Contents

# encoding: utf-8

require_dependency "rails_imager/application_controller"

class RailsImager::ImagesController < ApplicationController
  def show
    rimger = RailsImager::ImageHandler.new
    image_params = params[:image] || {}
    
    # Check for invalid parameters.
    image_params.each do |key, val|
      raise ArgumentError, "Invalid parameter: '#{key}'." unless RailsImager::ImageHandler::PARAMS_ARGS.map{ |param| param.to_s }.include?(key)
    end
    
    image_id = params[:id].to_s.gsub("%C3%B8", "ø")
    
    image_path = "#{Rails.public_path}/#{image_id}"
    image_path = File.realpath(image_path)
    validate_path(image_path)
    
    rimger.handle(
      :controller => self,
      :fpath => image_path,
      :params => image_params
    )
  end
  
private
  
  def validate_path(image_path)
    raise "No such file: '#{image_path}'." unless File.exists?(image_path)
    raise "Image wasn't in the public folder: '#{image_path}'." unless image_path.start_with?(Rails.public_path.to_s)
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
rails_imager-0.0.16	app/controllers/rails_imager/images_controller.rb