ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor Class Reference

Class InsecureFilenameSanitizerPreProcessor. More...

Inheritance diagram for ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor:

Collaboration diagram for ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor:

Protected Member Functions
	checkPath (string $path)
	getRejectionMessage ()
	getOKMessage ()
	checkPath (string $path)
	getRejectionMessage ()
	getOKMessage ()

Private Attributes
array	$prohibited_names

Additional Inherited Members
Public Member Functions inherited from ILIAS\FileUpload\Processor\AbstractRecursiveZipPreProcessor
	process (FileStream $stream, Metadata $metadata)
	This method gets invoked by the file upload service to process the file with the help of the processor. More...
	process (FileStream $stream, Metadata $metadata)
	This method gets invoked by the file upload service to process the file with the help of the processor. More...

Detailed Description

Class InsecureFilenameSanitizerPreProcessor.

PreProcessor which checks for file with potentially dangerous names

Author

Fabian Schmid fabia.nosp@m.n@sr.nosp@m..solu.nosp@m.tion.nosp@m.s

Definition at line 28 of file InsecureFilenameSanitizerPreProcessor.php.

Member Function Documentation

checkPath()

ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor::checkPath ( string  $path )

protected

Parameters

string

$path

to a file

Returns

bool false leads to rejection, true to accept

Reimplemented from ILIAS\FileUpload\Processor\AbstractRecursiveZipPreProcessor.

Definition at line 34 of file InsecureFilenameSanitizerPreProcessor.php.

                                              : bool
    {
        $path = str_replace('\\', '/', $path);
        $path = preg_replace('/\/+/', '/', $path);
        $path = trim((string) $path, '/');
        $parts = explode('/', $path);
        foreach ($parts as $part) {
            if (in_array($part, $this->prohibited_names)) {
                return false;
            }
        }
        return true;
    }

References $parts, and $path.

getOKMessage()

ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor::getOKMessage ( )

protected

Reimplemented from ILIAS\FileUpload\Processor\AbstractRecursiveZipPreProcessor.

Definition at line 53 of file InsecureFilenameSanitizerPreProcessor.php.

                                     : string
    {
        return 'Extension is not blacklisted.';
    }

getRejectionMessage()

ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor::getRejectionMessage ( )

protected

Reimplemented from ILIAS\FileUpload\Processor\AbstractRecursiveZipPreProcessor.

Definition at line 48 of file InsecureFilenameSanitizerPreProcessor.php.

                                            : string
    {
        return 'A Security Issue has been detected, File-upload aborted...';
    }

Field Documentation

$prohibited_names

array ILIAS\FileUpload\Processor\InsecureFilenameSanitizerPreProcessor::$prohibited_names

private

Initial value:

= [
        '...'
    ]

Definition at line 30 of file InsecureFilenameSanitizerPreProcessor.php.

---

The documentation for this class was generated from the following file:

• components/ILIAS/FileUpload/src/Processor/InsecureFilenameSanitizerPreProcessor.php