Sha256: bb6fb9cb3b7ed4c520773b2d139a2a0a7c814fdd28ec6fa1194e9fe2eadc8388

Contents?: true

Size: 1.32 KB

Versions: 14

Compression:

Stored size: 1.32 KB

Contents

# frozen_string_literal: true

module Decidim
  # This class deals with uploading hero images to ParticipatoryProcesses.
  class ImageUploader < ApplicationUploader
    include CarrierWave::MiniMagick

    process :validate_size, :validate_dimensions
    process quality: Decidim.image_uploader_quality

    # CarrierWave automatically calls this method and validates the content
    # type fo the temp file to match against any of these options.
    def content_type_whitelist
      [
        %r{image\/}
      ]
    end

    # A simple check to avoid DoS with maliciously crafted images, or just to
    # avoid reckless users that upload gigapixels images.
    #
    # See https://hackerone.com/reports/390
    def validate_dimensions
      manipulate! do |image|
        validation_error!(I18n.t("carrierwave.errors.image_too_big")) if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
        image
      end
    end

    def validate_size
      manipulate! do |image|
        validation_error!(I18n.t("carrierwave.errors.image_too_big")) if image.size > Decidim.maximum_attachment_size
        image
      end
    end

    def max_image_height_or_width
      3840
    end

    private

    def validation_error!(text)
      model.errors.add(mounted_as, text)
      raise CarrierWave::IntegrityError, text
    end
  end
end

Version data entries

14 entries across 14 versions & 1 rubygems

Version Path
decidim-core-0.18.1 app/uploaders/decidim/image_uploader.rb
decidim-core-0.17.2 app/uploaders/decidim/image_uploader.rb
decidim-core-0.18.0 app/uploaders/decidim/image_uploader.rb
decidim-core-0.17.1 app/uploaders/decidim/image_uploader.rb
decidim-core-0.16.1 app/uploaders/decidim/image_uploader.rb
decidim-core-0.17.0 app/uploaders/decidim/image_uploader.rb
decidim-core-0.16.0 app/uploaders/decidim/image_uploader.rb
decidim-core-0.15.2 app/uploaders/decidim/image_uploader.rb
decidim-core-0.15.1 app/uploaders/decidim/image_uploader.rb
decidim-core-0.15.0 app/uploaders/decidim/image_uploader.rb
decidim-core-0.14.4 app/uploaders/decidim/image_uploader.rb
decidim-core-0.14.3 app/uploaders/decidim/image_uploader.rb
decidim-core-0.14.2 app/uploaders/decidim/image_uploader.rb
decidim-core-0.14.1 app/uploaders/decidim/image_uploader.rb