zydronium/neocities
1
0
Fork 0
mirror of https://github.com/neocities/neocities.git synced 2025-08-02 15:51:55 +02:00
Code Issues Projects Releases Packages Wiki Activity

Scan for embedded viruses/executables in uploaded files

Browse source
This commit is contained in:
Kyle Drake 2014-08-10 18:46:28 -07:00
parent e756724fe7
commit cc64a57172
4 changed files with 43 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

29
models/site.rb
View file

@ -60,6 +60,12 @@ class Site < Sequel::Model
SCREENSHOT_RESOLUTIONS = ['235x141', '105x63', '270x162', '37x37', '146x88', '302x182', '90x63', '82x62', '348x205']
THUMBNAIL_RESOLUTIONS = ['105x63', '90x63']
CLAMAV_THREAT_MATCHES = [
/^VBS/,
/^PUA.Win32/,
/^JS.Popupper/
]
BANNED_TIME = 2592000 # 30 days in seconds
TITLE_MAX = 100
@ -261,9 +267,26 @@ class Site < Sequel::Model
def self.valid_file_type?(uploaded_file)
mime_type = Magic.guess_file_mime_type uploaded_file[:tempfile].path
return true if (Site::VALID_MIME_TYPES.include?(mime_type) || mime_type =~ /text/) &&
Site::VALID_EXTENSIONS.include?(File.extname(uploaded_file[:filename]).sub(/^./, '').downcase)
false
return false unless (Site::VALID_MIME_TYPES.include?(mime_type) || mime_type =~ /text/) &&
Site::VALID_EXTENSIONS.include?(File.extname(uploaded_file[:filename]).sub(/^./, '').downcase)
File.chmod 0640, uploaded_file[:tempfile].path
line = Cocaine::CommandLine.new(
"clamdscan", "-i --remove=no --no-summary --stdout :path",
expected_outcodes: [0, 1]
)
output = line.run path: uploaded_file[:tempfile].path
return true if output == ''
threat = output.strip.match(/^.+: (.+) FOUND$/).captures.first
CLAMAV_THREAT_MATCHES.each do |threat_match|
return false if threat.match threat_match
end
true
end
def store_file(filename, uploaded)