mktcms 0.2.13 → 0.2.14

package/dist/runtime/server/api/admin/import.js

@@ -1,86 +0,0 @@
-import { createError, defineEventHandler, readMultipartFormData } from "h3";
-import { useStorage } from "nitropack/runtime";
-import path from "node:path";
-import unzipper from "unzipper";
-function sanitizePathSegment(segment) {
-  return segment.replace(/[/:\\]/g, "_").replace(/\0/g, "");
-}
-function zipPathToColonKey(entryPath) {
-  const original = entryPath.replace(/\\/g, "/");
-  if (original.startsWith("/")) {
-    return "";
-  }
-  let p = original.replace(/^\.\//, "");
-  if (/^[a-z]:\//i.test(p)) {
-    return "";
-  }
-  if (!p || p.includes("\0")) {
-    return "";
-  }
-  p = path.posix.normalize(p);
-  if (p === "." || p === ".." || p.startsWith("../") || p.includes("/../")) {
-    return "";
-  }
-  const parts = p.split("/").filter(Boolean);
-  if (parts.some((part) => part === "." || part === "..")) {
-    return "";
-  }
-  const sanitizedParts = parts.map(sanitizePathSegment);
-  return sanitizedParts.join(":");
-}
-export default defineEventHandler(async (event) => {
-  const form = await readMultipartFormData(event);
-  if (!form) {
-    throw createError({
-      statusCode: 400,
-      statusMessage: "No form data received"
-    });
-  }
-  const file = form.find((item) => item.name === "file");
-  if (!file) {
-    throw createError({
-      statusCode: 400,
-      statusMessage: "Missing file"
-    });
-  }
-  if (!file.filename || !file.data) {
-    throw createError({
-      statusCode: 400,
-      statusMessage: "Invalid file upload"
-    });
-  }
-  const allowedExtensions = [".zip"];
-  const fileExtension = file.filename.toLowerCase().slice(file.filename.lastIndexOf("."));
-  if (!allowedExtensions.includes(fileExtension)) {
-    throw createError({
-      statusCode: 400,
-      statusMessage: "Invalid file type. Only ZIP files are allowed for import."
-    });
-  }
-  const zipBuffer = Buffer.isBuffer(file.data) ? file.data : Buffer.from(file.data);
-  let zip;
-  try {
-    zip = await unzipper.Open.buffer(zipBuffer);
-  } catch {
-    throw createError({ statusCode: 400, statusMessage: "Invalid ZIP file" });
-  }
-  const storage = useStorage("content");
-  const written = /* @__PURE__ */ new Set();
-  for (const entry of zip.files) {
-    if (!entry.path) {
-      continue;
-    }
-    if (entry.type === "Directory") continue;
-    const fileColonKey = zipPathToColonKey(entry.path);
-    if (!fileColonKey) {
-      throw createError({
-        statusCode: 400,
-        statusMessage: `Invalid ZIP entry path: ${entry.path}`
-      });
-    }
-    const data = await entry.buffer();
-    await storage.setItemRaw(fileColonKey, data);
-    written.add(fileColonKey);
-  }
-  return { success: true, count: written.size };
-});