mbeditor 0.2.2

data/app/controllers/mbeditor/application_controller.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+require "open3"
+require "pathname"
+
+module Mbeditor
+  class ApplicationController < ActionController::Base
+    protect_from_forgery with: :exception
+    before_action :run_authentication
+
+    private
+
+    def run_authentication
+      auth = Mbeditor.configuration.authenticate_with
+      instance_exec(&auth) if auth
+    end
+
+    def ensure_allowed_environment!
+      allowed = Array(Mbeditor.configuration.allowed_environments).map(&:to_sym)
+      render plain: 'Not found', status: :not_found unless allowed.include?(Rails.env.to_sym)
+    end
+
+    def workspace_root
+      configured_root = Mbeditor.configuration.workspace_root
+      if configured_root.present?
+        Pathname.new(configured_root.to_s)
+      else
+        self.class.instance_variable_get(:@workspace_root_cache) ||
+          self.class.instance_variable_set(:@workspace_root_cache, begin
+            rails_root = Rails.root.to_s
+            out, _err, status = Open3.capture3("git", "-C", rails_root, "rev-parse", "--show-toplevel")
+            Pathname.new(status.success? && out.strip.present? ? out.strip : rails_root)
+          rescue StandardError
+            Rails.root
+          end)
+      end
+    end
+
+    # Expand path and confirm it's inside workspace_root.
+    # Resolves symlinks on the nearest existing ancestor of the target so that
+    # a symlink inside the workspace cannot escape the sandbox regardless of
+    # whether the target itself exists yet (create / rename paths).
+    def resolve_path(raw)
+      return nil if raw.blank?
+
+      root = workspace_root.to_s
+      full = File.expand_path(raw.to_s, root)
+      return nil unless full.start_with?("#{root}/") || full == root
+
+      # Walk up to the nearest existing ancestor (could be the path itself,
+      # its parent directory, or ultimately the workspace root).
+      check = full
+      check = File.dirname(check) until File.exist?(check)
+      real_root = File.realpath(root)
+      real = File.realpath(check)
+      return nil unless real.start_with?("#{real_root}/") || real == real_root
+
+      full
+    rescue Errno::EACCES
+      nil
+    end
+
+    def relative_path(full)
+      root = workspace_root.to_s
+      return "" if full == root
+
+      full.delete_prefix(root + "/")
+    end
+  end
+end