From 01d9ead55e8eaa83dad240d546dda2debcd88c1c Mon Sep 17 00:00:00 2001
From: kojoty <p.juzwiak@gmail.com>
Date: Sat, 16 Oct 2021 18:16:07 +0200
Subject: [PATCH] Remove purifyHtmlString from OcCookie

  This method uses HTMLPurifier to clean up input text with html tags but this is take a lot of memory.
  OCCookie can use just htmlspecialchars instead (it saves a half of the memory of each OCPL code call as asmost always OCCookie is in use.
---
 src/Utils/Debug/Debug.php  | 19 +++++++++++++++++--
 src/Utils/Uri/OcCookie.php |  5 +++--
 2 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/src/Utils/Debug/Debug.php b/src/Utils/Debug/Debug.php
index 2c88554d8d..ed075568f6 100644
--- a/src/Utils/Debug/Debug.php
+++ b/src/Utils/Debug/Debug.php
@@ -1,10 +1,8 @@
 <?php
 namespace src\Utils\Debug;
 
-use Error;
 use Throwable;
 
-
 class Debug {
 
     /**
@@ -57,4 +55,21 @@ public static function dumpToLog($var, $message = null)
         $result .= var_export($var, TRUE);
         error_log($result);
     }
+
+    /**
+     * Function to print memory usage to log.
+     * Best usage: Debug::memUsage(__FILE__.':'.__LINE__)
+     * Shows memory usage and diff from the last call.
+     *
+     * @param string $placeInCode - identifier to add to the string in log
+     */
+    public static function memUsage($placeInCode = "?"): void
+    {
+        static $lastMemUsage = 0;
+        $currMemUsage = memory_get_usage();
+        self::errorLog(
+            $placeInCode.": ".round($currMemUsage/1024, 2)." / ".round(($currMemUsage-$lastMemUsage)/1024, 2), false);
+        $lastMemUsage = $currMemUsage;
+    }
+
 }
diff --git a/src/Utils/Uri/OcCookie.php b/src/Utils/Uri/OcCookie.php
index 72f142cf08..b6ee98f009 100644
--- a/src/Utils/Uri/OcCookie.php
+++ b/src/Utils/Uri/OcCookie.php
@@ -2,7 +2,6 @@
 namespace src\Utils\Uri;
 
 use src\Utils\Debug\Debug;
-use src\Utils\Text\UserInputFilter;
 use src\Models\User\UserAuthorization;
 
 class OcCookie
@@ -15,6 +14,7 @@ class OcCookie
 
     /**
      * Set data in cookie uder the $key
+     * NOTE: htmlspecialchars is running when value is read from cookie
      *
      * @param string $key
      * @param mixed $value
@@ -35,6 +35,7 @@ public static function set($key, $value, $saveToHeaderNow = false)
 
     /**
      * Get data from cookie stored under $key
+     * PLEASE NOTE that puryfing is done by default (by htmlspecialchars).
      *
      * @param string $key
      * @return mixed | null - null if no data
@@ -44,7 +45,7 @@ public static function get($key, $skipPurifying = false)
         $data = self::getOcCookieData(); // init oc data
         if (isset($data->$key)) {
             if (! $skipPurifying) {
-                return UserInputFilter::purifyHtmlString($data->$key);
+                return htmlspecialchars($data->$key);
             } else {
                 return $data->$key;
             }