blob: b0bf68f4204afc5a3bf70d4b12d17b1ae7b136ce (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
# frozen_string_literal: true
require 'fileutils'
module Gitlab
module Gfm
##
# Class that rewrites markdown links for uploads
#
# Using a pattern defined in `FileUploader` it copies files to a new
# project and rewrites all links to uploads in a given text.
#
#
class UploadsRewriter
include Gitlab::Utils::StrongMemoize
def initialize(text, _text_html, source_project, _current_user)
@text = text
@source_project = source_project
@pattern = FileUploader::MARKDOWN_PATTERN
end
def rewrite(target_parent)
return @text unless needs_rewrite?
@text.gsub!(@pattern) do |markdown|
file = find_file($~[:secret], $~[:file])
# No file will be returned for a path traversal
next if file.nil?
break markdown unless file.try(:exists?)
klass = target_parent.is_a?(Namespace) ? NamespaceFileUploader : FileUploader
moved = klass.copy_to(file, target_parent)
moved_markdown = moved.markdown_link
# Prevents rewrite of plain links as embedded
if was_embedded?(markdown)
moved_markdown
else
moved_markdown.delete_prefix('!')
end
end
end
def needs_rewrite?
strong_memoize(:needs_rewrite) do
FileUploader::MARKDOWN_PATTERN.match?(@text)
end
end
def was_embedded?(markdown)
markdown.starts_with?("!")
end
def find_file(secret, file_name)
UploaderFinder.new(@source_project, secret, file_name).execute
end
end
end
end
|
