card 1.19.0 → 1.19.1

data/vendor/carrierwave/lib/carrierwave/uploader/content_type_whitelist.rb

@@ -0,0 +1,48 @@
+module CarrierWave
+  module Uploader
+    module ContentTypeWhitelist
+      extend ActiveSupport::Concern
+
+      included do
+        before :cache, :check_content_type_whitelist!
+      end
+
+      ##
+      # Override this method in your uploader to provide a whitelist of files content types
+      # which are allowed to be uploaded.
+      # Not only strings but Regexp are allowed as well.
+      #
+      # === Returns
+      #
+      # [NilClass, String, Regexp, Array[String, Regexp]] a whitelist of content types which are allowed to be uploaded
+      #
+      # === Examples
+      #
+      #     def content_type_whitelist
+      #       %w(text/json application/json)
+      #     end
+      #
+      # Basically the same, but using a Regexp:
+      #
+      #     def content_type_whitelist
+      #       [/(text|application)\/json/]
+      #     end
+      #
+      def content_type_whitelist; end
+
+    private
+
+      def check_content_type_whitelist!(new_file)
+        content_type = new_file.content_type
+        if content_type_whitelist && !whitelisted_content_type?(content_type)
+          raise CarrierWave::IntegrityError, I18n.translate(:"errors.messages.content_type_whitelist_error", content_type: content_type)
+        end
+      end
+
+      def whitelisted_content_type?(content_type)
+        Array(content_type_whitelist).any? { |item| content_type =~ /#{item}/ }
+      end
+
+    end # ContentTypeWhitelist
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/default_url.rb

@@ -0,0 +1,17 @@
+module CarrierWave
+  module Uploader
+    module DefaultUrl
+
+      def url(*args)
+        super || default_url(*args)
+      end
+
+      ##
+      # Override this method in your uploader to provide a default url
+      # in case no file has been cached/stored yet.
+      #
+      def default_url(*args); end
+
+    end # DefaultPath
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/download.rb

@@ -0,0 +1,92 @@
+require 'open-uri'
+
+module CarrierWave
+  module Uploader
+    module Download
+      extend ActiveSupport::Concern
+
+      include CarrierWave::Uploader::Callbacks
+      include CarrierWave::Uploader::Configuration
+      include CarrierWave::Uploader::Cache
+
+      class RemoteFile
+        def initialize(uri)
+          @uri = uri
+        end
+
+        def original_filename
+          filename = filename_from_header || File.basename(file.base_uri.path)
+          mime_type = MIME::Types[file.content_type].first
+          unless File.extname(filename).present? || mime_type.blank?
+            filename = "#{filename}.#{mime_type.extensions.first}"
+          end
+          filename
+        end
+
+        def respond_to?(*args)
+          super or file.respond_to?(*args)
+        end
+
+        def http?
+          @uri.scheme =~ /^https?$/
+        end
+
+      private
+
+        def file
+          if @file.blank?
+            @file = Kernel.open(@uri.to_s, "User-Agent" => "CarrierWave/#{CarrierWave::VERSION}")
+            @file = @file.is_a?(String) ? StringIO.new(@file) : @file
+          end
+          @file
+
+        rescue StandardError => e
+          raise CarrierWave::DownloadError, "could not download file: #{e.message}"
+        end
+
+        def filename_from_header
+          if file.meta.include? 'content-disposition'
+            match = file.meta['content-disposition'].match(/filename="?([^"]+)/)
+            return match[1] unless match.nil? || match[1].empty?
+          end
+        end
+
+        def method_missing(*args, &block)
+          file.send(*args, &block)
+        end
+      end
+
+      ##
+      # Caches the file by downloading it from the given URL.
+      #
+      # === Parameters
+      #
+      # [url (String)] The URL where the remote file is stored
+      #
+      def download!(uri)
+        processed_uri = process_uri(uri)
+        file = RemoteFile.new(processed_uri)
+        raise CarrierWave::DownloadError, "trying to download a file which is not served over HTTP" unless file.http?
+        cache!(file)
+      end
+
+      ##
+      # Processes the given URL by parsing and escaping it. Public to allow overriding.
+      #
+      # === Parameters
+      #
+      # [url (String)] The URL where the remote file is stored
+      #
+      def process_uri(uri)
+        URI.parse(uri)
+      rescue URI::InvalidURIError
+        uri_parts = uri.split('?')
+        # regexp from Ruby's URI::Parser#regexp[:UNSAFE], with [] specifically removed
+        encoded_uri = URI.encode(uri_parts.shift, /[^\-_.!~*'()a-zA-Z\d;\/?:@&=+$,]/)
+        encoded_uri << '?' << URI.encode(uri_parts.join('?')) if uri_parts.any?
+        URI.parse(encoded_uri) rescue raise CarrierWave::DownloadError, "couldn't parse URL"
+      end
+
+    end # Download
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/extension_blacklist.rb

@@ -0,0 +1,51 @@
+module CarrierWave
+  module Uploader
+    module ExtensionBlacklist
+      extend ActiveSupport::Concern
+
+      included do
+        before :cache, :check_extension_blacklist!
+      end
+
+      ##
+      # Override this method in your uploader to provide a black list of extensions which
+      # are prohibited to be uploaded. Compares the file's extension case insensitive.
+      # Furthermore, not only strings but Regexp are allowed as well.
+      #
+      # When using a Regexp in the black list, `\A` and `\z` are automatically added to
+      # the Regexp expression, also case insensitive.
+      #
+      # === Returns
+
+      # [NilClass, String, Regexp, Array[String, Regexp]] a black list of extensions which are prohibited to be uploaded
+      #
+      # === Examples
+      #
+      #     def extension_blacklist
+      #       %w(swf tiff)
+      #     end
+      #
+      # Basically the same, but using a Regexp:
+      #
+      #     def extension_blacklist
+      #       [/swf/, 'tiff']
+      #     end
+      #
+
+      def extension_blacklist; end
+
+    private
+
+      def check_extension_blacklist!(new_file)
+        extension = new_file.extension.to_s
+        if extension_blacklist && blacklisted_extension?(extension)
+          raise CarrierWave::IntegrityError, I18n.translate(:"errors.messages.extension_blacklist_error", extension: new_file.extension.inspect, prohibited_types: Array(extension_blacklist).join(", "))
+        end
+      end
+
+      def blacklisted_extension?(extension)
+        Array(extension_blacklist).any? { |item| extension =~ /\A#{item}\z/i }
+      end
+    end
+  end
+end

data/vendor/carrierwave/lib/carrierwave/uploader/extension_whitelist.rb

@@ -0,0 +1,51 @@
+module CarrierWave
+  module Uploader
+    module ExtensionWhitelist
+      extend ActiveSupport::Concern
+
+      included do
+        before :cache, :check_extension_whitelist!
+      end
+
+      ##
+      # Override this method in your uploader to provide a white list of extensions which
+      # are allowed to be uploaded. Compares the file's extension case insensitive.
+      # Furthermore, not only strings but Regexp are allowed as well.
+      #
+      # When using a Regexp in the white list, `\A` and `\z` are automatically added to
+      # the Regexp expression, also case insensitive.
+      #
+      # === Returns
+      #
+      # [NilClass, String, Regexp, Array[String, Regexp]] a white list of extensions which are allowed to be uploaded
+      #
+      # === Examples
+      #
+      #     def extension_whitelist
+      #       %w(jpg jpeg gif png)
+      #     end
+      #
+      # Basically the same, but using a Regexp:
+      #
+      #     def extension_whitelist
+      #       [/jpe?g/, 'gif', 'png']
+      #     end
+      #
+      def extension_whitelist; end
+
+    private
+
+      def check_extension_whitelist!(new_file)
+        extension = new_file.extension.to_s
+        if extension_whitelist && !whitelisted_extension?(extension)
+          raise CarrierWave::IntegrityError, I18n.translate(:"errors.messages.extension_whitelist_error", extension: new_file.extension.inspect, allowed_types: Array(extension_whitelist).join(", "))
+        end
+      end
+
+      def whitelisted_extension?(extension)
+        Array(extension_whitelist).any? { |item| extension =~ /\A#{item}\z/i }
+      end
+
+    end # ExtensionWhitelist
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/file_size.rb

@@ -0,0 +1,41 @@
+module CarrierWave
+  module Uploader
+    module FileSize
+      extend ActiveSupport::Concern
+
+      included do
+        before :cache, :check_size!
+      end
+
+      ##
+      # Override this method in your uploader to provide a Range of Size which
+      # are allowed to be uploaded.
+      # === Returns
+      #
+      # [NilClass, Range] a size range which are permitted to be uploaded
+      #
+      # === Examples
+      #
+      #     def size_range
+      #       3256...5748
+      #     end
+      #
+      def size_range; end
+
+      private
+
+      def check_size!(new_file)
+        size = new_file.size
+        expected_size_range = size_range
+        if expected_size_range.is_a?(::Range)
+          if size < expected_size_range.min
+            raise CarrierWave::IntegrityError, I18n.translate(:"errors.messages.min_size_error", :min_size => expected_size_range.min)
+          elsif size > expected_size_range.max
+            raise CarrierWave::IntegrityError, I18n.translate(:"errors.messages.max_size_error", :max_size => expected_size_range.max)
+          end
+        end
+      end
+
+    end # FileSize
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/magic_mime_blacklist.rb

@@ -0,0 +1,94 @@
+module CarrierWave
+  module Uploader
+
+    ##
+    # This modules validates the content type of a file with the use of
+    # ruby-filemagic gem and a blacklist regular expression. If you want
+    # to use this, you'll need to require this file:
+    #
+    #   require 'carrierwave/uploader/magic_mime_blacklist'
+    #
+    # And then include it in your uploader:
+    #
+    #   class MyUploader < CarrierWave::Uploader::Base
+    #     include CarrierWave::Uploader::MagicMimeBlacklist
+    #
+    #     def blacklist_mime_type_pattern
+    #       /image\//
+    #     end
+    #   end
+    #
+    module MagicMimeBlacklist
+      extend ActiveSupport::Concern
+
+      included do
+        begin
+          require "filemagic"
+        rescue LoadError => e
+          e.message << " (You may need to install the ruby-filemagic gem)"
+          raise e
+        end
+
+        before :cache, :check_blacklist_pattern!
+      end
+
+      ##
+      # Override this method in your uploader to provide a black list pattern (regexp)
+      # of content-types which are prohibited to be uploaded.
+      # Compares the file's content-type.
+      #
+      # === Returns
+      #
+      # [Regexp] a black list regexp to match the content_type
+      #
+      # === Examples
+      #
+      #     def blacklist_mime_type_pattern
+      #       /(text|application)\/json/
+      #     end
+      #
+      def blacklist_mime_type_pattern; end
+
+    private
+
+      def check_blacklist_pattern!(new_file)
+        return if blacklist_mime_type_pattern.nil?
+
+        content_type = extract_content_type(new_file)
+
+        if content_type.match(blacklist_mime_type_pattern)
+          raise CarrierWave::IntegrityError,
+            I18n.translate(:"errors.messages.mime_type_pattern_black_list_error",
+                           :content_type => content_type)
+        end
+      end
+
+      ##
+      # Extracts the content type of the given file
+      #
+      # === Returns
+      #
+      # [String] the extracted content type
+      #
+      def extract_content_type(new_file)
+        content_type = nil
+
+        File.open(new_file.path) do |fd|
+          data = fd.read(1024) || ""
+          content_type = filemagic.buffer(data)
+        end
+
+        content_type
+      end
+
+    ##
+    # FileMagic object with the MAGIC_MIME_TYPE flag set
+    #
+    # @return [FileMagic] a filemagic object
+      def filemagic
+        @filemagic ||= FileMagic.new(FileMagic::MAGIC_MIME_TYPE)
+      end
+
+    end # MagicMimeblackList
+  end # Uploader
+end # CarrierWave

data/vendor/carrierwave/lib/carrierwave/uploader/magic_mime_whitelist.rb

@@ -0,0 +1,94 @@
+module CarrierWave
+  module Uploader
+
+    ##
+    # This modules validates the content type of a file with the use of
+    # ruby-filemagic gem and a whitelist regular expression. If you want
+    # to use this, you'll need to require this file:
+    #
+    #   require 'carrierwave/uploader/magic_mime_whitelist'
+    #
+    # And then include it in your uploader:
+    #
+    #   class MyUploader < CarrierWave::Uploader::Base
+    #     include CarrierWave::Uploader::MagicMimeWhitelist
+    #
+    #     def whitelist_mime_type_pattern
+    #       /image\//
+    #     end
+    #   end
+    #
+    module MagicMimeWhitelist
+      extend ActiveSupport::Concern
+
+      included do
+        begin
+          require "filemagic"
+        rescue LoadError => e
+          e.message << " (You may need to install the ruby-filemagic gem)"
+          raise e
+        end
+
+        before :cache, :check_whitelist_pattern!
+      end
+
+      ##
+      # Override this method in your uploader to provide a white list pattern (regexp)
+      # of content-types which are allowed to be uploaded.
+      # Compares the file's content-type.
+      #
+      # === Returns
+      #
+      # [Regexp] a white list regexp to match the content_type
+      #
+      # === Examples
+      #
+      #     def whitelist_mime_type_pattern
+      #       /(text|application)\/json/
+      #     end
+      #
+      def whitelist_mime_type_pattern; end
+
+    private
+
+      def check_whitelist_pattern!(new_file)
+        return if whitelist_mime_type_pattern.nil?
+
+        content_type = extract_content_type(new_file)
+
+        if !content_type.match(whitelist_mime_type_pattern)
+          raise CarrierWave::IntegrityError,
+            I18n.translate(:"errors.messages.mime_type_pattern_white_list_error",
+                           :content_type => content_type)
+        end
+      end
+
+      ##
+      # Extracts the content type of the given file
+      #
+      # === Returns
+      #
+      # [String] the extracted content type
+      #
+      def extract_content_type(new_file)
+        content_type = nil
+
+        File.open(new_file.path) do |fd|
+          data = fd.read(1024) || ""
+          content_type = filemagic.buffer(data)
+        end
+
+        content_type
+      end
+
+    ##
+    # FileMagic object with the MAGIC_MIME_TYPE flag set
+    #
+    # @return [FileMagic] a filemagic object
+      def filemagic
+        @filemagic ||= FileMagic.new(FileMagic::MAGIC_MIME_TYPE)
+      end
+
+    end # MagicMimeWhiteList
+  end # Uploader
+end # CarrierWave