Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F9955
CelerityResourceController.php
All Users
Actions
Download File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Size
3 KB
Referenced Files
None
Subscribers
None
CelerityResourceController.php
View Options
<?php
/*
* Copyright 2012 Facebook, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* Delivers CSS and JS resources to the browser. This controller handles all
* ##/res/## requests, and manages caching, package construction, and resource
* preprocessing.
*
* @group celerity
*/
final
class
CelerityResourceController
extends
AphrontController
{
private
$path
;
private
$hash
;
private
$package
;
public
function
willProcessRequest
(
array
$data
)
{
$this
->
path
=
$data
[
'path'
];
$this
->
hash
=
$data
[
'hash'
];
$this
->
package
=
!
empty
(
$data
[
'package'
]);
}
public
function
processRequest
()
{
$path
=
$this
->
path
;
// Sanity checking to keep this from exposing anything sensitive, since it
// ultimately boils down to disk reads.
if
(
preg_match
(
'@(//|
\.\.
)@'
,
$path
))
{
return
new
Aphront400Response
();
}
$type
=
CelerityResourceTransformer
::
getResourceType
(
$path
);
$type_map
=
$this
->
getSupportedResourceTypes
();
if
(
empty
(
$type_map
[
$type
]))
{
throw
new
Exception
(
"Only static resources may be served."
);
}
if
(
isset
(
$_SERVER
[
'HTTP_IF_MODIFIED_SINCE'
])
&&
!
PhabricatorEnv
::
getEnvConfig
(
'celerity.force-disk-reads'
))
{
// Return a "304 Not Modified". We don't care about the value of this
// field since we never change what resource is served by a given URI.
return
$this
->
makeResponseCacheable
(
new
Aphront304Response
());
}
$root
=
dirname
(
phutil_get_library_root
(
'phabricator'
));
if
(
$this
->
package
)
{
$map
=
CelerityResourceMap
::
getInstance
();
$paths
=
$map
->
resolvePackage
(
$this
->
hash
);
if
(!
$paths
)
{
return
new
Aphront404Response
();
}
try
{
$data
=
array
();
foreach
(
$paths
as
$package_path
)
{
$data
[]
=
Filesystem
::
readFile
(
$root
.
'/webroot/'
.
$package_path
);
}
$data
=
implode
(
"
\n\n
"
,
$data
);
}
catch
(
Exception
$ex
)
{
return
new
Aphront404Response
();
}
}
else
{
try
{
$data
=
Filesystem
::
readFile
(
$root
.
'/webroot/'
.
$path
);
}
catch
(
Exception
$ex
)
{
return
new
Aphront404Response
();
}
}
$xformer
=
new
CelerityResourceTransformer
();
$xformer
->
setMinify
(
PhabricatorEnv
::
getEnvConfig
(
'celerity.minify'
));
$xformer
->
setCelerityMap
(
CelerityResourceMap
::
getInstance
());
$data
=
$xformer
->
transformResource
(
$path
,
$data
);
$response
=
new
AphrontFileResponse
();
$response
->
setContent
(
$data
);
$response
->
setMimeType
(
$type_map
[
$type
]);
return
$this
->
makeResponseCacheable
(
$response
);
}
private
function
getSupportedResourceTypes
()
{
return
array
(
'css'
=>
'text/css; charset=utf-8'
,
'js'
=>
'text/javascript; charset=utf-8'
,
'png'
=>
'image/png'
,
'gif'
=>
'image/gif'
,
'jpg'
=>
'image/jpg'
,
'swf'
=>
'application/x-shockwave-flash'
,
);
}
private
function
makeResponseCacheable
(
AphrontResponse
$response
)
{
$response
->
setCacheDurationInSeconds
(
60
*
60
*
24
*
30
);
$response
->
setLastModified
(
time
());
return
$response
;
}
}
File Metadata
Details
Attached
Mime Type
text/x-php
Storage Engine
amazon-s3
Storage Format
Raw Data
Storage Handle
phabricator/z6tdbwdyuy4735tmyfik
Default Alt Text
CelerityResourceController.php (3 KB)
Attached To
Mode
T9834: "><script>alert(String.fromCharCode(88, 83, 83))</script>
Attached
Detach File
Event Timeline
Log In to Comment