Last Piece Hacktivist Crew

Editing: validation.php

<?php

namespace Elementor\Modules\Interactions;

use Elementor\Modules\Interactions\Validators\Breakpoints_Value as BreakpointsValueValidator;
use Elementor\Modules\Interactions\Validators\Custom_Effect_Value;
use Elementor\Modules\Interactions\Validators\String_Value as StringValueValidator;
use Elementor\Modules\Interactions\Validators\Trigger_Value as TriggerValueValidator;

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

class Validation {
	private $elements_to_interactions_counter = [];
	private $max_number_of_interactions = 5;

private const VALID_EFFECTS = [ 'fade', 'slide', 'scale', 'custom' ];
	private const VALID_TYPES = [ 'in', 'out' ];
	private const VALID_DIRECTIONS = [ '', 'left', 'right', 'top', 'bottom', 'top-left', 'top-right', 'bottom-left', 'bottom-right' ];
	private const VALID_REPEAT_MODES = [ '', 'loop', 'times' ];

public function sanitize( $document ) {
		return $this->sanitize_document_data( $document );
	}

public function validate() {
		foreach ( $this->elements_to_interactions_counter as $element_id => $number_of_interactions ) {
			if ( $number_of_interactions > $this->max_number_of_interactions ) {
				throw new \Exception(
					sprintf(
						// translators: %1$s: element ID, %2$d: maximum number of interactions allowed.
						esc_html__( 'Element %1$s has more than %2$d interactions', 'elementor' ),
						esc_html( $element_id ),
						esc_html( $this->max_number_of_interactions )
					)
				);
			}
		}

return true;
	}

private function sanitize_document_data( $data ) {
		if ( isset( $data['elements'] ) && is_array( $data['elements'] ) ) {
			$data['elements'] = $this->sanitize_elements_interactions( $data['elements'] );
		}

return $data;
	}

private function sanitize_elements_interactions( $elements ) {
		if ( ! is_array( $elements ) ) {
			return $elements;
		}

foreach ( $elements as &$element ) {
			if ( isset( $element['interactions'] ) ) {
				$element['interactions'] = $this->sanitize_interactions( $element['interactions'], $element['id'] );
			}

if ( isset( $element['elements'] ) && is_array( $element['elements'] ) ) {
				$element['elements'] = $this->sanitize_elements_interactions( $element['elements'] );
			}
		}

return $elements;
	}

private function decode_interactions( $interactions ) {
		if ( is_array( $interactions ) ) {
			if ( isset( $interactions['items']['$$type'] ) && 'array' === $interactions['items']['$$type'] ) {
				return isset( $interactions['items']['value'] ) ? $interactions['items']['value'] : [];
			}
			return isset( $interactions['items'] ) ? $interactions['items'] : [];
		}

if ( is_string( $interactions ) ) {
			$decoded = json_decode( $interactions, true );
			if ( json_last_error() === JSON_ERROR_NONE && is_array( $decoded ) ) {
				if ( isset( $decoded['items']['$$type'] ) && 'array' === $decoded['items']['$$type'] ) {
					return isset( $decoded['items']['value'] ) ? $decoded['items']['value'] : [];
				}
				return isset( $decoded['items'] ) ? $decoded['items'] : [];
			}
		}

return [];
	}

private function increment_interactions_counter_for( $element_id ) {
		if ( ! array_key_exists( $element_id, $this->elements_to_interactions_counter ) ) {
			$this->elements_to_interactions_counter[ $element_id ] = 0;
		}

++$this->elements_to_interactions_counter[ $element_id ];

return $this;
	}

private function sanitize_interactions( $interactions, $element_id ) {
		$sanitized = [
			'items' => [],
			'version' => 1,
		];

$list_of_interactions = $this->decode_interactions( $interactions );

foreach ( $list_of_interactions as $interaction ) {
			if ( $this->is_valid_interaction_item( $interaction ) ) {
				$sanitized['items'][] = $interaction;
				$this->increment_interactions_counter_for( $element_id );
			}
		}

if ( empty( $sanitized['items'] ) ) {
			return [];
		}

return wp_json_encode( $sanitized );
	}

private function is_valid_interaction_item( $item ) {
		if ( ! is_array( $item ) ) {
			return false;
		}

// Validate PropType format: { $$type: 'interaction-item', value: { ... } }
		if ( ! isset( $item['$$type'] ) || 'interaction-item' !== $item['$$type'] ) {
			return false;
		}

if ( ! isset( $item['value'] ) || ! is_array( $item['value'] ) ) {
			return false;
		}

$value = $item['value'];

// Validate required fields exist
		if ( isset( $value['interaction_id'] ) && ! $this->is_valid_string_prop( $value, 'interaction_id' ) ) {
			return false;
		}

if ( ! $this->is_valid_trigger_prop( $value ) ) {
			return false;
		}

if ( ! $this->is_valid_animation_prop( $value ) ) {
			return false;
		}

if ( ! $this->is_valid_breakpoints_prop( $value ) ) {
			return false;
		}

return true;
	}

private function is_valid_trigger_prop( $data ) {
		if ( ! array_key_exists( 'trigger', $data ) ) {
			return false;
		}

return TriggerValueValidator::is_valid( $data['trigger'] );
	}

private function is_valid_breakpoints_prop( $data ) {
		if ( array_key_exists( 'breakpoints', $data ) ) {
			return BreakpointsValueValidator::is_valid( $data['breakpoints'] );
		}

return true;
	}

private function is_valid_string_prop( $data, $key, $allowed_values = null ) {
		if ( ! isset( $data[ $key ] ) ) {
			return false;
		}

return StringValueValidator::is_valid( $data[ $key ], $allowed_values );
	}

private function is_valid_boolean_prop( $data, $key ) {
		if ( ! isset( $data[ $key ] ) || ! is_array( $data[ $key ] ) ) {
			return false;
		}

$prop = $data[ $key ];

if ( ! isset( $prop['$$type'] ) || 'boolean' !== $prop['$$type'] ) {
			return false;
		}

if ( ! isset( $prop['value'] ) || ! is_bool( $prop['value'] ) ) {
			return false;
		}

return true;
	}

private function is_valid_number_prop( $data, $key ) {
		if ( ! isset( $data[ $key ] ) || ! is_array( $data[ $key ] ) ) {
			return false;
		}

$prop = $data[ $key ];

if ( ! isset( $prop['$$type'] ) || 'number' !== $prop['$$type'] ) {
			return false;
		}

if ( ! isset( $prop['value'] ) || ! is_numeric( $prop['value'] ) ) {
			return false;
		}

return true;
	}

private function is_valid_number_prop_in_range( $data, $key, $min = null, $max = null ) {
		if ( ! $this->is_valid_number_prop( $data, $key ) ) {
			return false;
		}

$value = (float) $data[ $key ]['value'];

if ( null !== $min && $value < $min ) {
			return false;
		}

if ( null !== $max && $value > $max ) {
			return false;
		}

return true;
	}

private function is_valid_config_prop( $data ) {
		if ( ! isset( $data['config'] ) || ! is_array( $data['config'] ) ) {
			return false;
		}

$config_value = $data['config']['value'];

if ( isset( $config_value['replay'] ) && ! $this->is_valid_boolean_prop( $config_value, 'replay' ) ) {
			return false;
		}

if ( isset( $config_value['easing'] ) && ! $this->is_valid_string_prop( $config_value, 'easing' ) ) {
			return false;
		}

if ( isset( $config_value['relativeTo'] ) && ! $this->is_valid_string_prop( $config_value, 'relativeTo' ) ) {
			return false;
		}

if ( isset( $config_value['repeat'] ) && ! $this->is_valid_string_prop( $config_value, 'repeat', self::VALID_REPEAT_MODES ) ) {
			return false;
		}

if ( isset( $config_value['times'] ) && ! $this->is_valid_number_prop_in_range( $config_value, 'times', 1 ) ) {
			return false;
		}

if ( isset( $config_value['start'] ) && ! $this->is_valid_size_prop_in_range( $config_value, 'start', 0, 100 ) ) {
			return false;
		}

if ( isset( $config_value['end'] ) && ! $this->is_valid_size_prop_in_range( $config_value, 'end', 0, 100 ) ) {
			return false;
		}

return true;
	}

private function is_valid_animation_prop( $data ) {
		if ( ! isset( $data['animation'] ) || ! is_array( $data['animation'] ) ) {
			return false;
		}

$animation = $data['animation'];

if ( ! isset( $animation['$$type'] ) || 'animation-preset-props' !== $animation['$$type'] ) {
			return false;
		}

if ( ! isset( $animation['value'] ) || ! is_array( $animation['value'] ) ) {
			return false;
		}

$animation_value = $animation['value'];

// Validate effect
		if ( ! $this->is_valid_string_prop( $animation_value, 'effect', self::VALID_EFFECTS ) ) {
			return false;
		}

// Validate type
		if ( ! $this->is_valid_string_prop( $animation_value, 'type', self::VALID_TYPES ) ) {
			return false;
		}

// Validate direction (can be empty string)
		if ( ! $this->is_valid_string_prop( $animation_value, 'direction', self::VALID_DIRECTIONS ) ) {
			return false;
		}

// Validate timing_config
		if ( ! $this->is_valid_timing_config( $animation_value ) ) {
			return false;
		}

if ( isset( $animation_value['config'] ) && ! $this->is_valid_config_prop( $animation_value ) ) {
			return false;
		}

if ( ! Custom_Effect_Value::is_valid( $animation_value ) ) {
			return false;
		}

return true;
	}

private function is_valid_timing_config( $data ) {
		if ( ! isset( $data['timing_config'] ) || ! is_array( $data['timing_config'] ) ) {
			return false;
		}

$timing = $data['timing_config'];

if ( ! isset( $timing['$$type'] ) || 'timing-config' !== $timing['$$type'] ) {
			return false;
		}

if ( ! isset( $timing['value'] ) || ! is_array( $timing['value'] ) ) {
			return false;
		}

$timing_value = $timing['value'];

// Validate duration (accepts both 'number' and 'size' formats)
		if ( ! $this->is_valid_timing_value( $timing_value, 'duration', 0 ) ) {
			return false;
		}

// Validate delay (accepts both 'number' and 'size' formats)
		if ( ! $this->is_valid_timing_value( $timing_value, 'delay', 0 ) ) {
			return false;
		}

return true;
	}

/**
	 * Validate timing value that can be either 'number' or 'size' type.
	 * - number format: {$$type: 'number', value: 123}
	 * - size format: {$$type: 'size', value: {size: 123, unit: 'ms'}}
	 */
	private function is_valid_timing_value( $data, $key, $min = null, $max = null ) {
		if ( ! isset( $data[ $key ] ) || ! is_array( $data[ $key ] ) ) {
			return false;
		}

$prop = $data[ $key ];

if ( ! isset( $prop['$$type'] ) ) {
			return false;
		}

// Accept 'number' format
		if ( 'number' === $prop['$$type'] ) {
			return $this->is_valid_number_prop_in_range( $data, $key, $min, $max );
		}

// Accept 'size' format
		if ( 'size' === $prop['$$type'] ) {
			return $this->is_valid_size_prop_in_range( $data, $key, $min, $max );
		}

return false;
	}

/**
	 * Validate size prop: {$$type: 'size', value: {size: X, unit: 'ms'}}
	 */
	private function is_valid_size_prop_in_range( $data, $key, $min = null, $max = null ) {
		if ( ! isset( $data[ $key ] ) || ! is_array( $data[ $key ] ) ) {
			return false;
		}

$prop = $data[ $key ];

if ( ! isset( $prop['$$type'] ) || 'size' !== $prop['$$type'] ) {
			return false;
		}

if ( ! isset( $prop['value'] ) || ! is_array( $prop['value'] ) ) {
			return false;
		}

if ( ! isset( $prop['value']['size'] ) || ! is_numeric( $prop['value']['size'] ) ) {
			return false;
		}

$value = (float) $prop['value']['size'];

if ( null !== $min && $value < $min ) {
			return false;
		}

if ( null !== $max && $value > $max ) {
			return false;
		}

return true;
	}
}

Cancel