MimeTypeValidator.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
namespace ‪TYPO3\CMS\Form\Mvc\Validation;
 
use ‪TYPO3\CMS\Core\Resource\File;
use ‪TYPO3\CMS\Core\Resource\MimeTypeDetector;
use ‪TYPO3\CMS\Extbase\Domain\Model\FileReference;
use ‪TYPO3\CMS\Extbase\Validation\Validator\AbstractValidator;
use ‪TYPO3\CMS\Form\Mvc\Property\TypeConverter\PseudoFile;
use ‪TYPO3\CMS\Form\Mvc\Validation\Exception\InvalidValidationOptionsException;
 
final class ‪MimeTypeValidator extends ‪AbstractValidator
{
    protected ‪$supportedOptions = [
        'allowedMimeTypes' => [null, 'Allowed mime types (using */* IANA media types)', 'array', true],
    ];
 
    public function ‪isValid(mixed $resource): void
    {
        $this->‪validateOptions();
 
        if ($resource instanceof ‪FileReference) {
            $mimeType = $resource->getOriginalResource()->getMimeType();
            $fileExtension = $resource->getOriginalResource()->getExtension();
        } elseif ($resource instanceof ‪File) {
            $mimeType = $resource->getMimeType();
            $fileExtension = $resource->getExtension();
        } elseif ($resource instanceof ‪PseudoFile) {
            $mimeType = $resource->getMimeType();
            $fileExtension = $resource->getExtension();
        } else {
            $this->‪addError(
                $this->‪translateErrorMessage(
                    'validation.error.1471708997',
                    'form'
                ),
                1471708997
            );
            return;
        }
 
        $allowedMimeTypes = $this->options['allowedMimeTypes'];
        if (!in_array($mimeType, $allowedMimeTypes, true)) {
            $this->‪addError(
                $this->‪translateErrorMessage(
                    'validation.error.1471708998',
                    'form',
                    [$mimeType]
                ),
                1471708998,
                [$mimeType]
            );
        } else {
            // The mime-type which was detected by FAL matches, but the file name does not match.
            // Example: myfile.txt is actually a PDF file (defined by mime-type), but .txt is not associated
            // for application/pdf, so this is not valid. The file extension of the uploaded file must match
            // the mime-type for this file.
            $assumedMimesTypeOfFileExtension = (new ‪MimeTypeDetector())->getMimeTypesForFileExtension($fileExtension);
            if (empty(array_intersect($allowedMimeTypes, $assumedMimesTypeOfFileExtension))) {
                $this->‪addError(
                    $this->‪translateErrorMessage(
                        'validation.error.1613126216',
                        'form',
                        [$fileExtension]
                    ),
                    1613126216,
                    [$fileExtension]
                );
            }
        }
    }
 
    protected function ‪validateOptions(): void
    {
        if (!is_array($this->options['allowedMimeTypes'] ?? false) || $this->options['allowedMimeTypes'] === []) {
            throw new ‪InvalidValidationOptionsException('The option "allowedMimeTypes" must be an array with at least one item.', 1471713296);
        }
    }
}