112 lines
3.3 KiB
PHP
112 lines
3.3 KiB
PHP
<?php declare(strict_types=1);
|
|
use enshrined\svgSanitize\Sanitizer;
|
|
|
|
class SVGFileHandler extends DataHandlerExtension
|
|
{
|
|
protected $SUPPORTED_EXT = ["svg"];
|
|
|
|
/** @var SVGFileHandlerTheme */
|
|
protected $theme;
|
|
|
|
public function onPageRequest(PageRequestEvent $event)
|
|
{
|
|
global $page;
|
|
if ($event->page_matches("get_svg")) {
|
|
$id = int_escape($event->get_arg(0));
|
|
$image = Image::by_id($id);
|
|
$hash = $image->hash;
|
|
|
|
$page->set_type("image/svg+xml");
|
|
$page->set_mode(PageMode::DATA);
|
|
|
|
$sanitizer = new Sanitizer();
|
|
$sanitizer->removeRemoteReferences(true);
|
|
$dirtySVG = file_get_contents(warehouse_path(Image::IMAGE_DIR, $hash));
|
|
$cleanSVG = $sanitizer->sanitize($dirtySVG);
|
|
$page->set_data($cleanSVG);
|
|
}
|
|
}
|
|
|
|
protected function media_check_properties(MediaCheckPropertiesEvent $event): void
|
|
{
|
|
$event->image->lossless = true;
|
|
$event->image->video = false;
|
|
$event->image->audio = false;
|
|
$event->image->image = true;
|
|
|
|
$msp = new MiniSVGParser($event->file_name);
|
|
$event->image->width = $msp->width;
|
|
$event->image->height = $msp->height;
|
|
}
|
|
|
|
protected function move_upload_to_archive(DataUploadEvent $event)
|
|
{
|
|
$sanitizer = new Sanitizer();
|
|
$sanitizer->removeRemoteReferences(true);
|
|
$dirtySVG = file_get_contents($event->tmpname);
|
|
$cleanSVG = $sanitizer->sanitize($dirtySVG);
|
|
file_put_contents(warehouse_path(Image::IMAGE_DIR, $event->hash), $cleanSVG);
|
|
}
|
|
|
|
protected function create_thumb(string $hash, string $type): bool
|
|
{
|
|
try {
|
|
// Normally we require imagemagick, but for unit tests we can use a no-op engine
|
|
if (defined('UNITTEST')) {
|
|
create_image_thumb($hash, $type);
|
|
} else {
|
|
create_image_thumb($hash, $type, MediaEngine::IMAGICK);
|
|
}
|
|
return true;
|
|
} catch (MediaException $e) {
|
|
log_warning("handle_svg", "Could not generate thumbnail. " . $e->getMessage());
|
|
copy("ext/handle_svg/thumb.jpg", warehouse_path(Image::THUMBNAIL_DIR, $hash));
|
|
return false;
|
|
}
|
|
}
|
|
|
|
protected function check_contents(string $file): bool
|
|
{
|
|
if (getMimeType($file)!="image/svg+xml") {
|
|
return false;
|
|
}
|
|
|
|
$msp = new MiniSVGParser($file);
|
|
return bool_escape($msp->valid);
|
|
}
|
|
}
|
|
|
|
class MiniSVGParser
|
|
{
|
|
/** @var bool */
|
|
public $valid=false;
|
|
/** @var int */
|
|
public $width=0;
|
|
/** @var int */
|
|
public $height=0;
|
|
|
|
/** @var int */
|
|
private $xml_depth=0;
|
|
|
|
public function __construct(string $file)
|
|
{
|
|
$xml_parser = xml_parser_create();
|
|
xml_set_element_handler($xml_parser, [$this, "startElement"], [$this, "endElement"]);
|
|
$this->valid = bool_escape(xml_parse($xml_parser, file_get_contents($file), true));
|
|
xml_parser_free($xml_parser);
|
|
}
|
|
|
|
public function startElement($parser, $name, $attrs)
|
|
{
|
|
if ($name == "SVG" && $this->xml_depth == 0) {
|
|
$this->width = int_escape($attrs["WIDTH"]);
|
|
$this->height = int_escape($attrs["HEIGHT"]);
|
|
}
|
|
$this->xml_depth++;
|
|
}
|
|
|
|
public function endElement($parser, $name)
|
|
{
|
|
$this->xml_depth--;
|
|
}
|
|
}
|