Merge pull request #186 from waifuvault/add-restriction

Add client side restrictions to uploader
waifuvault · Sep 12, 2024 · 895f8d0 · 895f8d0
2 parents e269ada + 9267702
commit 895f8d0
Showing 1 changed file with 37 additions and 2 deletions.
diff --git a/src/public/secure/files.ejs b/src/public/secure/files.ejs
@@ -219,14 +219,14 @@
 
         const bucketId = <%- loginType === "bucket" ? `"${bucket.bucketToken}";` : "null;"; -%>
 
+
             function loadDt() {
                 const detailsModal = new bootstrap.Modal(document.getElementById("fileDetailsModel"), { keyboard: false });
 
                 const uploadModal = new bootstrap.Modal(document.getElementById("fileUploadModel"), { keyboard: false });
                 const progressWrapper = document.getElementById("progressWrapper");
                 const progressbar = document.getElementById("uploadProgress");
 
-
                 document.querySelector('.btn-file-upload').addEventListener('click', () => {
                     const file = document.getElementById('uploadFile').files[0];
                     const url = document.getElementById('url').value;
@@ -266,14 +266,29 @@
                     progressWrapper.setAttribute("aria-valuenow", "0");
                 }
 
-                function uploadFile(file, url, bucket, expires, password, hideFilename, oneTimeDownload) {
+                async function uploadFile(file, url, bucket, expires, password, hideFilename, oneTimeDownload) {
+                    const restrictions = await getRestrictions();
+                    const max_upload_size = restrictions ? restrictions.filter(x => x.type === "MAX_FILE_SIZE")[0].value : null;
+                    const banned_mime_type = restrictions ? restrictions.filter(x => x.type === "BANNED_MIME_TYPE")[0].value : null;
                     const uploadButton = document.querySelector('.btn-file-upload');
                     uploadButton.disabled = true;
                     let params = `hide_filename=${hideFilename}&one_time_download=${oneTimeDownload}`;
                     if (expires) {
                         params += `&expires=${expires}`;
                     }
 
+                    if (file && max_upload_size && file.size > max_upload_size) {
+                        Site.showError(`File is too large (server limit is ${sizeAsMB()(max_upload_size,"display","")})`);
+                        uploadButton.disabled = false;
+                        return;
+                    }
+
+                    if (file && banned_mime_type && banned_mime_type.indexOf(file.type) !== -1) {
+                        Site.showError(`File is a banned type (server bans ${banned_mime_type})`);
+                        uploadButton.disabled = false;
+                        return;
+                    }
+
                     const formData = new FormData();
                     if (url) {
                         formData.append('url', url)
@@ -515,6 +530,26 @@
                     }
                 }
 
+                async function getRestrictions() {
+                    Site.loading(true);
+                    let response;
+                    try {
+                        response = await fetch(`${baseUrl}/resources/restrictions`);
+                    } catch(e) {
+                        alert(e.message);
+                        return null;
+                    } finally {
+                        Site.loading(false);
+                    }
+                    const responseStatus = response.status;
+                    const responseJson = await response.json();
+                    if (responseStatus !== 200) {
+                        Site.showError(responseJson.message);
+                        throw new Error(responseJson.message);
+                    }
+                    return responseJson;
+                }
+
                 function getButtons(type) {
                     const buttons = [];
                     if (type === "entries") {