mirror of
https://github.com/zulip/zulip.git
synced 2025-11-03 21:43:21 +00:00
365fe0b3d5
Fixes #2665. Regenerated by tabbott with `lint --fix` after a rebase and change in parameters. Note from tabbott: In a few cases, this converts technical debt in the form of unsorted imports into different technical debt in the form of our largest files having very long, ugly import sequences at the start. I expect this change will increase pressure for us to split those files, which isn't a bad thing. Signed-off-by: Anders Kaseorg <anders@zulip.com>
40 lines
1.5 KiB
Python
40 lines
1.5 KiB
Python
# See https://zulip.readthedocs.io/en/latest/subsystems/thumbnailing.html
|
|
from typing import Optional
|
|
|
|
from django.http import HttpRequest, HttpResponse, HttpResponseForbidden
|
|
from django.shortcuts import redirect
|
|
from django.utils.translation import ugettext as _
|
|
|
|
from zerver.lib.request import REQ, has_request_variables
|
|
from zerver.lib.thumbnail import generate_thumbnail_url
|
|
from zerver.models import UserProfile, validate_attachment_request
|
|
|
|
|
|
def validate_thumbnail_request(user_profile: UserProfile, path: str) -> Optional[bool]:
|
|
# path here does not have a leading / as it is parsed from request hitting the
|
|
# thumbnail endpoint (defined in urls.py) that way.
|
|
if path.startswith('user_uploads/'):
|
|
path_id = path[len('user_uploads/'):]
|
|
return validate_attachment_request(user_profile, path_id)
|
|
|
|
# This is an external link and we don't enforce restricted view policy here.
|
|
return True
|
|
|
|
@has_request_variables
|
|
def backend_serve_thumbnail(request: HttpRequest, user_profile: UserProfile,
|
|
url: str=REQ(), size_requested: str=REQ("size")) -> HttpResponse:
|
|
if not validate_thumbnail_request(user_profile, url):
|
|
return HttpResponseForbidden(_("<p>You are not authorized to view this file.</p>"))
|
|
|
|
size = None
|
|
if size_requested == 'thumbnail':
|
|
size = '0x300'
|
|
elif size_requested == 'full':
|
|
size = '0x0'
|
|
|
|
if size is None:
|
|
return HttpResponseForbidden(_("<p>Invalid size.</p>"))
|
|
|
|
thumbnail_url = generate_thumbnail_url(url, size)
|
|
return redirect(thumbnail_url)
|