mirror of https://gitee.com/bigwinds/arangodb
218 lines
6.7 KiB
C++
218 lines
6.7 KiB
C++
////////////////////////////////////////////////////////////////////////////////
|
|
/// @brief path handler
|
|
///
|
|
/// @file
|
|
///
|
|
/// DISCLAIMER
|
|
///
|
|
/// Copyright 2010-2011 triagens GmbH, Cologne, Germany
|
|
///
|
|
/// Licensed under the Apache License, Version 2.0 (the "License");
|
|
/// you may not use this file except in compliance with the License.
|
|
/// You may obtain a copy of the License at
|
|
///
|
|
/// http://www.apache.org/licenses/LICENSE-2.0
|
|
///
|
|
/// Unless required by applicable law or agreed to in writing, software
|
|
/// distributed under the License is distributed on an "AS IS" BASIS,
|
|
/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
/// See the License for the specific language governing permissions and
|
|
/// limitations under the License.
|
|
///
|
|
/// Copyright holder is triAGENS GmbH, Cologne, Germany
|
|
///
|
|
/// @author Dr. Frank Celler
|
|
/// @author Copyright 2008-2011, triAGENS GmbH, Cologne, Germany
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
|
|
#include "PathHandler.h"
|
|
|
|
#include <fstream>
|
|
|
|
#include <Basics/FileUtils.h>
|
|
#include <Logger/Logger.h>
|
|
#include <Basics/StringBuffer.h>
|
|
#include <Rest/HttpRequest.h>
|
|
#include <Rest/HttpResponse.h>
|
|
|
|
using namespace triagens::basics;
|
|
|
|
namespace triagens {
|
|
namespace rest {
|
|
|
|
// -----------------------------------------------------------------------------
|
|
// constructors and destructores
|
|
// -----------------------------------------------------------------------------
|
|
|
|
PathHandler::PathHandler (HttpRequest* request, Options const* options)
|
|
: HttpHandler(request),
|
|
path(options->path),
|
|
contentType(options->contentType),
|
|
allowSymbolicLink(options->allowSymbolicLink),
|
|
defaultFile(options->defaultFile) {
|
|
|
|
string::size_type pos = path.size();
|
|
|
|
while (1 < pos && path[pos - 1] == '/') {
|
|
path.erase(--pos);
|
|
}
|
|
}
|
|
|
|
// -----------------------------------------------------------------------------
|
|
// Handler methods
|
|
// -----------------------------------------------------------------------------
|
|
|
|
HttpHandler::status_e PathHandler::execute () {
|
|
static string const allowed = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890. +-_=";
|
|
|
|
vector<string> names = request->suffix();
|
|
string name = path;
|
|
string last = "";
|
|
|
|
if (names.empty() && ! defaultFile.empty()) {
|
|
string url = request->requestPath();
|
|
|
|
if (! url.empty() && url[url.size() - 1] != '/') {
|
|
url += "/" + defaultFile;
|
|
}
|
|
|
|
response = new HttpResponse(HttpResponse::MOVED_PERMANENTLY);
|
|
|
|
response->setHeader("location", url);
|
|
response->setContentType("text/html");
|
|
|
|
response->body().appendText("<html><head><title>Moved</title></head><body><h1>Moved</h1><p>This page has moved to <a href=\"");
|
|
response->body().appendText(url);
|
|
response->body().appendText(">");
|
|
response->body().appendText(url);
|
|
response->body().appendText("</a>.</p></body></html>");
|
|
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
for (vector<string>::const_iterator j = names.begin(); j != names.end(); ++j) {
|
|
string const& next = *j;
|
|
|
|
if (next == ".") {
|
|
LOGGER_WARNING << "file '" << name << "' contains '.'";
|
|
|
|
response = new HttpResponse(HttpResponse::FORBIDDEN);
|
|
response->body().appendText("path contains '.'");
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
if (next == "..") {
|
|
LOGGER_WARNING << "file '" << name << "' contains '..'";
|
|
|
|
response = new HttpResponse(HttpResponse::FORBIDDEN);
|
|
response->body().appendText("path contains '..'");
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
string::size_type sc = next.find_first_not_of(allowed);
|
|
|
|
if (sc != string::npos) {
|
|
LOGGER_WARNING << "file '" << name << "' contains illegal character";
|
|
|
|
response = new HttpResponse(HttpResponse::FORBIDDEN);
|
|
response->body().appendText("path contains illegal character '" + string(1, next[sc]) + "'");
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
if (! path.empty()) {
|
|
if (! FileUtils::isDirectory(path)) {
|
|
LOGGER_WARNING << "file '" << name << "' not found";
|
|
|
|
response = new HttpResponse(HttpResponse::NOT_FOUND);
|
|
response->body().appendText("file not found");
|
|
return HANDLER_DONE;
|
|
}
|
|
}
|
|
|
|
name += "/" + next;
|
|
last = next;
|
|
|
|
if (! allowSymbolicLink && FileUtils::isSymbolicLink(name)) {
|
|
LOGGER_WARNING << "file '" << name << "' contains symbolic link";
|
|
|
|
response = new HttpResponse(HttpResponse::FORBIDDEN);
|
|
response->body().appendText("symbolic links are not allowed");
|
|
return HANDLER_DONE;
|
|
}
|
|
}
|
|
|
|
if (! FileUtils::isRegularFile(name)) {
|
|
LOGGER_WARNING << "file '" << name << "' not found";
|
|
|
|
response = new HttpResponse(HttpResponse::NOT_FOUND);
|
|
response->body().appendText("file not found");
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
response = new HttpResponse(HttpResponse::OK);
|
|
|
|
try {
|
|
FileUtils::slurp(name, response->body());
|
|
}
|
|
catch (...) {
|
|
delete response;
|
|
|
|
LOGGER_WARNING << "file '" << name << "' not readable";
|
|
|
|
response = new HttpResponse(HttpResponse::NOT_FOUND);
|
|
response->body().appendText("file not readable");
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
string::size_type d = last.find_last_of('.');
|
|
|
|
if (d != string::npos) {
|
|
string suffix = last.substr(d);
|
|
|
|
if (suffix == ".jpg") {
|
|
response->setContentType("image/jpg");
|
|
}
|
|
else if (suffix == ".js") {
|
|
response->setContentType("text/javascript");
|
|
}
|
|
else if (suffix == ".gif") {
|
|
response->setContentType("image/gif");
|
|
}
|
|
else if (suffix == ".png") {
|
|
response->setContentType("image/png");
|
|
}
|
|
else if (suffix == ".css") {
|
|
response->setContentType("text/css");
|
|
}
|
|
else if (suffix == ".html") {
|
|
response->setContentType("text/html");
|
|
}
|
|
else if (suffix == ".ico") {
|
|
response->setContentType("image/x-icon");
|
|
}
|
|
else if (suffix == ".pdf") {
|
|
response->setContentType("application/pdf");
|
|
}
|
|
else if (suffix == ".txt") {
|
|
response->setContentType("text/plain");
|
|
}
|
|
else {
|
|
LOGGER_WARNING << "unknown suffix = " << suffix;
|
|
response->setContentType(contentType);
|
|
}
|
|
}
|
|
else {
|
|
response->setContentType(contentType);
|
|
}
|
|
|
|
return HANDLER_DONE;
|
|
}
|
|
|
|
|
|
|
|
void PathHandler::handleError (TriagensError const&) {
|
|
response = new HttpResponse(HttpResponse::SERVER_ERROR);
|
|
}
|
|
}
|
|
}
|