File Manager - BorneoXploit

Editing: Detection.php

<?php

declare(strict_types=1);
/**
 * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
 * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
 * SPDX-License-Identifier: AGPL-3.0-only
 */
namespace OC\Files\Type;

use OCP\Files\IMimeTypeDetector;
use OCP\IBinaryFinder;
use OCP\ITempManager;
use OCP\IURLGenerator;
use Psr\Log\LoggerInterface;

/**
 * Class Detection
 *
 * Mimetype detection
 *
 * @package OC\Files\Type
 */
class Detection implements IMimeTypeDetector {
	private const CUSTOM_MIMETYPEMAPPING = 'mimetypemapping.json';
	private const CUSTOM_MIMETYPEALIASES = 'mimetypealiases.json';
	private const CUSTOM_MIMETYPENAMES = 'mimetypenames.json';

/** @var array<list{string, string|null}> */
	protected array $mimeTypes = [];
	protected array $secureMimeTypes = [];

protected array $mimeTypeIcons = [];
	/** @var array<string,string> */
	protected array $mimeTypeAlias = [];
	/** @var array<string,string> */
	protected array $mimeTypesNames = [];

public function __construct(
		private IURLGenerator $urlGenerator,
		private LoggerInterface $logger,
		private string $customConfigDir,
		private string $defaultConfigDir,
	) {
	}

/**
	 * Add an extension -> MIME type mapping
	 *
	 * $mimeType is the assumed correct mime type
	 * The optional $secureMimeType is an alternative to send to send
	 * to avoid potential XSS.
	 *
	 * @param string $extension
	 * @param string $mimeType
	 * @param string|null $secureMimeType
	 */
	public function registerType(
		string $extension,
		string $mimeType,
		?string $secureMimeType = null): void {
		// Make sure the extension is a string
		// https://github.com/nextcloud/server/issues/42902
		$this->mimeTypes[$extension] = [$mimeType, $secureMimeType];
		$this->secureMimeTypes[$mimeType] = $secureMimeType ?? $mimeType;
	}

/**
	 * Add an array of extension -> MIME type mappings
	 *
	 * The mimeType value is in itself an array where the first index is
	 * the assumed correct mimeType and the second is either a secure alternative
	 * or null if the correct is considered secure.
	 *
	 * @param array $types
	 */
	public function registerTypeArray(array $types): void {
		// Register the types,
		foreach ($types as $extension => $mimeType) {
			$this->registerType((string)$extension, $mimeType[0], $mimeType[1] ?? null);
		}

// Update the alternative mimeTypes to avoid having to look them up each time.
		foreach ($this->mimeTypes as $extension => $mimeType) {
			if (str_starts_with((string)$extension, '_comment')) {
				continue;
			}

$this->secureMimeTypes[$mimeType[0]] = $mimeType[1] ?? $mimeType[0];
			if (isset($mimeType[1])) {
				$this->secureMimeTypes[$mimeType[1]] = $mimeType[1];
			}
		}
	}

private function loadCustomDefinitions(string $fileName, array $definitions): array {
		if (file_exists($this->customConfigDir . '/' . $fileName)) {
			$custom = json_decode(file_get_contents($this->customConfigDir . '/' . $fileName), true);
			if (json_last_error() === JSON_ERROR_NONE) {
				$definitions = array_replace($definitions, $custom);
			} else {
				$this->logger->warning('Failed to parse ' . $fileName . ': ' . json_last_error_msg());
			}
		}
		return $definitions;
	}

/**
	 * Add the MIME type aliases if they are not yet present
	 */
	private function loadAliases(): void {
		if (!empty($this->mimeTypeAlias)) {
			return;
		}

$this->mimeTypeAlias = json_decode(file_get_contents($this->defaultConfigDir . '/mimetypealiases.dist.json'), true);
		$this->mimeTypeAlias = $this->loadCustomDefinitions(self::CUSTOM_MIMETYPEALIASES, $this->mimeTypeAlias);
	}

/**
	 * @return array<string,string>
	 */
	public function getAllAliases(): array {
		$this->loadAliases();
		return $this->mimeTypeAlias;
	}

public function getOnlyDefaultAliases(): array {
		$this->loadMappings();
		$this->mimeTypeAlias = json_decode(file_get_contents($this->defaultConfigDir . '/mimetypealiases.dist.json'), true);
		return $this->mimeTypeAlias;
	}

/**
	 * Add MIME type mappings if they are not yet present
	 */
	private function loadMappings(): void {
		if (!empty($this->mimeTypes)) {
			return;
		}

$mimeTypeMapping = json_decode(file_get_contents($this->defaultConfigDir . '/mimetypemapping.dist.json'), true);
		$mimeTypeMapping = $this->loadCustomDefinitions(self::CUSTOM_MIMETYPEMAPPING, $mimeTypeMapping);

$this->registerTypeArray($mimeTypeMapping);
	}

/**
	 * @return array<list{string, string|null}>
	 */
	public function getAllMappings(): array {
		$this->loadMappings();
		return $this->mimeTypes;
	}

private function loadNamings(): void {
		if (!empty($this->mimeTypesNames)) {
			return;
		}

$mimeTypeMapping = json_decode(file_get_contents($this->defaultConfigDir . '/mimetypenames.dist.json'), true);
		$mimeTypeMapping = $this->loadCustomDefinitions(self::CUSTOM_MIMETYPENAMES, $mimeTypeMapping);

$this->mimeTypesNames = $mimeTypeMapping;
	}

/**
	 * @return array<string,string>
	 */
	public function getAllNamings(): array {
		$this->loadNamings();
		return $this->mimeTypesNames;
	}

/**
	 * detect MIME type only based on filename, content of file is not used
	 *
	 * @param string $path
	 * @return string
	 */
	public function detectPath($path): string {
		$this->loadMappings();

$fileName = basename($path);

// remove leading dot on hidden files with a file extension
		$fileName = ltrim($fileName, '.');

// note: leading dot doesn't qualify as extension
		if (strpos($fileName, '.') > 0) {
			// remove versioning extension: name.v1508946057 and transfer extension: name.ocTransferId2057600214.part
			$fileName = preg_replace('!((\.v\d+)|((\.ocTransferId\d+)?\.part))$!', '', $fileName);

//try to guess the type by the file extension
			$extension = strrchr($fileName, '.');
			if ($extension !== false) {
				$extension = strtolower($extension);
				$extension = substr($extension, 1); // remove leading .
				return $this->mimeTypes[$extension][0] ?? 'application/octet-stream';
			}
		}

return 'application/octet-stream';
	}

/**
	 * Detect MIME type only based on the content of file.
	 *
	 * @param string $path
	 * @return string
	 * @since 18.0.0
	 */
	public function detectContent(string $path): string {
		$this->loadMappings();

if (@is_dir($path)) {
			// directories are easy
			return 'httpd/unix-directory';
		}

if (class_exists(finfo::class)) {
			$finfo = new finfo(FILEINFO_MIME_TYPE);
			$mimeType = @$finfo->file($path);
			if ($mimeType) {
				$mimeType = $this->getSecureMimeType($mimeType);
				if ($mimeType !== 'application/octet-stream') {
					return $mimeType;
				}
			}
		}

if (str_starts_with($path, 'file://')) {
			// Is the file wrapped in a stream?
			return 'application/octet-stream';
		}

if (function_exists('mime_content_type')) {
			// use mime magic extension if available
			$mimeType = mime_content_type($path);
			if ($mimeType) {
				$mimeType = $this->getSecureMimeType($mimeType);
				if ($mimeType !== 'application/octet-stream') {
					return $mimeType;
				}
			}
		}

$binaryFinder = \OCP\Server::get(IBinaryFinder::class);
		$program = $binaryFinder->findBinaryPath('file');
		if ($program !== false) {
			// it looks like we have a 'file' command,
			// lets see if it does have mime support
			$path = escapeshellarg($path);
			$fp = popen("test -f $path && $program -b --mime-type $path", 'r');
			if ($fp !== false) {
				$mimeType = fgets($fp);
				pclose($fp);
				if ($mimeType) {
					//trim the newline
					$mimeType = trim($mimeType);
					$mimeType = $this->getSecureMimeType($mimeType);
					return $mimeType;
				}
			}
		}

return 'application/octet-stream';
	}

/**
	 * Detect MIME type based on both filename and content
	 *
	 * @param string $path
	 * @return string
	 */
	public function detect($path): string {
		$mimeType = $this->detectPath($path);

if ($mimeType !== 'application/octet-stream') {
			return $mimeType;
		}

return $this->detectContent($path);
	}

/**
	 * Detect MIME type based on the content of a string
	 *
	 * @param string $data
	 * @return string
	 */
	public function detectString($data): string {
		if (class_exists(finfo::class)) {
			$finfo = new finfo(FILEINFO_MIME_TYPE);
			$mimeType = $finfo->buffer($data);
			if ($mimeType) {
				return $mimeType;
			}
		}

$tmpFile = \OCP\Server::get(ITempManager::class)->getTemporaryFile();
		$fh = fopen($tmpFile, 'wb');
		fwrite($fh, $data, 8024);
		fclose($fh);
		$mimeType = $this->detect($tmpFile);
		unset($tmpFile);
		return $mimeType;
	}

/**
	 * Get a secure MIME type that won't expose potential XSS.
	 *
	 * @param string $mimeType
	 * @return string
	 */
	public function getSecureMimeType($mimeType): string {
		$this->loadMappings();

return $this->secureMimeTypes[$mimeType] ?? 'application/octet-stream';
	}

/**
	 * Get path to the icon of a file type
	 * @param string $mimeType the MIME type
	 * @return string the url
	 */
	public function mimeTypeIcon($mimeType): string {
		$this->loadAliases();

while (isset($this->mimeTypeAlias[$mimeType])) {
			$mimeType = $this->mimeTypeAlias[$mimeType];
		}
		if (isset($this->mimeTypeIcons[$mimeType])) {
			return $this->mimeTypeIcons[$mimeType];
		}

// Replace slash and backslash with a minus
		$icon = str_replace(['/', '\\'], '-', $mimeType);

// Is it a dir?
		if ($mimeType === 'dir') {
			$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/folder.svg');
			return $this->mimeTypeIcons[$mimeType];
		}
		if ($mimeType === 'dir-shared') {
			$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/folder-shared.svg');
			return $this->mimeTypeIcons[$mimeType];
		}
		if ($mimeType === 'dir-external') {
			$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/folder-external.svg');
			return $this->mimeTypeIcons[$mimeType];
		}

// Icon exists?
		try {
			$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/' . $icon . '.svg');
			return $this->mimeTypeIcons[$mimeType];
		} catch (\RuntimeException $e) {
			// Specified image not found
		}

// Try only the first part of the filetype
		if (strpos($icon, '-')) {
			$mimePart = substr($icon, 0, strpos($icon, '-'));
			try {
				$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/' . $mimePart . '.svg');
				return $this->mimeTypeIcons[$mimeType];
			} catch (\RuntimeException $e) {
				// Image for the first part of the MIME type not found
			}
		}

$this->mimeTypeIcons[$mimeType] = $this->urlGenerator->imagePath('core', 'filetypes/file.svg');
		return $this->mimeTypeIcons[$mimeType];
	}
}

Cancel