Document.h"
  #include "EventListener.h"
  #include "JSNode.h"
  #include "Frame.h"
  #include "XSSAuditor.h"
  
  using namespace JSC;
  
  namespace WebCore {
  
  #if PLATFORM(WKC)
  static String* gEventString = 0;
  static String* gEvtString = 0;
  #endif
  
  static const String& eventParameterName(bool isSVGEvent)
  {
  #if PLATFORM(WKC)
      if (!gEventString) {
          gEventString = new String("event");
      }
      String& eventString = *gEventString;
      if (!gEvtString) {
          gEvtString = new String("evt");
      }
      String& evtString = *gEvtString;
  #else
      DEFINE_STATIC_LOCAL(const String, eventString, ("event"));
      DEFINE_STATIC_LOCAL(const String, evtString, ("evt"));
  #endif
      return isSVGEvent ? evtString : eventString;
  }
  
  PassRefPtr<JSLazyEventListener> createAttributeEventListener(Node* node, Attribute* attr)
  {
      ASSERT(node);
  
      int lineNumber = 1;
      String sourceURL;
      
      // FIXME: We should be able to provide accurate source information for frameless documents, too (e.g. for importing nodes from XMLHttpRequest.responseXML).
      if (Frame* frame = node->document()->frame()) {
          ScriptController* scriptController = frame->script();
          if (!scriptController->isEnabled())
              return 0;
  
          if (!scriptController->xssAuditor()->canCreateInlineEventListener(attr->localName().string(), attr->value())) {
              // This script is not safe to execute.
              return 0;
          }
  
          lineNumber = scriptController->eventHandlerLineNumber();
          sourceURL = node->document()->url().string();
      }
  
      return JSLazyEventListener::create(attr->localName().string(), eventParameterName(node->isSVGElement()), attr->value(), node, sourceURL, lineNumber, mainThreadNormalWorld());
  }
  
  PassRefPtr<JSLazyEventListener> createAttributeEventListener(Frame* frame, Attribute* attr)
  {
      if (!frame)
          return 0;
  
      int lineNumber = 1;
      String sourceURL;
      
      ScriptController* scriptController = frame->script();
      if (!scriptController->isEnabled())
          return 0;
  
      if (!scriptController->xssAuditor()->canCreateInlineEventListener(attr->localName().string(), attr->value())) {
          // This script is not safe to execute.
          return 0;
      }
  
      lineNumber = scriptController->eventHandlerLineNumber();
      sourceURL = frame->document()->url().string();
      return JSLazyEventListener::create(attr->localName().string(), eventParameterName(frame->document()->isSVGDocument()), attr->value(), 0, sourceURL, lineNumber, mainThreadNormalWorld());
  }
  
  String getEventListenerHandlerBody(ScriptExecutionContext* context, ScriptState* scriptState, EventListener* eventListener)
  {
      JSC::JSObject* functionObject = eventListener->jsFunction(context);
      if (!functionObject)
          return "";
      return functionObject->toString(scriptState);
  }
  
  #if PLATFORM(WKC)
  void ScriptEventListener_deleteSharedInstance()
  {
      delete gEventString;
      delete gEvtString;
  }
  
  void ScriptEventListener_resetVariables()
  {
      gEventString = 0;
      gEvtString = 0;
  }
  #endif
  
  } // namespace WebCore
  