shell bypass 403
(function(i){typeof exports=="object"&&typeof module=="object"?i(require("../../lib/codemirror"),require("../../addon/mode/multiplex")):typeof define=="function"&&define.amd?define(["../../lib/codemirror","../../addon/mode/multiplex"],i):i(CodeMirror)})(function(i){"use strict";i.defineMode("twig:inner",function(){var t=["and","as","autoescape","endautoescape","block","do","endblock","else","elseif","extends","for","endfor","embed","endembed","filter","endfilter","flush","from","if","endif","in","is","include","import","not","or","set","spaceless","endspaceless","with","endwith","trans","endtrans","blocktrans","endblocktrans","macro","endmacro","use","verbatim","endverbatim"],f=/^[+\-*&%=<>!?|~^]/,l=/^[:\[\(\{]/,r=["true","false","null","empty","defined","divisibleby","divisible by","even","odd","iterable","sameas","same as"],u=/^(\d[+\-\*\/])?\d+(\.\d+)?/;t=new RegExp("(("+t.join(")|(")+"))\\b"),r=new RegExp("(("+r.join(")|(")+"))\\b");function d(e,n){var o=e.peek();if(n.incomment)return e.skipTo("#}")?(e.eatWhile(/\#|}/),n.incomment=!1):e.skipToEnd(),"comment";if(n.intag){if(n.operator){if(n.operator=!1,e.match(r))return"atom";if(e.match(u))return"number"}if(n.sign){if(n.sign=!1,e.match(r))return"atom";if(e.match(u))return"number"}if(n.instring)return o==n.instring&&(n.instring=!1),e.next(),"string";if(o=="'"||o=='"')return n.instring=o,e.next(),"string";if(e.match(n.intag+"}")||e.eat("-")&&e.match(n.intag+"}"))return n.intag=!1,"tag";if(e.match(f))return n.operator=!0,"operator";if(e.match(l))n.sign=!0;else if(e.eat(" ")||e.sol()){if(e.match(t))return"keyword";if(e.match(r))return"atom";if(e.match(u))return"number";e.sol()&&e.next()}else e.next();return"variable"}else if(e.eat("{")){if(e.eat("#"))return n.incomment=!0,e.skipTo("#}")?(e.eatWhile(/\#|}/),n.incomment=!1):e.skipToEnd(),"comment";if(o=e.eat(/\{|%/))return n.intag=o,o=="{"&&(n.intag="}"),e.eat("-"),"tag"}e.next()}return{startState:function(){return{}},token:function(e,n){return d(e,n)}}}),i.defineMode("twig",function(t,f){var l=i.getMode(t,"twig:inner");return!f||!f.base?l:i.multiplexingMode(i.getMode(t,f.base),{open:/\{[{#%]/,close:/[}#%]\}/,mode:l,parseDelimiters:!0})}),i.defineMIME("text/x-twig","twig")});