mirror of
https://github.com/imgproxy/imgproxy.git
synced 2025-10-11 04:32:29 +02:00
Fix non-UTF8 SVG detection
This commit is contained in:
@@ -11,6 +11,7 @@
|
|||||||
### Fix
|
### Fix
|
||||||
- Fix `dpr` option.
|
- Fix `dpr` option.
|
||||||
- Fix non-strict SVG detection.
|
- Fix non-strict SVG detection.
|
||||||
|
- Fix non-UTF8 SVG detection.
|
||||||
- Fix checking of connections in queue.
|
- Fix checking of connections in queue.
|
||||||
|
|
||||||
## [2.15.0] - 2020-09-03
|
## [2.15.0] - 2020-09-03
|
||||||
|
1
go.mod
1
go.mod
@@ -26,6 +26,7 @@ require (
|
|||||||
golang.org/x/image v0.0.0-20200609002522-3f4726a040e8
|
golang.org/x/image v0.0.0-20200609002522-3f4726a040e8
|
||||||
golang.org/x/net v0.0.0-20200707034311-ab3426394381
|
golang.org/x/net v0.0.0-20200707034311-ab3426394381
|
||||||
golang.org/x/sys v0.0.0-20200803210538-64077c9b5642
|
golang.org/x/sys v0.0.0-20200803210538-64077c9b5642
|
||||||
|
golang.org/x/text v0.3.3
|
||||||
google.golang.org/api v0.30.0
|
google.golang.org/api v0.30.0
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@@ -3,8 +3,13 @@ package imagemeta
|
|||||||
import (
|
import (
|
||||||
"bytes"
|
"bytes"
|
||||||
"encoding/xml"
|
"encoding/xml"
|
||||||
|
"fmt"
|
||||||
"io"
|
"io"
|
||||||
|
"log"
|
||||||
|
"strings"
|
||||||
"sync/atomic"
|
"sync/atomic"
|
||||||
|
|
||||||
|
"golang.org/x/text/encoding/charmap"
|
||||||
)
|
)
|
||||||
|
|
||||||
var maxSvgBytes int64 = 32 * 1024
|
var maxSvgBytes int64 = 32 * 1024
|
||||||
@@ -13,6 +18,13 @@ type svgHeader struct {
|
|||||||
XMLName xml.Name
|
XMLName xml.Name
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func xmlCharsetReader(charset string, input io.Reader) (io.Reader, error) {
|
||||||
|
if strings.EqualFold(charset, "iso-8859-1") {
|
||||||
|
return charmap.ISO8859_1.NewDecoder().Reader(input), nil
|
||||||
|
}
|
||||||
|
return nil, fmt.Errorf("Unknown SVG charset: %s", charset)
|
||||||
|
}
|
||||||
|
|
||||||
func SetMaxSvgCheckRead(n int) {
|
func SetMaxSvgCheckRead(n int) {
|
||||||
atomic.StoreInt64(&maxSvgBytes, int64(n))
|
atomic.StoreInt64(&maxSvgBytes, int64(n))
|
||||||
}
|
}
|
||||||
@@ -41,8 +53,11 @@ func IsSVG(r io.Reader) (bool, error) {
|
|||||||
|
|
||||||
dec := xml.NewDecoder(rr)
|
dec := xml.NewDecoder(rr)
|
||||||
dec.Strict = false
|
dec.Strict = false
|
||||||
if dec.Decode(&h); h.XMLName.Local == "svg" {
|
dec.CharsetReader = xmlCharsetReader
|
||||||
|
if err := dec.Decode(&h); h.XMLName.Local == "svg" {
|
||||||
return true, nil
|
return true, nil
|
||||||
|
} else {
|
||||||
|
log.Printf("SVG err: %s", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
if len(buf) >= maxBytes {
|
if len(buf) >= maxBytes {
|
||||||
|
Reference in New Issue
Block a user