feat: add parameter type multi-list

lib/BridgeCard.php

@@ -146,6 +146,8 @@ private static function renderForm(
                     $form .= self::getNumberInput($inputEntry, $idArg, $id);
                 } elseif ($inputEntry['type'] === 'list') {
                     $form .= self::getListInput($inputEntry, $idArg, $id) . "\n";
+                } elseif ($inputEntry['type'] === 'multi-list') {
+                    $form .= self::getListInput($inputEntry, $idArg, $id, true) . "\n";
                 } elseif ($inputEntry['type'] === 'checkbox') {
                     $form .= self::getCheckboxInput($inputEntry, $idArg, $id);
                 } else {
@@ -196,7 +198,7 @@ public static function getNumberInput(array $entry, string $id, string $name): s
         return sprintf('<input %s id="%s" type="number" value="%s" placeholder="%s" name="%s" />' . "\n", $attributes, $id, $defaultValue, $exampleValue, $name);
     }
 
-    public static function getListInput(array $entry, string $id, string $name): string
+    public static function getListInput(array $entry, string $id, string $name, bool $isMulti = false): string
     {
         $required = $entry['required'] ?? null;
         if ($required) {
@@ -205,7 +207,7 @@ public static function getListInput(array $entry, string $id, string $name): str
         }
 
         $attributes = self::getInputAttributes($entry);
-        $list = sprintf('<select %s id="%s" name="%s" >' . "\n", $attributes, $id, $name);
+        $list = sprintf('<select %s id="%s" name="%s" %s>' . "\n", $attributes, $id, $name . ($isMulti ? '[]' : ''), $isMulti ? 'multiple ' : '');
 
         foreach ($entry['values'] as $name => $value) {
             if (is_array($value)) {

lib/ParameterValidator.php

@@ -31,6 +31,10 @@ public function validateInput(array &$input, $contexts): array
                     case 'list':
                         $input[$name] = $this->validateListValue($value, $contextParameters[$name]['values']);
                         break;
+                    case 'multi-list':
+                        //TODO: Maybe move the array checking and looping through all of the values to another method?
+                        $input[$name] = is_array($value) ? array_map(fn($v) => $this->validateListValue($v, $contextParameters[$name]['values']), $value) : null;
+                        break;
                     default:
                     case 'text':
                         if (isset($contextParameters[$name]['pattern'])) {

middlewares/SecurityMiddleware.php

@@ -3,18 +3,20 @@
 declare(strict_types=1);
 
 /**
- * Make sure that only strings are allowed in GET parameters
+ * Make sure that only strings and arrays are allowed in GET parameters
  */
 class SecurityMiddleware implements Middleware
 {
     public function __invoke(Request $request, $next): Response
     {
         foreach ($request->toArray() as $key => $value) {
-            if (!is_string($value)) {
-                return new Response(render(__DIR__ . '/../templates/error.html.php', [
-                    'message' => "Query parameter \"$key\" is not a string.",
-                ]), 400);
-            }
+            //TODO: Maybe stricter checking for arrays?
+            // Not required technically because the values are properly checked
+            // in ParameterValidator, so basic check like this should be OK.
+            if (is_string($value) || (is_array($value) && !in_array(fn($v) => !is_string($v), $value))) continue;
+            return new Response(render(__DIR__ . '/../templates/error.html.php', [
+                'message' => "Query parameter \"$key\" is not a string.",
+            ]), 400);
         }
         return $next($request);
     }