113 lines
		
	
	
		
			3.3 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			113 lines
		
	
	
		
			3.3 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php declare(strict_types=1);
 | |
| use enshrined\svgSanitize\Sanitizer;
 | |
| 
 | |
| class SVGFileHandler extends DataHandlerExtension
 | |
| {
 | |
|     protected $SUPPORTED_EXT = ["svg"];
 | |
| 
 | |
|     /** @var SVGFileHandlerTheme */
 | |
|     protected $theme;
 | |
| 
 | |
|     public function onPageRequest(PageRequestEvent $event)
 | |
|     {
 | |
|         global $page;
 | |
|         if ($event->page_matches("get_svg")) {
 | |
|             $id = int_escape($event->get_arg(0));
 | |
|             $image = Image::by_id($id);
 | |
|             $hash = $image->hash;
 | |
| 
 | |
|             $page->set_type("image/svg+xml");
 | |
|             $page->set_mode(PageMode::DATA);
 | |
| 
 | |
|             $sanitizer = new Sanitizer();
 | |
|             $sanitizer->removeRemoteReferences(true);
 | |
|             $dirtySVG = file_get_contents(warehouse_path(Image::IMAGE_DIR, $hash));
 | |
|             $cleanSVG = $sanitizer->sanitize($dirtySVG);
 | |
|             $page->set_data($cleanSVG);
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     protected function media_check_properties(MediaCheckPropertiesEvent $event): void
 | |
|     {
 | |
|         $event->image->lossless = true;
 | |
|         $event->image->video = false;
 | |
|         $event->image->audio = false;
 | |
|         $event->image->image = true;
 | |
| 
 | |
|         $msp = new MiniSVGParser($event->file_name);
 | |
|         $event->image->width = $msp->width;
 | |
|         $event->image->height = $msp->height;
 | |
|     }
 | |
| 
 | |
|     protected function move_upload_to_archive(DataUploadEvent $event)
 | |
|     {
 | |
|         $sanitizer = new Sanitizer();
 | |
|         $sanitizer->removeRemoteReferences(true);
 | |
|         $dirtySVG = file_get_contents($event->tmpname);
 | |
|         $cleanSVG = $sanitizer->sanitize($dirtySVG);
 | |
|         file_put_contents(warehouse_path(Image::IMAGE_DIR, $event->hash), $cleanSVG);
 | |
|     }
 | |
| 
 | |
|     protected function create_thumb(string $hash, string $type): bool
 | |
|     {
 | |
|         try {
 | |
|             // Normally we require imagemagick, but for unit tests we can use a no-op engine
 | |
|             if (defined('UNITTEST')) {
 | |
|                 create_image_thumb($hash, $type);
 | |
|             } else {
 | |
|                 create_image_thumb($hash, $type, MediaEngine::IMAGICK);
 | |
|             }
 | |
|             return true;
 | |
|         } catch (MediaException $e) {
 | |
|             log_warning("handle_svg", "Could not generate thumbnail. " . $e->getMessage());
 | |
|             copy("ext/handle_svg/thumb.jpg", warehouse_path(Image::THUMBNAIL_DIR, $hash));
 | |
|             return false;
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     protected function check_contents(string $file): bool
 | |
|     {
 | |
|         if (getMimeType($file)!="image/svg+xml") {
 | |
|             return false;
 | |
|         }
 | |
| 
 | |
|         $msp = new MiniSVGParser($file);
 | |
|         return bool_escape($msp->valid);
 | |
|     }
 | |
| }
 | |
| 
 | |
| class MiniSVGParser
 | |
| {
 | |
|     /** @var bool */
 | |
|     public $valid=false;
 | |
|     /** @var int */
 | |
|     public $width=0;
 | |
|     /** @var int */
 | |
|     public $height=0;
 | |
| 
 | |
|     /** @var int */
 | |
|     private $xml_depth=0;
 | |
| 
 | |
|     public function __construct(string $file)
 | |
|     {
 | |
|         $xml_parser = xml_parser_create();
 | |
|         xml_set_element_handler($xml_parser, [$this, "startElement"], [$this, "endElement"]);
 | |
|         $this->valid = bool_escape(xml_parse($xml_parser, file_get_contents($file), true));
 | |
|         xml_parser_free($xml_parser);
 | |
|     }
 | |
| 
 | |
|     public function startElement($parser, $name, $attrs)
 | |
|     {
 | |
|         if ($name == "SVG" && $this->xml_depth == 0) {
 | |
|             $this->width = int_escape($attrs["WIDTH"]);
 | |
|             $this->height = int_escape($attrs["HEIGHT"]);
 | |
|         }
 | |
|         $this->xml_depth++;
 | |
|     }
 | |
| 
 | |
|     public function endElement($parser, $name)
 | |
|     {
 | |
|         $this->xml_depth--;
 | |
|     }
 | |
| }
 |