diff options
author | Côme Chilliet <come.chilliet@nextcloud.com> | 2024-05-16 17:25:13 +0200 |
---|---|---|
committer | Côme Chilliet <come.chilliet@nextcloud.com> | 2024-05-16 17:28:54 +0200 |
commit | a9f71315757a4c48f84cf5928022fa2fa105fad9 (patch) | |
tree | b498f8535a0062eb1d6bbc7b9b1fa1bf6acec68f /lib/private/legacy | |
parent | 0e4aa4704404da056d5cd095a95f9bf57844c646 (diff) | |
download | nextcloud-server-a9f71315757a4c48f84cf5928022fa2fa105fad9.tar.gz nextcloud-server-a9f71315757a4c48f84cf5928022fa2fa105fad9.zip |
fix: Move OC_EventSource to OC namespace
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Diffstat (limited to 'lib/private/legacy')
-rw-r--r-- | lib/private/legacy/OC_EventSource.php | 134 |
1 files changed, 0 insertions, 134 deletions
diff --git a/lib/private/legacy/OC_EventSource.php b/lib/private/legacy/OC_EventSource.php deleted file mode 100644 index 49fde4a214f..00000000000 --- a/lib/private/legacy/OC_EventSource.php +++ /dev/null @@ -1,134 +0,0 @@ -<?php - -use OCP\IRequest; - -/** - * @copyright Copyright (c) 2016, ownCloud, Inc. - * - * @author Bart Visscher <bartv@thisnet.nl> - * @author Christian Oliff <christianoliff@yahoo.com> - * @author Christoph Wurst <christoph@winzerhof-wurst.at> - * @author Felix Moeller <mail@felixmoeller.de> - * @author Lukas Reschke <lukas@statuscode.ch> - * @author Morris Jobke <hey@morrisjobke.de> - * @author Robin Appelman <robin@icewind.nl> - * @author Thomas Müller <thomas.mueller@tmit.eu> - * - * @license AGPL-3.0 - * - * This code is free software: you can redistribute it and/or modify - * it under the terms of the GNU Affero General Public License, version 3, - * as published by the Free Software Foundation. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU Affero General Public License for more details. - * - * You should have received a copy of the GNU Affero General Public License, version 3, - * along with this program. If not, see <http://www.gnu.org/licenses/> - * - */ -class OC_EventSource implements \OCP\IEventSource { - /** - * @var bool - */ - private $fallback; - - /** - * @var int - */ - private $fallBackId = 0; - - /** - * @var bool - */ - private $started = false; - - private IRequest $request; - - public function __construct(IRequest $request) { - $this->request = $request; - } - - protected function init() { - if ($this->started) { - return; - } - $this->started = true; - - // prevent php output buffering, caching and nginx buffering - OC_Util::obEnd(); - header('Cache-Control: no-cache'); - header('X-Accel-Buffering: no'); - $this->fallback = isset($_GET['fallback']) and $_GET['fallback'] == 'true'; - if ($this->fallback) { - $this->fallBackId = (int)$_GET['fallback_id']; - /** - * FIXME: The default content-security-policy of ownCloud forbids inline - * JavaScript for security reasons. IE starting on Windows 10 will - * however also obey the CSP which will break the event source fallback. - * - * As a workaround thus we set a custom policy which allows the execution - * of inline JavaScript. - * - * @link https://github.com/owncloud/core/issues/14286 - */ - header("Content-Security-Policy: default-src 'none'; script-src 'unsafe-inline'"); - header("Content-Type: text/html"); - echo str_repeat('<span></span>' . PHP_EOL, 10); //dummy data to keep IE happy - } else { - header("Content-Type: text/event-stream"); - } - if (!$this->request->passesStrictCookieCheck()) { - header('Location: '.\OC::$WEBROOT); - exit(); - } - if (!$this->request->passesCSRFCheck()) { - $this->send('error', 'Possible CSRF attack. Connection will be closed.'); - $this->close(); - exit(); - } - flush(); - } - - /** - * send a message to the client - * - * @param string $type - * @param mixed $data - * - * @throws \BadMethodCallException - * if only one parameter is given, a typeless message will be send with that parameter as data - * @suppress PhanDeprecatedFunction - */ - public function send($type, $data = null) { - if ($data and !preg_match('/^[A-Za-z0-9_]+$/', $type)) { - throw new BadMethodCallException('Type needs to be alphanumeric ('. $type .')'); - } - $this->init(); - if (is_null($data)) { - $data = $type; - $type = null; - } - if ($this->fallback) { - $response = '<script type="text/javascript">window.parent.OC.EventSource.fallBackCallBack(' - . $this->fallBackId . ',"' . ($type ?? '') . '",' . json_encode($data, JSON_HEX_TAG) . ')</script>' . PHP_EOL; - echo $response; - } else { - if ($type) { - echo 'event: ' . $type . PHP_EOL; - } - echo 'data: ' . json_encode($data, JSON_HEX_TAG) . PHP_EOL; - } - echo PHP_EOL; - flush(); - } - - /** - * close the connection of the event source - */ - public function close() { - $this->send('__internal__', 'close'); //server side closing can be an issue, let the client do it - } -} |