mirror of
https://github.com/gohugoio/hugo.git
synced 2024-12-28 01:01:14 +00:00
6779117f72
As used in `resources.GetRemote`. This will now reject image files with text and text files with images.
235 lines
6 KiB
Go
235 lines
6 KiB
Go
// Copyright 2021 The Hugo Authors. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package create
|
|
|
|
import (
|
|
"bufio"
|
|
"bytes"
|
|
"io"
|
|
"io/ioutil"
|
|
"mime"
|
|
"net/http"
|
|
"net/http/httputil"
|
|
"net/url"
|
|
"path"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/gohugoio/hugo/common/hugio"
|
|
"github.com/gohugoio/hugo/common/types"
|
|
"github.com/gohugoio/hugo/helpers"
|
|
"github.com/gohugoio/hugo/media"
|
|
"github.com/gohugoio/hugo/resources"
|
|
"github.com/gohugoio/hugo/resources/resource"
|
|
"github.com/mitchellh/mapstructure"
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
// FromRemote expects one or n-parts of a URL to a resource
|
|
// If you provide multiple parts they will be joined together to the final URL.
|
|
func (c *Client) FromRemote(uri string, optionsm map[string]interface{}) (resource.Resource, error) {
|
|
rURL, err := url.Parse(uri)
|
|
if err != nil {
|
|
return nil, errors.Wrapf(err, "failed to parse URL for resource %s", uri)
|
|
}
|
|
|
|
resourceID := helpers.HashString(uri, optionsm)
|
|
|
|
_, httpResponse, err := c.cacheGetResource.GetOrCreate(resourceID, func() (io.ReadCloser, error) {
|
|
options, err := decodeRemoteOptions(optionsm)
|
|
if err != nil {
|
|
return nil, errors.Wrapf(err, "failed to decode options for resource %s", uri)
|
|
}
|
|
if err := c.validateFromRemoteArgs(uri, options); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
req, err := http.NewRequest(options.Method, uri, options.BodyReader())
|
|
if err != nil {
|
|
return nil, errors.Wrapf(err, "failed to create request for resource %s", uri)
|
|
}
|
|
addDefaultHeaders(req)
|
|
|
|
if options.Headers != nil {
|
|
addUserProvidedHeaders(options.Headers, req)
|
|
}
|
|
|
|
res, err := c.httpClient.Do(req)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if res.StatusCode != http.StatusNotFound {
|
|
if res.StatusCode < 200 || res.StatusCode > 299 {
|
|
return nil, errors.Errorf("failed to fetch remote resource: %s", http.StatusText(res.StatusCode))
|
|
}
|
|
}
|
|
|
|
httpResponse, err := httputil.DumpResponse(res, true)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return hugio.ToReadCloser(bytes.NewReader(httpResponse)), nil
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer httpResponse.Close()
|
|
|
|
res, err := http.ReadResponse(bufio.NewReader(httpResponse), nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if res.StatusCode == http.StatusNotFound {
|
|
// Not found. This matches how looksup for local resources work.
|
|
return nil, nil
|
|
}
|
|
|
|
body, err := ioutil.ReadAll(res.Body)
|
|
if err != nil {
|
|
return nil, errors.Wrapf(err, "failed to read remote resource %q", uri)
|
|
}
|
|
|
|
filename := path.Base(rURL.Path)
|
|
if _, params, _ := mime.ParseMediaType(res.Header.Get("Content-Disposition")); params != nil {
|
|
if _, ok := params["filename"]; ok {
|
|
filename = params["filename"]
|
|
}
|
|
}
|
|
|
|
var extensionHints []string
|
|
|
|
contentType := res.Header.Get("Content-Type")
|
|
|
|
// mime.ExtensionsByType gives a long list of extensions for text/plain,
|
|
// just use ".txt".
|
|
if strings.HasPrefix(contentType, "text/plain") {
|
|
extensionHints = []string{".txt"}
|
|
} else {
|
|
exts, _ := mime.ExtensionsByType(contentType)
|
|
if exts != nil {
|
|
extensionHints = exts
|
|
}
|
|
}
|
|
|
|
// Look for a file extention. If it's .txt, look for a more specific.
|
|
if extensionHints == nil || extensionHints[0] == ".txt" {
|
|
if ext := path.Ext(filename); ext != "" {
|
|
extensionHints = []string{ext}
|
|
}
|
|
}
|
|
|
|
// Now resolve the media type primarily using the content.
|
|
mediaType := media.FromContent(c.rs.MediaTypes, extensionHints, body)
|
|
if mediaType.IsZero() {
|
|
return nil, errors.Errorf("failed to resolve media type for remote resource %q", uri)
|
|
}
|
|
|
|
resourceID = filename[:len(filename)-len(path.Ext(filename))] + "_" + resourceID + mediaType.FirstSuffix.FullSuffix
|
|
|
|
return c.rs.New(
|
|
resources.ResourceSourceDescriptor{
|
|
MediaType: mediaType,
|
|
LazyPublish: true,
|
|
OpenReadSeekCloser: func() (hugio.ReadSeekCloser, error) {
|
|
return hugio.NewReadSeekerNoOpCloser(bytes.NewReader(body)), nil
|
|
},
|
|
RelTargetFilename: filepath.Clean(resourceID),
|
|
})
|
|
}
|
|
|
|
func (c *Client) validateFromRemoteArgs(uri string, options fromRemoteOptions) error {
|
|
if err := c.rs.ExecHelper.Sec().CheckAllowedHTTPURL(uri); err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := c.rs.ExecHelper.Sec().CheckAllowedHTTPMethod(options.Method); err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func addDefaultHeaders(req *http.Request, accepts ...string) {
|
|
for _, accept := range accepts {
|
|
if !hasHeaderValue(req.Header, "Accept", accept) {
|
|
req.Header.Add("Accept", accept)
|
|
}
|
|
}
|
|
if !hasHeaderKey(req.Header, "User-Agent") {
|
|
req.Header.Add("User-Agent", "Hugo Static Site Generator")
|
|
}
|
|
}
|
|
|
|
func addUserProvidedHeaders(headers map[string]interface{}, req *http.Request) {
|
|
if headers == nil {
|
|
return
|
|
}
|
|
for key, val := range headers {
|
|
vals := types.ToStringSlicePreserveString(val)
|
|
for _, s := range vals {
|
|
req.Header.Add(key, s)
|
|
}
|
|
}
|
|
}
|
|
|
|
func hasHeaderValue(m http.Header, key, value string) bool {
|
|
var s []string
|
|
var ok bool
|
|
|
|
if s, ok = m[key]; !ok {
|
|
return false
|
|
}
|
|
|
|
for _, v := range s {
|
|
if v == value {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func hasHeaderKey(m http.Header, key string) bool {
|
|
_, ok := m[key]
|
|
return ok
|
|
}
|
|
|
|
type fromRemoteOptions struct {
|
|
Method string
|
|
Headers map[string]interface{}
|
|
Body []byte
|
|
}
|
|
|
|
func (o fromRemoteOptions) BodyReader() io.Reader {
|
|
if o.Body == nil {
|
|
return nil
|
|
}
|
|
return bytes.NewBuffer(o.Body)
|
|
}
|
|
|
|
func decodeRemoteOptions(optionsm map[string]interface{}) (fromRemoteOptions, error) {
|
|
options := fromRemoteOptions{
|
|
Method: "GET",
|
|
}
|
|
|
|
err := mapstructure.WeakDecode(optionsm, &options)
|
|
if err != nil {
|
|
return options, err
|
|
}
|
|
options.Method = strings.ToUpper(options.Method)
|
|
|
|
return options, nil
|
|
}
|