blob: fe3c529196a42d5c62aca5dfe970e5f70411d141 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
<?php
/**
* Matomo - free/libre analytics platform
*
* @link https://matomo.org
* @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
*
*/
namespace Piwik\Plugins\Proxy;
use Piwik\AssetManager;
use Piwik\AssetManager\UIAsset;
use Piwik\Common;
use Piwik\Exception\StylesheetLessCompileException;
use Piwik\ProxyHttp;
/**
* Controller for proxy services
*
*/
class Controller extends \Piwik\Plugin\Controller
{
const TRANSPARENT_PNG_PIXEL = 'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAAA1BMVEUAAACnej3aAAAAAXRSTlMAQObYZgAAAApJREFUCNdjYAAAAAIAAeIhvDMAAAAASUVORK5CYII=';
const JS_MIME_TYPE = "application/javascript; charset=UTF-8";
/**
* Output the merged CSS file.
* This method is called when the asset manager is enabled.
*
* @see core/AssetManager.php
*/
public function getCss()
{
try {
$cssMergedFile = AssetManager::getInstance()->getMergedStylesheet();
} catch (StylesheetLessCompileException $exception) {
$cssMergedFile = AssetManager::getInstance()->getMergedStylesheet();
}
ProxyHttp::serverStaticFile($cssMergedFile->getAbsoluteLocation(), "text/css");
}
/**
* Output the merged core JavaScript file.
* This method is called when the asset manager is enabled.
*
* @see core/AssetManager.php
*/
public function getCoreJs()
{
$jsMergedFile = AssetManager::getInstance()->getMergedCoreJavaScript();
$this->serveJsFile($jsMergedFile);
}
/**
* Output the merged non core JavaScript file.
* This method is called when the asset manager is enabled.
*
* @see core/AssetManager.php
*/
public function getNonCoreJs()
{
$jsMergedFile = AssetManager::getInstance()->getMergedNonCoreJavaScript();
$this->serveJsFile($jsMergedFile);
}
/**
* Output a UMD merged chunk JavaScript file.
* This method is called when the asset manager is enabled.
*
* @see core/AssetManager.php
*/
public function getUmdJs()
{
$chunk = Common::getRequestVar('chunk');
$chunkFile = AssetManager::getInstance()->getMergedJavaScriptChunk($chunk);
$this->serveJsFile($chunkFile);
}
/**
* @param UIAsset $uiAsset
*/
private function serveJsFile($uiAsset)
{
ProxyHttp::serverStaticFile($uiAsset->getAbsoluteLocation(), self::JS_MIME_TYPE);
}
/**
* Validate URL against *.piwik.org domains
*
* @param string $url
* @return bool True if valid; false otherwise
*/
public static function isPiwikUrl($url)
{
// guard for IE6 meta refresh parsing weakness (OSVDB 19029)
if (strpos($url, ';') !== false
|| strpos($url, ';') !== false
) {
return false;
}
if (preg_match('~^http://(qa\.|demo\.|dev\.|forum\.)?piwik.org([#?/]|$)~', $url)) {
return true;
}
if (preg_match('~^http://(qa\.|demo\.|dev\.|forum\.)?matomo.org([#?/]|$)~', $url)) {
return true;
}
// Allow clockworksms domain
if (strpos($url, 'http://www.clockworksms.com/') === 0) {
return true;
}
return false;
}
}
|
