@@ -13,20 +13,31 @@
1313-- Stability : experimental
1414-- Portability : GHC
1515--
16−-- A time and space-efficient implementation of Unicode text using
17−-- packed Word16 arrays. Suitable for performance critical use, both
18−-- in terms of large data quantities and high speed.
16+-- A time and space-efficient implementation of Unicode text.
17+-- Suitable for performance critical use, both in terms of large data
18+-- quantities and high speed.
19+--
20+-- /Note/: Read below the synopsis for important notes on the use of
21+-- this module.
1922--
2023-- This module is intended to be imported @qualified@, to avoid name
2124-- clashes with "Prelude" functions, e.g.
2225--
2326-- > import qualified Data.Text as T
27+--
28+-- To use an extended and very rich family of functions for working
29+-- with Unicode text (including normalization, regular expressions,
30+-- non-standard encodings, text breaking, and locales), see the
31+-- @text-icu@ package: <http://hackage.haskell.org/package/text-icu>
2432
2533module Data.Text
2634 (
2735 -- * Strict vs lazy types
2836 -- $strict
2937
38+ -- * Acceptable data
39+ -- $replacement
40+
3041 -- * Fusion
3142 -- $fusion
3243
@@ -196,7 +207,7 @@ import Data.String (IsString(..))
196207import qualified Data.Text.Fusion as S
197208import qualified Data.Text.Fusion.Common as S
198209import Data.Text.Fusion (stream, reverseStream, unstream)
199−import Data.Text.Internal (Text(..), empty, text, textP)
210+import Data.Text.Internal (Text(..), empty, firstf, safe, text, textP)
200211import qualified Prelude as P
201212import Data.Text.Unsafe (Iter(..), iter, iter_, lengthWord16, reverseIter,
202213 unsafeHead, unsafeTail)
@@ -230,6 +241,33 @@ import Data.Int (Int64)
230241-- difference being that the strict module uses 'Int' values for
231242-- lengths and counts, while the lazy module uses 'Int64' lengths.
232243
244+-- $replacement
245+--
246+-- A 'Text' value is a sequence of Unicode scalar values, as defined
247+-- in §3.9, definition D76 of the Unicode 5.2 standard:
248+-- <http://www.unicode.org/versions/Unicode5.2.0/ch03.pdf#page=35>. As
249+-- such, a 'Text' cannot contain values in the range U+D800 to U+DFFF
250+-- inclusive. Haskell implementations admit all Unicode code points
251+-- (§3.4, definition D10) as 'Char' values, including code points
252+-- from this invalid range. This means that there are some 'Char'
253+-- values that are not valid Unicode scalar values, and the functions
254+-- in this module must handle those cases.
255+--
256+-- Within this module, many functions construct a 'Text' from one or
257+-- more 'Char' values. Those functions will substitute 'Char' values
258+-- that are not valid Unicode scalar values with the replacement
259+-- character \"�\" (U+FFFD). Functions that perform this
260+-- inspection and replacement are documented with the phrase
261+-- \"Performs replacement on invalid scalar values\".
262+--
263+-- (One reason for this policy of replacement is that internally, a
264+-- 'Text' value is represented as packed UTF-16 data. Values in the
265+-- range U+D800 through U+DFFF are used by UTF-16 to denote surrogate
266+-- code points, and so cannot be represented. The functions replace
267+-- invalid scalar values, instead of dropping them, as a security
268+-- measure. For details, see Unicode Technical Report 36, §3.5:
269+-- <http://unicode.org/reports/tr36/#Deletion_of_Noncharacters>)
270+
233271-- $fusion
234272--
235273-- Most of the functions in this module are subject to /fusion/,
@@ -320,9 +358,10 @@ compareText ta@(Text _arrA _offA lenA) tb@(Text _arrB _offB lenB)
320358-- -----------------------------------------------------------------------------
321359-- * Conversion to/from 'Text'
322360
323−-- | /O(n)/ Convert a 'String' into a 'Text'. Subject to fusion.
361+-- | /O(n)/ Convert a 'String' into a 'Text'. Subject to
362+-- fusion. Performs replacement on invalid scalar values.
324363pack :: String -> Text
325−pack = unstream . S.streamList
364+pack = unstream . S.streamList . L.map safe
326365{-# INLINE [1] pack #-}
327366
328367-- | /O(n)/ Convert a Text into a String. Subject to fusion.
@@ -330,10 +369,10 @@ unpack :: Text -> String
330369unpack = S.unstreamList . stream
331370{-# INLINE [1] unpack #-}
332371
333−-- | /O(1)/ Convert a character into a Text.
334−-- Subject to fusion.
372+-- | /O(1)/ Convert a character into a Text. Subject to fusion.
373+-- Performs replacement on invalid scalar values.
335374singleton :: Char -> Text
336−singleton = unstream . S.singleton
375+singleton = unstream . S.singleton . safe
337376{-# INLINE [1] singleton #-}
338377
339378-- -----------------------------------------------------------------------------
@@ -341,15 +380,17 @@ singleton = unstream . S.singleton
341380
342381-- | /O(n)/ Adds a character to the front of a 'Text'. This function
343382-- is more costly than its 'List' counterpart because it requires
344−-- copying a new array. Subject to fusion.
383+-- copying a new array. Subject to fusion. Performs replacement on
384+-- invalid scalar values.
345385cons :: Char -> Text -> Text
346−cons c t = unstream (S.cons c (stream t))
386+cons c t = unstream (S.cons (safe c) (stream t))
347387{-# INLINE cons #-}
348388
349389-- | /O(n)/ Adds a character to the end of a 'Text'. This copies the
350390-- entire array in the process, unless fused. Subject to fusion.
391+-- Performs replacement on invalid scalar values.
351392snoc :: Text -> Char -> Text
352−snoc t c = unstream (S.snoc (stream t) c)
393+snoc t c = unstream (S.snoc (stream t) (safe c))
353394{-# INLINE snoc #-}
354395
355396-- | /O(n)/ Appends one 'Text' to the other by copying both of them
@@ -523,9 +564,10 @@ compareLength t n = S.compareLengthI (stream t) n
523564-- -----------------------------------------------------------------------------
524565-- * Transformations
525566-- | /O(n)/ 'map' @f@ @t@ is the 'Text' obtained by applying @f@ to
526−-- each element of @t@. Subject to fusion.
567+-- each element of @t@. Subject to fusion. Performs replacement on
568+-- invalid scalar values.
527569map :: (Char -> Char) -> Text -> Text
528−map f t = unstream (S.map f (stream t))
570+map f t = unstream (S.map (safe . f) (stream t))
529571{-# INLINE [1] map #-}
530572
531573-- | /O(n)/ The 'intercalate' function takes a 'Text' and a list of
@@ -536,9 +578,10 @@ intercalate t = concat . (U.intersperse t)
536578{-# INLINE intercalate #-}
537579
538580-- | /O(n)/ The 'intersperse' function takes a character and places it
539−-- between the characters of a 'Text'. Subject to fusion.
581+-- between the characters of a 'Text'. Subject to fusion. Performs
582+-- replacement on invalid scalar values.
540583intersperse :: Char -> Text -> Text
541−intersperse c t = unstream (S.intersperse c (stream t))
584+intersperse c t = unstream (S.intersperse (safe c) (stream t))
542585{-# INLINE intersperse #-}
543586
544587-- | /O(n)/ Reverse the characters of a string. Subject to fusion.
@@ -615,7 +658,10 @@ toUpper t = unstream (S.toUpper (stream t))
615658{-# INLINE toUpper #-}
616659
617660-- | /O(n)/ Left-justify a string to the given length, using the
618−-- specified fill character on the right. Subject to fusion. Examples:
661+-- specified fill character on the right. Subject to fusion.
662+-- Performs replacement on invalid scalar values.
663+--
664+-- Examples:
619665--
620666-- > justifyLeft 7 'x' "foo" == "fooxxxx"
621667-- > justifyLeft 3 'x' "foobar" == "foobar"
@@ -634,7 +680,10 @@ justifyLeft k c t
634680 #-}
635681
636682-- | /O(n)/ Right-justify a string to the given length, using the
637−-- specified fill character on the left. Examples:
683+-- specified fill character on the left. Performs replacement on
684+-- invalid scalar values.
685+--
686+-- Examples:
638687--
639688-- > justifyRight 7 'x' "bar" == "xxxxbar"
640689-- > justifyRight 3 'x' "foobar" == "foobar"
@@ -645,8 +694,11 @@ justifyRight k c t
645694 where len = length t
646695{-# INLINE justifyRight #-}
647696
648−-- | /O(n)/ Center a string to the given length, using the
649−-- specified fill character on either side. Examples:
697+-- | /O(n)/ Center a string to the given length, using the specified
698+-- fill character on either side. Performs replacement on invalid
699+-- scalar values.
700+--
701+-- Examples:
650702--
651703-- > center 8 'x' "HS" = "xxxHSxxx"
652704center :: Int -> Char -> Text -> Text
@@ -761,6 +813,7 @@ minimum t = S.minimum (stream t)
761813
762814-- | /O(n)/ 'scanl' is similar to 'foldl', but returns a list of
763815-- successive reduced values from the left. Subject to fusion.
816+-- Performs replacement on invalid scalar values.
764817--
765818-- > scanl f z [x1, x2, ...] == [z, z `f` x1, (z `f` x1) `f` x2, ...]
766819--
@@ -768,11 +821,13 @@ minimum t = S.minimum (stream t)
768821--
769822-- > last (scanl f z xs) == foldl f z xs.
770823scanl :: (Char -> Char -> Char) -> Char -> Text -> Text
771−scanl f z t = unstream (S.scanl f z (stream t))
824+scanl f z t = unstream (S.scanl g z (stream t))
825+ where g a b = safe (f a b)
772826{-# INLINE scanl #-}
773827
774828-- | /O(n)/ 'scanl1' is a variant of 'scanl' that has no starting
775−-- value argument. Subject to fusion.
829+-- value argument. Subject to fusion. Performs replacement on
830+-- invalid scalar values.
776831--
777832-- > scanl1 f [x1, x2, ...] == [x1, x1 `f` x2, ...]
778833scanl1 :: (Char -> Char -> Char) -> Text -> Text
@@ -780,15 +835,18 @@ scanl1 f t | null t = empty
780835 | otherwise = scanl f (unsafeHead t) (unsafeTail t)
781836{-# INLINE scanl1 #-}
782837
783−-- | /O(n)/ 'scanr' is the right-to-left dual of 'scanl'.
838+-- | /O(n)/ 'scanr' is the right-to-left dual of 'scanl'. Performs
839+-- replacement on invalid scalar values.
784840--
785841-- > scanr f v == reverse . scanl (flip f) v . reverse
786842scanr :: (Char -> Char -> Char) -> Char -> Text -> Text
787−scanr f z = S.reverse . S.reverseScanr f z . reverseStream
843+scanr f z = S.reverse . S.reverseScanr g z . reverseStream
844+ where g a b = safe (f a b)
788845{-# INLINE scanr #-}
789846
790847-- | /O(n)/ 'scanr1' is a variant of 'scanr' that has no starting
791−-- value argument. Subject to fusion.
848+-- value argument. Subject to fusion. Performs replacement on
849+-- invalid scalar values.
792850scanr1 :: (Char -> Char -> Char) -> Text -> Text
793851scanr1 f t | null t = empty
794852 | otherwise = scanr f (last t) (init t)
@@ -796,9 +854,11 @@ scanr1 f t | null t = empty
796854
797855-- | /O(n)/ Like a combination of 'map' and 'foldl''. Applies a
798856-- function to each element of a 'Text', passing an accumulating
799−-- parameter from left to right, and returns a final 'Text'.
857+-- parameter from left to right, and returns a final 'Text'. Performs
858+-- replacement on invalid scalar values.
800859mapAccumL :: (a -> Char -> (a,Char)) -> a -> Text -> (a, Text)
801−mapAccumL f z0 = S.mapAccumL f z0 . stream
860+mapAccumL f z0 = S.mapAccumL g z0 . stream
861+ where g a b = second safe (f a b)
802862{-# INLINE mapAccumL #-}
803863
804864-- | The 'mapAccumR' function behaves like a combination of 'map' and
@@ -806,8 +866,10 @@ mapAccumL f z0 = S.mapAccumL f z0 . stream
806866-- 'Text', passing an accumulating parameter from right to left, and
807867-- returning a final value of this accumulator together with the new
808868-- 'Text'.
869+-- Performs replacement on invalid scalar values.
809870mapAccumR :: (a -> Char -> (a,Char)) -> a -> Text -> (a, Text)
810−mapAccumR f z0 = second reverse . S.mapAccumL f z0 . reverseStream
871+mapAccumR f z0 = second reverse . S.mapAccumL g z0 . reverseStream
872+ where g a b = second safe (f a b)
811873{-# INLINE mapAccumR #-}
812874
813875-- -----------------------------------------------------------------------------
@@ -840,7 +902,7 @@ replicate n t@(Text a o l)
840902-- | /O(n)/ 'replicateChar' @n@ @c@ is a 'Text' of length @n@ with @c@ the
841903-- value of every element. Subject to fusion.
842904replicateChar :: Int -> Char -> Text
843−replicateChar n c = unstream (S.replicateCharI n c)
905+replicateChar n c = unstream (S.replicateCharI n (safe c))
844906{-# INLINE replicateChar #-}
845907
846908-- | /O(n)/, where @n@ is the length of the result. The 'unfoldr'
@@ -849,9 +911,9 @@ replicateChar n c = unstream (S.replicateCharI n c)
849911-- returns 'Nothing' if it is done producing the 'Text', otherwise
850912-- 'Just' @(a,b)@. In this case, @a@ is the next 'Char' in the
851913-- string, and @b@ is the seed value for further production. Subject
852−-- to fusion.
914+-- to fusion. Performs replacement on invalid scalar values.
853915unfoldr :: (a -> Maybe (Char,a)) -> a -> Text
854−unfoldr f s = unstream (S.unfoldr f s)
916+unfoldr f s = unstream (S.unfoldr (firstf safe . f) s)
855917{-# INLINE unfoldr #-}
856918
857919-- | /O(n)/ Like 'unfoldr', 'unfoldrN' builds a 'Text' from a seed
@@ -859,9 +921,9 @@ unfoldr f s = unstream (S.unfoldr f s)
859921-- first argument to 'unfoldrN'. This function is more efficient than
860922-- 'unfoldr' when the maximum length of the result is known and
861923-- correct, otherwise its performance is similar to 'unfoldr'. Subject
862−-- to fusion.
924+-- to fusion. Performs replacement on invalid scalar values.
863925unfoldrN :: Int -> (a -> Maybe (Char,a)) -> a -> Text
864−unfoldrN n f s = unstream (S.unfoldrN n f s)
926+unfoldrN n f s = unstream (S.unfoldrN n (firstf safe . f) s)
865927{-# INLINE unfoldrN #-}
866928
867929-- -----------------------------------------------------------------------------
@@ -1299,8 +1361,10 @@ zip a b = S.unstreamList $ S.zipWith (,) (stream a) (stream b)
12991361
13001362-- | /O(n)/ 'zipWith' generalises 'zip' by zipping with the function
13011363-- given as the first argument, instead of a tupling function.
1364+-- Performs replacement on invalid scalar values.
13021365zipWith :: (Char -> Char -> Char) -> Text -> Text -> Text
1303−zipWith f t1 t2 = unstream (S.zipWith f (stream t1) (stream t2))
1366+zipWith f t1 t2 = unstream (S.zipWith g (stream t1) (stream t2))
1367+ where g a b = safe (f a b)
13041368{-# INLINE [0] zipWith #-}
13051369
13061370-- | /O(n)/ Breaks a 'Text' up into a list of words, delimited by 'Char's