RemoteImageStyleDownloadController.php in Remote Stream Wrapper 8

Namespace

Drupal\remote_stream_wrapper\Controller

File

src/Controller/RemoteImageStyleDownloadController.php

<?php

namespace Drupal\remote_stream_wrapper\Controller;

use Drupal\image\Controller\ImageStyleDownloadController;
use Drupal\image\ImageStyleInterface;
use Symfony\Component\DependencyInjection\ContainerInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;

/**
 * Defines a controller to serve image styles.
 */
class RemoteImageStyleDownloadController extends ImageStyleDownloadController {

  /**
   * The entity type manager.
   *
   * @var \Drupal\Core\Entity\EntityStorageInterface
   */
  protected $fileStorage;

  /**
   * {@inheritdoc}
   */
  public static function create(ContainerInterface $container) {
    $instance = parent::create($container);
    $instance->fileStorage = $container
      ->get('entity_type.manager')
      ->getStorage('file');
    return $instance;
  }

  /**
   * {@inheritdoc}
   */
  public function deliver(Request $request, $scheme, ImageStyleInterface $image_style) {

    // Only allow the remote files that exist in {file_managed} to have image
    // style derivatives generated. Otherwise this could open up the site to
    // allowing any remote file to be processed.
    $target = $request->query
      ->get('file');
    $image_uri = $scheme . '://' . $target;
    if (!$this->fileStorage
      ->loadByProperties([
      'uri' => $image_uri,
    ])) {
      throw new AccessDeniedHttpException();
    }
    return parent::deliver($request, $scheme, $image_style);
  }

}

Classes

Name	Description
RemoteImageStyleDownloadController	Defines a controller to serve image styles.