emoji.go 2.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192
  1. package admin
  2. import (
  3. "encoding/json"
  4. "fmt"
  5. "net/http"
  6. "os"
  7. "path/filepath"
  8. "github.com/owncast/owncast/config"
  9. "github.com/owncast/owncast/controllers"
  10. "github.com/owncast/owncast/utils"
  11. )
  12. // UploadCustomEmoji allows POSTing a new custom emoji to the server.
  13. func UploadCustomEmoji(w http.ResponseWriter, r *http.Request) {
  14. if !requirePOST(w, r) {
  15. return
  16. }
  17. type postEmoji struct {
  18. Name string `json:"name"`
  19. Data string `json:"data"`
  20. }
  21. emoji := new(postEmoji)
  22. if err := json.NewDecoder(r.Body).Decode(emoji); err != nil {
  23. controllers.WriteSimpleResponse(w, false, err.Error())
  24. return
  25. }
  26. bytes, _, err := utils.DecodeBase64Image(emoji.Data)
  27. if err != nil {
  28. controllers.WriteSimpleResponse(w, false, err.Error())
  29. return
  30. }
  31. // Prevent path traversal attacks
  32. emojiFileName := filepath.Base(emoji.Name)
  33. targetPath := filepath.Join(config.CustomEmojiPath, emojiFileName)
  34. err = os.MkdirAll(config.CustomEmojiPath, 0o700)
  35. if err != nil {
  36. controllers.WriteSimpleResponse(w, false, err.Error())
  37. return
  38. }
  39. if utils.DoesFileExists(targetPath) {
  40. controllers.WriteSimpleResponse(w, false, fmt.Sprintf("An emoji with the name %q already exists", emojiFileName))
  41. return
  42. }
  43. if err = os.WriteFile(targetPath, bytes, 0o600); err != nil {
  44. controllers.WriteSimpleResponse(w, false, err.Error())
  45. return
  46. }
  47. controllers.WriteSimpleResponse(w, true, fmt.Sprintf("Emoji %q has been uploaded", emojiFileName))
  48. }
  49. // DeleteCustomEmoji deletes a custom emoji.
  50. func DeleteCustomEmoji(w http.ResponseWriter, r *http.Request) {
  51. if !requirePOST(w, r) {
  52. return
  53. }
  54. type deleteEmoji struct {
  55. Name string `json:"name"`
  56. }
  57. emoji := new(deleteEmoji)
  58. if err := json.NewDecoder(r.Body).Decode(emoji); err != nil {
  59. controllers.WriteSimpleResponse(w, false, err.Error())
  60. return
  61. }
  62. // var emojiFileName = filepath.Base(emoji.Name)
  63. targetPath := filepath.Join(config.CustomEmojiPath, emoji.Name)
  64. if err := os.Remove(targetPath); err != nil {
  65. if os.IsNotExist(err) {
  66. controllers.WriteSimpleResponse(w, false, fmt.Sprintf("Emoji %q doesn't exist", emoji.Name))
  67. } else {
  68. controllers.WriteSimpleResponse(w, false, err.Error())
  69. }
  70. return
  71. }
  72. controllers.WriteSimpleResponse(w, true, fmt.Sprintf("Emoji %q has been deleted", emoji.Name))
  73. }