// comment and # comment are forbidden inside tags

nette · Oct 26, 2021 · 6dc0b9f · 6dc0b9f
1 parent 1e20c90
commit 6dc0b9f
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 2 deletions.
diff --git a/src/Latte/Compiler/PhpWriter.php b/src/Latte/Compiler/PhpWriter.php
@@ -209,8 +209,11 @@ public function validateTokens(MacroTokens $tokens): void
 		$pos = $tokens->position;
 		while ($tokens->nextToken()) {
 			$tokenValue = $tokens->currentValue();
-			if ($tokens->isCurrent('?>')) {
-				throw new CompileException('Forbidden ?> inside tag');
+			if ($tokens->isCurrent('?>') || $tokens->isCurrent('#')) {
+				throw new CompileException("Forbidden $tokenValue inside tag");
+
+			} elseif ($tokens->isCurrent('/') && $tokens->isNext('/')) {
+				throw new CompileException('Forbidden // inside tag');
 
 			} elseif ($tokens->isCurrent('(', '[', '{')) {
 				static $counterpart = ['(' => ')', '[' => ']', '{' => '}'];

diff --git a/tests/Latte/Compiler.errors.phpt b/tests/Latte/Compiler.errors.phpt
@@ -124,6 +124,14 @@ Assert::error(function () use ($latte) {
 	$latte->compile('{=`whoami`}');
 }, Latte\CompileException::class, 'Backtick operator is forbidden in Latte.');
 
+Assert::error(function () use ($latte) {
+	$latte->compile('{=#comment}');
+}, Latte\CompileException::class, 'Forbidden # inside tag');
+
+Assert::error(function () use ($latte) {
+	$latte->compile('{=//comment}');
+}, Latte\CompileException::class, 'Forbidden // inside tag');
+
 Assert::exception(function () use ($latte) {
 	$latte->compile('{$ʟ_tmp}');
 }, Latte\CompileException::class, 'Forbidden variable $ʟ_tmp.');