| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556 | 
							- import urllib.parse
 - 
 - from flask import request
 - from flask_restful import marshal_with, reqparse
 - 
 - import services
 - from controllers.web import api
 - from controllers.web.error import FileTooLargeError, NoFileUploadedError, TooManyFilesError, UnsupportedFileTypeError
 - from controllers.web.wraps import WebApiResource
 - from core.helper import ssrf_proxy
 - from fields.file_fields import file_fields, remote_file_info_fields
 - from services.file_service import FileService
 - 
 - 
 - class FileApi(WebApiResource):
 -     @marshal_with(file_fields)
 -     def post(self, app_model, end_user):
 -         # get file from request
 -         file = request.files["file"]
 - 
 -         parser = reqparse.RequestParser()
 -         parser.add_argument("source", type=str, required=False, location="args")
 -         source = parser.parse_args().get("source")
 - 
 -         # check file
 -         if "file" not in request.files:
 -             raise NoFileUploadedError()
 - 
 -         if len(request.files) > 1:
 -             raise TooManyFilesError()
 -         try:
 -             upload_file = FileService.upload_file(file=file, user=end_user, source=source)
 -         except services.errors.file.FileTooLargeError as file_too_large_error:
 -             raise FileTooLargeError(file_too_large_error.description)
 -         except services.errors.file.UnsupportedFileTypeError:
 -             raise UnsupportedFileTypeError()
 - 
 -         return upload_file, 201
 - 
 - 
 - class RemoteFileInfoApi(WebApiResource):
 -     @marshal_with(remote_file_info_fields)
 -     def get(self, url):
 -         decoded_url = urllib.parse.unquote(url)
 -         try:
 -             response = ssrf_proxy.head(decoded_url)
 -             return {
 -                 "file_type": response.headers.get("Content-Type", "application/octet-stream"),
 -                 "file_length": int(response.headers.get("Content-Length", -1)),
 -             }
 -         except Exception as e:
 -             return {"error": str(e)}, 400
 - 
 - 
 - api.add_resource(FileApi, "/files/upload")
 - api.add_resource(RemoteFileInfoApi, "/remote-files/<path:url>")
 
 
  |