twentyhq/twenty
1
1
Fork 0
mirror of https://github.com/twentyhq/twenty.git synced 2024-09-11 15:35:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

Use isSvg package

Browse Source
This commit is contained in:
martmull 2024-03-26 11:52:26 +01:00
parent ad3e206ea6
commit 05014b5107
1 changed files with 6 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
packages/twenty-server/src/engine/core-modules/file/file-upload/services/file-upload.service.ts
View File

@ -4,6 +4,7 @@ import sharp from 'sharp';
import { v4 as uuidV4 } from 'uuid'; import { v4 as uuidV4 } from 'uuid';
import { JSDOM } from 'jsdom'; import { JSDOM } from 'jsdom';
import DOMPurify from 'dompurify'; import DOMPurify from 'dompurify';
import isSvg from 'is-svg';
import { FileFolder } from 'src/engine/core-modules/file/interfaces/file-folder.interface'; import { FileFolder } from 'src/engine/core-modules/file/interfaces/file-folder.interface';
@ -34,22 +35,12 @@ export class FileUploadService {
}); });
} }
private _sanitizeFile({ private _sanitizeFile(
file, file: Buffer | Uint8Array | string,
ext, ): Buffer | Uint8Array | string {
mimeType,
}: {
file: Buffer | Uint8Array | string;
ext: string;
mimeType: string | undefined;
}): Buffer | Uint8Array | string {
const fileString = file.toString(); const fileString = file.toString();
if ( if (isSvg(fileString)) {
fileString.includes('svg') &&
ext === 'svg' &&
mimeType === 'image/svg+xml'
) {
const window = new JSDOM('').window; const window = new JSDOM('').window;
const purify = DOMPurify(window); const purify = DOMPurify(window);
@ -75,7 +66,7 @@ export class FileUploadService {
const name = `${id}${ext ? `.${ext}` : ''}`; const name = `${id}${ext ? `.${ext}` : ''}`;
await this._uploadFile({ await this._uploadFile({
file: this._sanitizeFile({ file, ext, mimeType }), file: this._sanitizeFile(file),
filename: name, filename: name,
mimeType, mimeType,
fileFolder, fileFolder,