]> git.scottworley.com Git - voter/blob - src/main.rs
15a1655de920522e2526191dc6cd47fd9dbf5c3e
[voter] / src / main.rs
1 use std::path::{Path, PathBuf};
2
3 const DATA_PATH: &str = "/var/lib/voter";
4
5 fn validate_path(path: &str) -> Result<PathBuf, cgi::Response> {
6 let invalid_path = || cgi::text_response(404, "Invalid path");
7 if path == "/" {
8 return Err(cgi::text_response(404, "(This is the voting place. You should have been given a more specific URL for the specific thing you've been invited to vote on.)"));
9 }
10 if path.contains("..") || !path.starts_with("/") {
11 return Err(invalid_path());
12 }
13 let dir = Path::new(&format!("{DATA_PATH}{path}")).to_path_buf();
14 if !dir
15 .canonicalize()
16 .map_err(|_| invalid_path())?
17 .starts_with(DATA_PATH)
18 {
19 return Err(invalid_path());
20 }
21 if !dir.is_dir() {
22 return Err(invalid_path());
23 }
24 Ok(dir)
25 }
26
27 fn prompt_for_vote(dir: PathBuf, request: cgi::Request) -> Result<cgi::Response, cgi::Response> {
28 Err(cgi::text_response(503, "Not Implemented"))
29 }
30
31 fn record_vote(dir: PathBuf, request: cgi::Request) -> Result<cgi::Response, cgi::Response> {
32 Err(cgi::text_response(503, "Not Implemented"))
33 }
34
35 fn respond(request: cgi::Request) -> Result<cgi::Response, cgi::Response> {
36 let dir = validate_path(request.uri().path())?;
37 match request.method() {
38 &cgi::http::Method::GET => prompt_for_vote(dir, request),
39 &cgi::http::Method::POST => record_vote(dir, request),
40 _ => Err(cgi::text_response(405, "Huh?")),
41 }
42 }
43
44 fn respond_or_report_error(request: cgi::Request) -> cgi::Response {
45 match respond(request) {
46 Ok(result) => result,
47 Err(error) => error,
48 }
49 }
50
51 cgi::cgi_main! { respond_or_report_error }