Commit inicial - WordPress Análisis de Precios Unitarios

- WordPress core y plugins
- Tema Twenty Twenty-Four configurado
- Plugin allow-unfiltered-html.php simplificado
- .gitignore configurado para excluir wp-config.php y uploads

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

wp-content/plugins/google-site-kit/third-party/google/apiclient/src/AccessToken/Revoke.php

@@ -0,0 +1,65 @@
+<?php
+
+/*
+ * Copyright 2008 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+namespace Google\Site_Kit_Dependencies\Google\AccessToken;
+
+use Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpHandlerFactory;
+use Google\Site_Kit_Dependencies\Google\Client;
+use Google\Site_Kit_Dependencies\GuzzleHttp\ClientInterface;
+use Google\Site_Kit_Dependencies\GuzzleHttp\Psr7;
+use Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Request;
+/**
+ * Wrapper around Google Access Tokens which provides convenience functions
+ *
+ */
+class Revoke
+{
+    /**
+     * @var ClientInterface The http client
+     */
+    private $http;
+    /**
+     * Instantiates the class, but does not initiate the login flow, leaving it
+     * to the discretion of the caller.
+     */
+    public function __construct(?\Google\Site_Kit_Dependencies\GuzzleHttp\ClientInterface $http = null)
+    {
+        $this->http = $http;
+    }
+    /**
+     * Revoke an OAuth2 access token or refresh token. This method will revoke the current access
+     * token, if a token isn't provided.
+     *
+     * @param string|array $token The token (access token or a refresh token) that should be revoked.
+     * @return boolean Returns True if the revocation was successful, otherwise False.
+     */
+    public function revokeToken($token)
+    {
+        if (\is_array($token)) {
+            if (isset($token['refresh_token'])) {
+                $token = $token['refresh_token'];
+            } else {
+                $token = $token['access_token'];
+            }
+        }
+        $body = \Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Utils::streamFor(\http_build_query(['token' => $token]));
+        $request = new \Google\Site_Kit_Dependencies\GuzzleHttp\Psr7\Request('POST', \Google\Site_Kit_Dependencies\Google\Client::OAUTH2_REVOKE_URI, ['Cache-Control' => 'no-store', 'Content-Type' => 'application/x-www-form-urlencoded'], $body);
+        $httpHandler = \Google\Site_Kit_Dependencies\Google\Auth\HttpHandler\HttpHandlerFactory::build($this->http);
+        $response = $httpHandler($request);
+        return $response->getStatusCode() == 200;
+    }
+}

wp-content/plugins/google-site-kit/third-party/google/apiclient/src/AccessToken/Verify.php

@@ -0,0 +1,217 @@
+<?php
+
+/*
+ * Copyright 2008 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+namespace Google\Site_Kit_Dependencies\Google\AccessToken;
+
+use DateTime;
+use DomainException;
+use Exception;
+use Google\Site_Kit_Dependencies\ExpiredException;
+use Google\Site_Kit_Dependencies\Firebase\JWT\ExpiredException as ExpiredExceptionV3;
+use Google\Site_Kit_Dependencies\Firebase\JWT\JWT;
+use Google\Site_Kit_Dependencies\Firebase\JWT\Key;
+use Google\Site_Kit_Dependencies\Firebase\JWT\SignatureInvalidException;
+use Google\Site_Kit_Dependencies\Google\Auth\Cache\MemoryCacheItemPool;
+use Google\Site_Kit_Dependencies\Google\Exception as GoogleException;
+use Google\Site_Kit_Dependencies\GuzzleHttp\Client;
+use Google\Site_Kit_Dependencies\GuzzleHttp\ClientInterface;
+use InvalidArgumentException;
+use LogicException;
+use Google\Site_Kit_Dependencies\phpseclib3\Crypt\AES;
+use Google\Site_Kit_Dependencies\phpseclib3\Crypt\PublicKeyLoader;
+use Google\Site_Kit_Dependencies\phpseclib3\Math\BigInteger;
+use Google\Site_Kit_Dependencies\Psr\Cache\CacheItemPoolInterface;
+/**
+ * Wrapper around Google Access Tokens which provides convenience functions
+ *
+ */
+class Verify
+{
+    const FEDERATED_SIGNON_CERT_URL = 'https://www.googleapis.com/oauth2/v3/certs';
+    const OAUTH2_ISSUER = 'accounts.google.com';
+    const OAUTH2_ISSUER_HTTPS = 'https://accounts.google.com';
+    /**
+     * @var ClientInterface The http client
+     */
+    private $http;
+    /**
+     * @var CacheItemPoolInterface cache class
+     */
+    private $cache;
+    /**
+     * @var \Firebase\JWT\JWT
+     */
+    public $jwt;
+    /**
+     * Instantiates the class, but does not initiate the login flow, leaving it
+     * to the discretion of the caller.
+     */
+    public function __construct(?\Google\Site_Kit_Dependencies\GuzzleHttp\ClientInterface $http = null, ?\Google\Site_Kit_Dependencies\Psr\Cache\CacheItemPoolInterface $cache = null, $jwt = null)
+    {
+        if (null === $http) {
+            $http = new \Google\Site_Kit_Dependencies\GuzzleHttp\Client();
+        }
+        if (null === $cache) {
+            $cache = new \Google\Site_Kit_Dependencies\Google\Auth\Cache\MemoryCacheItemPool();
+        }
+        $this->http = $http;
+        $this->cache = $cache;
+        $this->jwt = $jwt ?: $this->getJwtService();
+    }
+    /**
+     * Verifies an id token and returns the authenticated apiLoginTicket.
+     * Throws an exception if the id token is not valid.
+     * The audience parameter can be used to control which id tokens are
+     * accepted.  By default, the id token must have been issued to this OAuth2 client.
+     *
+     * @param string $idToken the ID token in JWT format
+     * @param string $audience Optional. The audience to verify against JWt "aud"
+     * @return array|false the token payload, if successful
+     */
+    public function verifyIdToken($idToken, $audience = null)
+    {
+        if (empty($idToken)) {
+            throw new \LogicException('id_token cannot be null');
+        }
+        // set phpseclib constants if applicable
+        $this->setPhpsecConstants();
+        // Check signature
+        $certs = $this->getFederatedSignOnCerts();
+        foreach ($certs as $cert) {
+            try {
+                $args = [$idToken];
+                $publicKey = $this->getPublicKey($cert);
+                if (\class_exists(\Google\Site_Kit_Dependencies\Firebase\JWT\Key::class)) {
+                    $args[] = new \Google\Site_Kit_Dependencies\Firebase\JWT\Key($publicKey, 'RS256');
+                } else {
+                    $args[] = $publicKey;
+                    $args[] = ['RS256'];
+                }
+                $payload = \call_user_func_array([$this->jwt, 'decode'], $args);
+                if (\property_exists($payload, 'aud')) {
+                    if ($audience && $payload->aud != $audience) {
+                        return \false;
+                    }
+                }
+                // support HTTP and HTTPS issuers
+                // @see https://developers.google.com/identity/sign-in/web/backend-auth
+                $issuers = [self::OAUTH2_ISSUER, self::OAUTH2_ISSUER_HTTPS];
+                if (!isset($payload->iss) || !\in_array($payload->iss, $issuers)) {
+                    return \false;
+                }
+                return (array) $payload;
+            } catch (\Google\Site_Kit_Dependencies\ExpiredException $e) {
+                // @phpstan-ignore-line
+                return \false;
+            } catch (\Google\Site_Kit_Dependencies\Firebase\JWT\ExpiredException $e) {
+                return \false;
+            } catch (\Google\Site_Kit_Dependencies\Firebase\JWT\SignatureInvalidException $e) {
+                // continue
+            } catch (\DomainException $e) {
+                // continue
+            }
+        }
+        return \false;
+    }
+    private function getCache()
+    {
+        return $this->cache;
+    }
+    /**
+     * Retrieve and cache a certificates file.
+     *
+     * @param string $url location
+     * @throws \Google\Exception
+     * @return array certificates
+     */
+    private function retrieveCertsFromLocation($url)
+    {
+        // If we're retrieving a local file, just grab it.
+        if (0 !== \strpos($url, 'http')) {
+            if (!($file = \file_get_contents($url))) {
+                throw new \Google\Site_Kit_Dependencies\Google\Exception("Failed to retrieve verification certificates: '" . $url . "'.");
+            }
+            return \json_decode($file, \true);
+        }
+        // @phpstan-ignore-next-line
+        $response = $this->http->get($url);
+        if ($response->getStatusCode() == 200) {
+            return \json_decode((string) $response->getBody(), \true);
+        }
+        throw new \Google\Site_Kit_Dependencies\Google\Exception(\sprintf('Failed to retrieve verification certificates: "%s".', $response->getBody()->getContents()), $response->getStatusCode());
+    }
+    // Gets federated sign-on certificates to use for verifying identity tokens.
+    // Returns certs as array structure, where keys are key ids, and values
+    // are PEM encoded certificates.
+    private function getFederatedSignOnCerts()
+    {
+        $certs = null;
+        if ($cache = $this->getCache()) {
+            $cacheItem = $cache->getItem('federated_signon_certs_v3');
+            $certs = $cacheItem->get();
+        }
+        if (!$certs) {
+            $certs = $this->retrieveCertsFromLocation(self::FEDERATED_SIGNON_CERT_URL);
+            if ($cache) {
+                $cacheItem->expiresAt(new \DateTime('+1 hour'));
+                $cacheItem->set($certs);
+                $cache->save($cacheItem);
+            }
+        }
+        if (!isset($certs['keys'])) {
+            throw new \InvalidArgumentException('federated sign-on certs expects "keys" to be set');
+        }
+        return $certs['keys'];
+    }
+    private function getJwtService()
+    {
+        $jwt = new \Google\Site_Kit_Dependencies\Firebase\JWT\JWT();
+        if ($jwt::$leeway < 1) {
+            // Ensures JWT leeway is at least 1
+            // @see https://github.com/google/google-api-php-client/issues/827
+            $jwt::$leeway = 1;
+        }
+        return $jwt;
+    }
+    private function getPublicKey($cert)
+    {
+        $modulus = new \Google\Site_Kit_Dependencies\phpseclib3\Math\BigInteger($this->jwt->urlsafeB64Decode($cert['n']), 256);
+        $exponent = new \Google\Site_Kit_Dependencies\phpseclib3\Math\BigInteger($this->jwt->urlsafeB64Decode($cert['e']), 256);
+        $component = ['n' => $modulus, 'e' => $exponent];
+        $loader = \Google\Site_Kit_Dependencies\phpseclib3\Crypt\PublicKeyLoader::load($component);
+        return $loader->toString('PKCS8');
+    }
+    /**
+     * phpseclib calls "phpinfo" by default, which requires special
+     * whitelisting in the AppEngine VM environment. This function
+     * sets constants to bypass the need for phpseclib to check phpinfo
+     *
+     * @see phpseclib/Math/BigInteger
+     * @see https://github.com/GoogleCloudPlatform/getting-started-php/issues/85
+     */
+    private function setPhpsecConstants()
+    {
+        if (\filter_var(\getenv('GAE_VM'), \FILTER_VALIDATE_BOOLEAN)) {
+            if (!\defined('Google\\Site_Kit_Dependencies\\MATH_BIGINTEGER_OPENSSL_ENABLED')) {
+                \define('Google\\Site_Kit_Dependencies\\MATH_BIGINTEGER_OPENSSL_ENABLED', \true);
+            }
+            if (!\defined('Google\\Site_Kit_Dependencies\\CRYPT_RSA_MODE')) {
+                \define('Google\\Site_Kit_Dependencies\\CRYPT_RSA_MODE', \Google\Site_Kit_Dependencies\phpseclib3\Crypt\AES::ENGINE_OPENSSL);
+            }
+        }
+    }
+}