viewMapValidator.js

function(doc){
	
	// Validates ddoc map functions to prevent them
	// from calling send(), getRow() and so on.
	
	// Ddoc with this validate_doc_update must have 
	// property .Uglify with UglifyJS lib (tested for 2.4.15).
 
	require("Uglify");
	
	var mapInvalid = "start send getRow eval".split(" "),
			v, invalid,
			u = UglifyJS, 
			globals = {},
			errors = [];
	
	if (/^_design\//.test(doc._id)) {
		v = doc.views;
		if (typeof v != "object") return;
		
		Object.keys(v).forEach(function(idx){
			_parse (v[idx].map, idx+"/map");
		});
		
		mapInvalid.forEach(function(i){
			if (globals[i]) errors.push("Ddoc has view/map that uses "+i+"()");
		});
		
		if (errors.length) throw ({ forbidden: errors.join(" \n") });
	}
	
	//- - - - - - - - - - -
	
	function _parse(fn, name){
		if (!fn) return;
		var ast, gl;
		try{
			ast = u.parse("("+fn+")");
		} catch (e) {
			errors.push (name+": "+e.message+" @"+e.line+":"+e.col)
		}
		if (ast) {
			ast.figure_out_scope();
			if (typeof(gl = ast.globals) == "object" && gl._size) {
				Object.keys(gl._values)
				.forEach(function(i){
					globals[gl._values[i].name] = true;
				});
			}
		}
	}
}

UglifyJS 2.4.15 can be taken from http://cdn.cloudwall.me/1.1/uglify.js