inspec/lib/utils/nginx_parser.rb
Adam Leff 0a11280444
nginx resource: support quoted identifiers (#2292)
An nginx config may contain configuration settings that are quoted, such
as a map entry:

"~^\/opcache-api" 1;

The `nginx_conf` resource was failing to properly parse these.

Signed-off-by: Adam Leff <adam@leff.co>
2017-11-08 12:42:37 -05:00

85 lines
2.3 KiB
Ruby

# encoding: utf-8
# author: Dominik Richter
# author: Christoph Hartmann
require 'parslet'
class NginxParser < Parslet::Parser
root :outermost
# only designed for rabbitmq config files for now:
rule(:outermost) { filler? >> exp.repeat }
rule(:filler?) { one_filler.repeat }
rule(:one_filler) { match('\s+') | match["\n"] | comment }
rule(:space) { match('\s+') }
rule(:comment) { str('#') >> (match["\n\r"].absent? >> any).repeat }
rule(:exp) {
section | assignment
}
rule(:assignment) {
(identifier >> values.maybe.as(:args)).as(:assignment) >> str(';') >> filler?
}
rule(:standard_identifier) {
(match('[a-zA-Z]') >> match('\S').repeat).as(:identifier) >> space >> space.repeat
}
rule(:quoted_identifier) {
str('"') >> (str('"').absent? >> any).repeat.as(:identifier) >> str('"') >> space.repeat
}
rule(:identifier) {
standard_identifier | quoted_identifier
}
rule(:value) {
((match('[#;{]').absent? >> any) >> (
str('\\') >> any | match('[#;{]|\s').absent? >> any
).repeat).as(:value) >> space.repeat
}
rule(:values) {
value.repeat >> space.maybe
}
rule(:section) {
identifier.as(:section) >> values.maybe.as(:args) >> str('{') >> filler? >> exp.repeat.as(:expressions) >> str('}') >> filler?
}
end
class NginxTransform < Parslet::Transform
Group = Struct.new(:id, :args, :body)
Exp = Struct.new(:key, :vals)
def self.assemble_binary(seq)
b = ErlangBitstream.new
seq.each { |i| b.add(i) }
b.value
end
rule(section: { identifier: simple(:x) }, args: subtree(:y), expressions: subtree(:z)) { Group.new(x.to_s, y, z) }
rule(assignment: { identifier: simple(:x), args: subtree(:y) }) { Exp.new(x.to_s, y) }
rule(value: simple(:x)) { x.to_s }
end
class NginxConfig
def self.parse(content)
lex = NginxParser.new.parse(content)
tree = NginxTransform.new.apply(lex)
gtree = NginxTransform::Group.new(nil, '', tree)
read_nginx_group(gtree)
rescue Parslet::ParseFailed => err
raise "Failed to parse NginX config: #{err}"
end
def self.read_nginx_group(t)
agg_conf = Hash.new([])
agg_conf['_'] = t.args unless t.args == ''
groups, conf = t.body.partition { |i| i.is_a? NginxTransform::Group }
conf.each { |x| agg_conf[x.key] += [x.vals] }
groups.each { |x| agg_conf[x.id] += [read_nginx_group(x)] }
agg_conf
end
end