Goodbye Iframe transport !

Not needed any more in IE >= 11 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
author: Vincent Petry <pvince81@owncloud.com> 2016-07-15 13:19:16 +0200
committer: Roeland Jago Douma <roeland@famdouma.nl> 2016-10-24 21:45:00 +0200
commit: c68e273664ec25ef54ba6ec25d88366be4a92d6f (patch)
tree: c8c3a64dd53752410ddffdd1cda6ca7c02454803 /apps/dav/lib/Connector
parent: 25d9dce067dcc068ceb554033b3ed164b8645555 (diff)
download: nextcloud-server-c68e273664ec25ef54ba6ec25d88366be4a92d6f.tar.gz
nextcloud-server-c68e273664ec25ef54ba6ec25d88366be4a92d6f.zip
2 files changed, 0 insertions, 189 deletions
diff --git a/apps/dav/lib/Connector/Sabre/IFrameTransportPlugin.php b/apps/dav/lib/Connector/Sabre/IFrameTransportPlugin.php
deleted file mode 100644
index af6e5a62a5e..00000000000
--- a/apps/dav/lib/Connector/Sabre/IFrameTransportPlugin.php
+++ /dev/null
@@ -1,188 +0,0 @@
-<?php
-/**
- * @author Vincent Petry <pvince81@owncloud.com>
- *
- * @copyright Copyright (c) 2015, ownCloud, Inc.
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program.  If not, see <http://www.gnu.org/licenses/>
- *
- */
-
-namespace OCA\DAV\Connector\Sabre;
-
-use Sabre\DAV\IFile;
-use Sabre\HTTP\RequestInterface;
-use Sabre\HTTP\ResponseInterface;
-use Sabre\DAV\Exception\BadRequest;
-
-/**
- * Plugin to receive Webdav PUT through POST,
- * mostly used as a workaround for browsers that
- * do not support PUT upload.
- */
-class IFrameTransportPlugin extends \Sabre\DAV\ServerPlugin {
-
-	/**
-	 * @var \Sabre\DAV\Server $server
-	 */
-	private $server;
-
-	/**
-	 * This initializes the plugin.
-	 *
-	 * @param \Sabre\DAV\Server $server
-	 * @return void
-	 */
-	public function initialize(\Sabre\DAV\Server $server) {
-		$this->server = $server;
-		$this->server->on('method:POST', [$this, 'handlePost']);
-	}
-
-	/**
-	 * POST operation
-	 *
-	 * @param RequestInterface $request request object
-	 * @param ResponseInterface $response response object
-	 * @return null|false
-	 */
-	public function handlePost(RequestInterface $request, ResponseInterface $response) {
-		try {
-			return $this->processUpload($request, $response);
-		} catch (\Sabre\DAV\Exception $e) {
-			$response->setStatus($e->getHTTPCode());
-			$response->setBody(['message' => $e->getMessage()]);
-			$this->convertResponse($response);
-			return false;
-		}
-	}
-
-	/**
-	 * Wrap and send response in JSON format
-	 *
-	 * @param ResponseInterface $response response object
-	 */
-	private function convertResponse(ResponseInterface $response) {
-		if (is_resource($response->getBody())) {
-			throw new BadRequest('Cannot request binary data with iframe transport');
-		}
-
-		$responseData = json_encode([
-			'status' => $response->getStatus(),
-			'headers' => $response->getHeaders(),
-			'data' => $response->getBody(),
-		]);
-
-		// IE needs this content type
-		$response->setHeader('Content-Type', 'text/plain');
-		$response->setHeader('Content-Length', strlen($responseData));
-		$response->setStatus(200);
-		$response->setBody($responseData);
-	}
-
-	/**
-	 * Process upload
-	 *
-	 * @param RequestInterface $request request object
-	 * @param ResponseInterface $response response object
-	 * @return null|false
-	 */
-	private function processUpload(RequestInterface $request, ResponseInterface $response) {
-		$queryParams = $request->getQueryParameters();
-
-		if (!isset($queryParams['_method'])) {
-			return null;
-		}
-
-		$method = $queryParams['_method'];
-		if ($method !== 'PUT' && $method !== 'POST') {
-			return null;
-		}
-
-		$contentType = $request->getHeader('Content-Type');
-		list($contentType) = explode(';', $contentType);
-		if ($contentType !== 'application/x-www-form-urlencoded'
-			&& $contentType !== 'multipart/form-data'
-		) {
-			return null;
-		}
-
-		if (!isset($_FILES['files'])) {
-			return null;
-		}
-
-		// TODO: move this to another plugin ?
-		if (!\OC::$CLI && !\OC::$server->getRequest()->passesCSRFCheck()) {
-			throw new BadRequest('Invalid CSRF token');
-		}
-
-		if ($_FILES) {
-			$file = current($_FILES);
-		} else {
-			return null;
-		}
-
-		if ($file['error'][0] !== 0) {
-			throw new BadRequest('Error during upload, code ' . $file['error'][0]);
-		}
-
-		if (!\OC::$CLI && !is_uploaded_file($file['tmp_name'][0])) {
-			return null;
-		}
-
-		if (count($file['tmp_name']) > 1) {
-			throw new BadRequest('Only a single file can be uploaded');
-		}
-
-		$postData = $request->getPostData();
-		if (isset($postData['headers'])) {
-			$headers = json_decode($postData['headers'], true);
-
-			// copy safe headers into the request
-			$allowedHeaders = [
-				'If',
-				'If-Match',
-				'If-None-Match',
-				'If-Modified-Since',
-				'If-Unmodified-Since',
-				'Authorization',
-			];
-
-			foreach ($allowedHeaders as $allowedHeader) {
-				if (isset($headers[$allowedHeader])) {
-					$request->setHeader($allowedHeader, $headers[$allowedHeader]);
-				}
-			}
-		}
-
-		// MEGAHACK, because the Sabre File impl reads this property directly
-		$_SERVER['CONTENT_LENGTH'] = $file['size'][0];
-		$request->setHeader('Content-Length', $file['size'][0]);
-
-		$tmpFile = $file['tmp_name'][0];
-		$resource = fopen($tmpFile, 'r');
-
-		$request->setBody($resource);
-		$request->setMethod($method);
-
-		$this->server->invokeMethod($request, $response, false);
-
-		fclose($resource);
-		unlink($tmpFile);
-
-		$this->convertResponse($response);
-
-		return false;
-	}
-
-}
diff --git a/apps/dav/lib/Connector/Sabre/ServerFactory.php b/apps/dav/lib/Connector/Sabre/ServerFactory.php
index da541abc199..6d9f9b1bc8b 100644
--- a/apps/dav/lib/Connector/Sabre/ServerFactory.php
+++ b/apps/dav/lib/Connector/Sabre/ServerFactory.php
@@ -114,7 +114,6 @@ class ServerFactory {
 		// FIXME: The following line is a workaround for legacy components relying on being able to send a GET to /
 		$server->addPlugin(new \OCA\DAV\Connector\Sabre\DummyGetResponsePlugin());
 		$server->addPlugin(new \OCA\DAV\Connector\Sabre\ExceptionLoggerPlugin('webdav', $this->logger));
-		$server->addPlugin(new \OCA\DAV\Connector\Sabre\IFrameTransportPlugin());
 		$server->addPlugin(new \OCA\DAV\Connector\Sabre\LockPlugin());
 		// Some WebDAV clients do require Class 2 WebDAV support (locking), since
 		// we do not provide locking we emulate it using a fake locking plugin.
author	Vincent Petry <pvince81@owncloud.com>	2016-07-15 13:19:16 +0200
committer	Roeland Jago Douma <roeland@famdouma.nl>	2016-10-24 21:45:00 +0200
commit	c68e273664ec25ef54ba6ec25d88366be4a92d6f (patch)
tree	c8c3a64dd53752410ddffdd1cda6ca7c02454803 /apps/dav/lib/Connector
parent	25d9dce067dcc068ceb554033b3ed164b8645555 (diff)
download	nextcloud-server-c68e273664ec25ef54ba6ec25d88366be4a92d6f.tar.gz nextcloud-server-c68e273664ec25ef54ba6ec25d88366be4a92d6f.zip