1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
namespace System.Web.Mvc {
using System;
using System.Linq;
[AttributeUsage(AttributeTargets.Class | AttributeTargets.Parameter, AllowMultiple = false, Inherited = true)]
public sealed class BindAttribute : Attribute {
private string _exclude;
private string[] _excludeSplit = new string[0];
private string _include;
private string[] _includeSplit = new string[0];
public string Exclude {
get {
return _exclude ?? String.Empty;
}
set {
_exclude = value;
_excludeSplit = AuthorizeAttribute.SplitString(value);
}
}
public string Include {
get {
return _include ?? String.Empty;
}
set {
_include = value;
_includeSplit = AuthorizeAttribute.SplitString(value);
}
}
public string Prefix {
get;
set;
}
internal static bool IsPropertyAllowed(string propertyName, string[] includeProperties, string[] excludeProperties) {
// We allow a property to be bound if its both in the include list AND not in the exclude list.
// An empty include list implies all properties are allowed.
// An empty exclude list implies no properties are disallowed.
bool includeProperty = (includeProperties == null) || (includeProperties.Length == 0) || includeProperties.Contains(propertyName, StringComparer.OrdinalIgnoreCase);
bool excludeProperty = (excludeProperties != null) && excludeProperties.Contains(propertyName, StringComparer.OrdinalIgnoreCase);
return includeProperty && !excludeProperty;
}
public bool IsPropertyAllowed(string propertyName) {
return IsPropertyAllowed(propertyName, _includeSplit, _excludeSplit);
}
}
}
|
