1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
<?php
declare(strict_types=1);
/**
* @author Christoph Wurst <christoph@winzerhof-wurst.at>
* @author Lukas Reschke <lukas@owncloud.com>
* @author Lukas Reschke <lukas@statuscode.ch>
* @author Thomas Müller <thomas.mueller@tmit.eu>
*
* Mail
*
* This code is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License, version 3,
* as published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License, version 3,
* along with this program. If not, see <http://www.gnu.org/licenses/>
*
*/
namespace OCA\Mail\Controller;
use Exception;
use OCA\Mail\Http\ProxyDownloadResponse;
use OCP\AppFramework\Controller;
use OCP\AppFramework\Http\TemplateResponse;
use OCP\Http\Client\IClientService;
use OCP\IRequest;
use OCP\ISession;
use OCP\IURLGenerator;
use Psr\Http\Client\ClientExceptionInterface;
use Psr\Log\LoggerInterface;
class ProxyController extends Controller {
/** @var IURLGenerator */
private $urlGenerator;
/** @var ISession */
private $session;
/** @var IClientService */
private $clientService;
/** @var LoggerInterface */
private $logger;
public function __construct(string $appName,
IRequest $request,
IURLGenerator $urlGenerator,
ISession $session,
IClientService $clientService,
LoggerInterface $logger) {
parent::__construct($appName, $request);
$this->request = $request;
$this->urlGenerator = $urlGenerator;
$this->session = $session;
$this->clientService = $clientService;
$this->logger = $logger;
}
/**
* @NoAdminRequired
* @NoCSRFRequired
*
* @param string $src
*
* @throws \Exception If the URL is not valid.
* @return TemplateResponse
*/
public function redirect(string $src): TemplateResponse {
$authorizedRedirect = false;
if (strpos($src, 'http://') !== 0
&& strpos($src, 'https://') !== 0
&& strpos($src, 'ftp://') !== 0) {
throw new Exception('URL is not valid.', 1);
}
// If strict cookies are set it means we come from the same domain so no open redirect
if ($this->request->passesStrictCookieCheck()) {
$authorizedRedirect = true;
}
$params = [
'authorizedRedirect' => $authorizedRedirect,
'url' => $src,
'urlHost' => parse_url($src, PHP_URL_HOST),
'mailURL' => $this->urlGenerator->linkToRoute('mail.page.index'),
];
return new TemplateResponse($this->appName, 'redirect', $params, 'guest');
}
/**
* @NoAdminRequired
* @NoCSRFRequired
*
* @param string $src
*
* TODO: Cache the proxied content to prevent unnecessary requests from the oC server
* The caching should also already happen in a cronjob so that the sender of the
* mail does not know whether the mail has been opened.
*
* @return ProxyDownloadResponse
*/
public function proxy(string $src): ProxyDownloadResponse {
// close the session to allow parallel downloads
$this->session->close();
$client = $this->clientService->newClient();
try {
$response = $client->get($src);
$content = $response->getBody();
} catch (ClientExceptionInterface $e) {
$this->logger->notice('Unable to proxy image', ['exception' => $e]);
$content = file_get_contents(__DIR__ . '/../../img/blocked-image.png');
}
return new ProxyDownloadResponse($content, $src, 'application/octet-stream');
}
}
|
