# frozen_string_literal: true

module Decidim
  # This class deals with uploading attachments to a participatory space.
  class AttachmentUploader < ApplicationUploader
    include CarrierWave::MiniMagick

    process :set_content_type_and_size_in_model
    process :validate_dimensions

    version :thumbnail, if: :image? do
      process resize_to_fit: [nil, 237]
    end

    version :big, if: :image? do
      process resize_to_limit: [nil, 1000]
    end

    protected

    # CarrierWave automatically calls this method and validates the content
    # type fo the temp file to match against any of these options.
    def content_type_whitelist
      [
        %r{image\/},
        %r{application\/vnd.oasis.opendocument},
        %r{application\/vnd.ms-},
        %r{application\/msword},
        %r{application\/vnd.ms-word},
        %r{application\/vnd.openxmlformats-officedocument},
        %r{application\/vnd.oasis.opendocument},
        %r{application\/pdf},
        %r{application\/rtf}
      ]
    end

    # Checks if the file is an image based on the content type. We need this so
    # we only create different versions of the file when it's an image.
    #
    # new_file - The uploaded file.
    #
    # Returns a Boolean.
    def image?(new_file)
      content_type = model.content_type || new_file.content_type
      content_type.to_s.start_with? "image"
    end

    # Copies the content type and file size to the model where this is mounted.
    #
    # Returns nothing.
    def set_content_type_and_size_in_model
      model.content_type = file.content_type if file.content_type
      model.file_size = file.size
    end

    # A simple check to avoid DoS with maliciously crafted images, or just to
    # avoid reckless users that upload gigapixels images.
    #
    # See https://hackerone.com/reports/390
    def validate_dimensions
      return unless image?(self)

      manipulate! do |image|
        raise CarrierWave::IntegrityError, I18n.t("carrierwave.errors.image_too_big") if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
        image
      end
    end

    def max_image_height_or_width
      8000
    end
  end
end