41 lines
1.1 KiB
PHP
41 lines
1.1 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
namespace OCA\DAV\CardDAV\Validation;
|
|
|
|
use OCA\DAV\AppInfo\Application;
|
|
use OCP\IConfig;
|
|
use Sabre\DAV\Exception\Forbidden;
|
|
use Sabre\DAV\Server;
|
|
use Sabre\DAV\ServerPlugin;
|
|
use Sabre\HTTP\RequestInterface;
|
|
use Sabre\HTTP\ResponseInterface;
|
|
|
|
class CardDavValidatePlugin extends ServerPlugin {
|
|
|
|
public function __construct(
|
|
private IConfig $config
|
|
) {
|
|
}
|
|
|
|
public function initialize(Server $server): void {
|
|
$server->on('beforeMethod:PUT', [$this, 'beforePut']);
|
|
}
|
|
|
|
public function beforePut(RequestInterface $request, ResponseInterface $response): bool {
|
|
// evaluate if card size exceeds defined limit
|
|
$cardSizeLimit = (int) $this->config->getAppValue(Application::APP_ID, 'card_size_limit', '5242880');
|
|
if ((int) $request->getRawServerValue('CONTENT_LENGTH') > $cardSizeLimit) {
|
|
throw new Forbidden("VCard object exceeds $cardSizeLimit bytes");
|
|
}
|
|
// all tests passed return true
|
|
return true;
|
|
}
|
|
|
|
}
|