mirror of
https://github.com/storytold/craft-libs.git
synced 2026-11-15 06:52:23 +00:00
Dylan M. TaylorandMartin Ball
d197b1e72f
MailCraft crates/dav/src/xml.rs at a44a450, re-based onto craft-xml: a multistatus read fail-closed into a bounded tree with fixed prefixes for the DAV, CalDAV, CardDAV and related namespaces, and the properties of a response's successful propstats. Its tests come along. Co-authored-by: Martin Ball <98639962+benandez@users.noreply.github.com>
49 lines
1.7 KiB
Markdown
49 lines
1.7 KiB
Markdown
# craft-dav
|
|
|
|
WebDAV multistatus documents (RFC 4918 §13): what a server answers a `PROPFIND`, or a CalDAV
|
|
(RFC 4791) or CardDAV (RFC 6352) `REPORT`, with. No I/O.
|
|
|
|
```rust
|
|
let root = craft_dav::parse_multistatus(body)?;
|
|
for response in craft_dav::responses(&root) {
|
|
let href = craft_dav::href(response);
|
|
for property in craft_dav::properties(response) {
|
|
match property.name.as_str() {
|
|
"d:getetag" => { /* property.text() */ }
|
|
"c:calendar-data" | "card:address-data" => { /* the iCalendar or vCard text */ }
|
|
_ => {}
|
|
}
|
|
}
|
|
}
|
|
```
|
|
|
|
Names carry fixed prefixes whatever the document used: `d:` (`DAV:`), `c:` (CalDAV), `card:`
|
|
(CardDAV), `cs:` (CalendarServer), `oc:` (ownCloud), `nc:` (Nextcloud). Other namespaces start
|
|
with `?:`. `properties` gives only what a `200` propstat returned.
|
|
|
|
## Hostile input
|
|
|
|
The reader is built on `craft-xml` and fails closed: a document type declaration, an entity that
|
|
is not predefined, a character XML cannot carry, text that is not UTF-8, malformed or unbalanced
|
|
markup, a second root, text outside the root, or a root other than `DAV:multistatus` makes the
|
|
whole document an error.
|
|
|
|
| Limit | Value |
|
|
|---|---|
|
|
| `MAX_BYTES` | 16 MiB |
|
|
| `MAX_NODES` | 100,000 |
|
|
| `MAX_DEPTH` | 32 |
|
|
| `MAX_ATTRS` per element / `MAX_ATTRS_TOTAL` | 64 / 200,000 |
|
|
|
|
## What stays in the apps
|
|
|
|
Requests, credentials and HTTP; what a collection or resource means; reading the iCalendar and
|
|
vCard text (`craft-ical`, `craft-vcard`).
|
|
|
|
## Origin
|
|
|
|
MailCraft `crates/dav/src/xml.rs` at
|
|
[a44a450](https://github.com/UCS-Care-Group/mailcraft/commit/a44a45013d1c6396229c40ab60172d1882b368d5),
|
|
by Martin Ball and the MailCraft contributors (MIT OR Apache-2.0), and its tests, re-based from
|
|
`quick-xml` onto `craft-xml`.
|