This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new 35a980b361 Improved: Replace commons-imaging with metadata-extractor +
TwelveMonkeys ImageIO TIFF plugin (OFBIZ-13507)
35a980b361 is described below
commit 35a980b361a5787b6262be69dc03c4c66d7400c4
Author: Mridul Pathak <[email protected]>
AuthorDate: Sun Aug 30 18:37:39 2026 +0530
Improved: Replace commons-imaging with metadata-extractor + TwelveMonkeys
ImageIO TIFF plugin (OFBIZ-13507)
Backported from trunk (#1819).
---
.../ofbiz/content/ContentManagementServices.java | 3 +-
.../apache/ofbiz/content/data/DataServices.java | 20 +---
.../org/apache/ofbiz/product/image/ScaleImage.java | 5 +-
.../ofbiz/product/imagemanagement/FrameImage.java | 3 +-
.../imagemanagement/ImageManagementServices.java | 5 +-
.../ofbiz/product/product/ProductServices.java | 5 +-
dependencies.gradle | 2 +-
.../ofbiz/base/util/HttpRequestFileUpload.java | 4 -
.../org/apache/ofbiz/security/SecuredUpload.java | 102 ++++++---------------
9 files changed, 42 insertions(+), 107 deletions(-)
diff --git
a/applications/content/src/main/java/org/apache/ofbiz/content/ContentManagementServices.java
b/applications/content/src/main/java/org/apache/ofbiz/content/ContentManagementServices.java
index 5e7c1c401d..3c2d9da6f3 100644
---
a/applications/content/src/main/java/org/apache/ofbiz/content/ContentManagementServices.java
+++
b/applications/content/src/main/java/org/apache/ofbiz/content/ContentManagementServices.java
@@ -33,7 +33,6 @@ import java.util.Locale;
import java.util.Map;
import java.util.Set;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.StringUtil;
import org.apache.ofbiz.base.util.UtilDateTime;
@@ -1592,7 +1591,7 @@ public class ContentManagementServices {
if
(!org.apache.ofbiz.security.SecuredUpload.isValidFile(objectInfo, "All",
delegator)) {
errorMessage =
UtilProperties.getMessage("SecurityUiLabels",
"SupportedFileFormatsIncludingSvg", locale);
}
- } catch (ImageReadException | IOException e) {
+ } catch (IOException e) {
errorMessage = UtilProperties.getMessage(RESOURCE,
"ContentUnableToOpenFileForWriting", UtilMisc.toMap("fileName",
objectInfo), locale);
}
diff --git
a/applications/content/src/main/java/org/apache/ofbiz/content/data/DataServices.java
b/applications/content/src/main/java/org/apache/ofbiz/content/data/DataServices.java
index e59c89fad5..5b22a67b43 100644
---
a/applications/content/src/main/java/org/apache/ofbiz/content/data/DataServices.java
+++
b/applications/content/src/main/java/org/apache/ofbiz/content/data/DataServices.java
@@ -37,7 +37,6 @@ import java.util.HashMap;
import java.util.Locale;
import java.util.Map;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.GeneralException;
import org.apache.ofbiz.base.util.UtilDateTime;
@@ -197,8 +196,7 @@ public class DataServices {
return createFileMethod(dctx, context);
}
- public static Map<String, Object> createFileNoPerm(DispatchContext dctx,
Map<String, ? extends Object> rcontext) throws IOException,
- ImageReadException {
+ public static Map<String, Object> createFileNoPerm(DispatchContext dctx,
Map<String, ? extends Object> rcontext) throws IOException {
String originalFileName = (String) rcontext.get("dataResourceName");
String fileNameAndPath = (String) rcontext.get("objectInfo");
Delegator delegator = dctx.getDelegator();
@@ -300,7 +298,7 @@ public class DataServices {
String errorMessage =
UtilProperties.getMessage("SecurityUiLabels", "SupportedTextFileFormats",
locale);
return ServiceUtil.returnError(errorMessage);
}
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
Debug.logWarning(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableWriteCharacterDataToFile",
UtilMisc.toMap("fileName", file.getAbsolutePath()),
locale));
@@ -320,10 +318,6 @@ public class DataServices {
Files.copy(tempFile, file.toPath(),
StandardCopyOption.REPLACE_EXISTING);
new File(tempFile.toString()).deleteOnExit();
- } catch (ImageReadException e) {
- Debug.logError(e, MODULE);
- return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableToOpenFileForWriting",
- UtilMisc.toMap("fileName", file.getAbsolutePath()),
locale));
} catch (IOException e) {
Debug.logError(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableWriteBinaryDataToFile",
@@ -524,7 +518,7 @@ public class DataServices {
String errorMessage =
UtilProperties.getMessage("SecurityUiLabels", "SupportedTextFileFormats",
locale);
return ServiceUtil.returnError(errorMessage);
}
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
Debug.logWarning(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableWriteCharacterDataToFile",
UtilMisc.toMap("fileName",
file.getAbsolutePath()), locale));
@@ -543,10 +537,6 @@ public class DataServices {
}
Files.copy(tempFile, file.toPath(),
StandardCopyOption.REPLACE_EXISTING);
new File(tempFile.toString()).deleteOnExit();
- } catch (ImageReadException e) {
- Debug.logError(e, MODULE);
- return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableToOpenFileForWriting",
- UtilMisc.toMap("fileName",
file.getAbsolutePath()), locale));
} catch (IOException e) {
Debug.logError(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ContentUnableWriteBinaryDataToFile",
@@ -715,7 +705,7 @@ public class DataServices {
if (Debug.infoOn()) {
Debug.logInfo("in createBinaryFileMethod, length:" +
file.length(), MODULE);
}
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
Debug.logWarning(e, MODULE);
throw new GenericServiceException(e.getMessage());
}
@@ -776,7 +766,7 @@ public class DataServices {
if (Debug.infoOn()) {
Debug.logInfo("in updateBinaryFileMethod, length:" +
file.length(), MODULE);
}
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
Debug.logWarning(e, MODULE);
throw new GenericServiceException(e.getMessage());
}
diff --git
a/applications/product/src/main/java/org/apache/ofbiz/product/image/ScaleImage.java
b/applications/product/src/main/java/org/apache/ofbiz/product/image/ScaleImage.java
index 92ac0fa332..b350bd1f9d 100644
---
a/applications/product/src/main/java/org/apache/ofbiz/product/image/ScaleImage.java
+++
b/applications/product/src/main/java/org/apache/ofbiz/product/image/ScaleImage.java
@@ -29,7 +29,6 @@ import java.util.Map;
import javax.imageio.ImageIO;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.location.FlexibleLocation;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.UtilGenerics;
@@ -234,7 +233,7 @@ public class ScaleImage {
Debug.logError(errMsg, MODULE);
result.put(ModelService.ERROR_MESSAGE, errMsg);
return result;
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
String errMsg = UtilProperties.getMessage(RESOURCE,
"ScaleImage.error_occurs_during_writing", locale) + e.toString();
Debug.logError(errMsg, MODULE);
result.put(ModelService.ERROR_MESSAGE, errMsg);
@@ -413,7 +412,7 @@ public class ScaleImage {
Debug.logError(errMsg, MODULE);
result.put(ModelService.ERROR_MESSAGE, errMsg);
return result;
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
String errMsg = UtilProperties.getMessage(RESOURCE,
"ScaleImage.error_occurs_during_writing", locale) + e.toString();
Debug.logError(errMsg, MODULE);
result.put(ModelService.ERROR_MESSAGE, errMsg);
diff --git
a/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/FrameImage.java
b/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/FrameImage.java
index b5b0cd3363..6079968c37 100644
---
a/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/FrameImage.java
+++
b/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/FrameImage.java
@@ -44,7 +44,6 @@ import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import javax.swing.ImageIcon;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.FileUtil;
import org.apache.ofbiz.base.util.UtilDateTime;
@@ -364,7 +363,7 @@ public class FrameImage {
return "error";
}
contentId = contentResult.get("contentId").toString();
- } catch (GenericServiceException | IOException | ImageReadException
gse) {
+ } catch (GenericServiceException | IOException gse) {
request.setAttribute("_ERROR_MESSAGE_", gse.getMessage());
return "error";
}
diff --git
a/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/ImageManagementServices.java
b/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/ImageManagementServices.java
index c73cc60a4c..16111550b5 100644
---
a/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/ImageManagementServices.java
+++
b/applications/product/src/main/java/org/apache/ofbiz/product/imagemanagement/ImageManagementServices.java
@@ -39,7 +39,6 @@ import java.util.Map;
import javax.imageio.ImageIO;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.location.FlexibleLocation;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.UtilDateTime;
@@ -101,7 +100,7 @@ public class ImageManagementServices {
}
public static Map<String, Object>
addMultipleuploadForProduct(DispatchContext dctx,
- Map<String, ? extends Object> context) throws ImageReadException {
+ Map<String, ? extends Object> context) {
Map<String, Object> result = new HashMap<>();
LocalDispatcher dispatcher = dctx.getDispatcher();
@@ -602,7 +601,7 @@ public class ImageManagementServices {
}
public static Map<String, Object> createContentThumbnail(DispatchContext
dctx, Map<String, ? extends Object> context,
- GenericValue userLogin, ByteBuffer imageData, String productId,
String imageName) throws ImageReadException {
+ GenericValue userLogin, ByteBuffer imageData, String productId,
String imageName) {
Map<String, Object> result = new HashMap<>();
LocalDispatcher dispatcher = dctx.getDispatcher();
Delegator delegator = dctx.getDelegator();
diff --git
a/applications/product/src/main/java/org/apache/ofbiz/product/product/ProductServices.java
b/applications/product/src/main/java/org/apache/ofbiz/product/product/ProductServices.java
index 3a93419928..c6cd074318 100644
---
a/applications/product/src/main/java/org/apache/ofbiz/product/product/ProductServices.java
+++
b/applications/product/src/main/java/org/apache/ofbiz/product/product/ProductServices.java
@@ -41,7 +41,6 @@ import java.util.Map;
import java.util.Map.Entry;
import java.util.Set;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.base.util.Debug;
import org.apache.ofbiz.base.util.UtilDateTime;
import org.apache.ofbiz.base.util.UtilGenerics;
@@ -971,7 +970,7 @@ public class ProductServices {
}
public static Map<String, Object>
addAdditionalViewForProduct(DispatchContext dctx,
- Map<String, ? extends Object> context) throws ImageReadException {
+ Map<String, ? extends Object> context) {
LocalDispatcher dispatcher = dctx.getDispatcher();
Delegator delegator = dctx.getDelegator();
@@ -1438,7 +1437,7 @@ public class ProductServices {
Debug.logError(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ProductImageViewUnableWriteFile",
UtilMisc.toMap("fileName", file.getAbsolutePath()), locale));
- } catch (IOException | ImageReadException e) {
+ } catch (IOException e) {
Debug.logError(e, MODULE);
return
ServiceUtil.returnError(UtilProperties.getMessage(RESOURCE,
"ProductImageViewUnableWriteBinaryData",
UtilMisc.toMap("fileName", file.getAbsolutePath()), locale));
diff --git a/dependencies.gradle b/dependencies.gradle
index f6b8cf1b88..bd043a31d6 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -29,6 +29,7 @@ dependencies {
implementation 'com.sun.mail:javax.mail:1.6.2'
implementation 'com.rometools:rome:2.1.0'
implementation 'com.thoughtworks.xstream:xstream:1.4.21'
+ implementation 'com.twelvemonkeys.imageio:imageio-tiff:3.14.0'
implementation 'commons-cli:commons-cli:1.11.0'
implementation 'commons-fileupload:commons-fileupload:1.6.0'
implementation 'commons-net:commons-net:3.13.0'
@@ -41,7 +42,6 @@ dependencies {
implementation 'org.apache.commons:commons-collections4:4.6.0'
implementation 'org.apache.commons:commons-csv:1.14.1'
implementation 'org.apache.commons:commons-dbcp2:2.14.0'
- implementation 'org.apache.commons:commons-imaging:1.0-alpha3' // Alpha
but OK, "Imaging was working and was used by a number of projects in production
even before reaching its initial release as an Apache Commons component." Since
1.0.0-alpha4 (note the use of semver) the API has changed. Better wait an
"official release" to rewrite OFBiz code...
implementation 'org.apache.commons:commons-text:1.15.0'
implementation 'org.apache.geronimo.components:geronimo-transaction:3.1.5'
// 4.0.0 does not compile
implementation 'org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1'
diff --git
a/framework/base/src/main/java/org/apache/ofbiz/base/util/HttpRequestFileUpload.java
b/framework/base/src/main/java/org/apache/ofbiz/base/util/HttpRequestFileUpload.java
index 3015b86b3b..2757cba62b 100644
---
a/framework/base/src/main/java/org/apache/ofbiz/base/util/HttpRequestFileUpload.java
+++
b/framework/base/src/main/java/org/apache/ofbiz/base/util/HttpRequestFileUpload.java
@@ -31,7 +31,6 @@ import java.util.Map;
import javax.servlet.ServletInputStream;
import javax.servlet.http.HttpServletRequest;
-import org.apache.commons.imaging.ImageReadException;
import org.apache.ofbiz.entity.Delegator;
/**
@@ -291,9 +290,6 @@ public class HttpRequestFileUpload {
if (!fileToValidate.equals(fileTocheck)) {
new File(fileToValidate).renameTo(new
File(fileTocheck));
}
- } catch (ImageReadException e) {
- Debug.logError(e, MODULE);
- return false;
}
} else {
// this is a field
diff --git
a/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
b/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
index 9a9f8d6817..2bb6f65d28 100644
---
a/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
+++
b/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
@@ -23,6 +23,7 @@ import java.awt.Graphics;
import java.awt.Image;
import java.awt.Transparency;
import java.awt.image.BufferedImage;
+import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.DataInputStream;
import java.io.File;
@@ -71,16 +72,6 @@ import org.apache.batik.anim.dom.SAXSVGDocumentFactory;
import org.apache.batik.util.XMLResourceDescriptor;
import org.apache.commons.csv.CSVFormat;
import org.apache.commons.csv.CSVParser;
-import org.apache.commons.imaging.ImageFormat;
-import org.apache.commons.imaging.ImageFormats;
-import org.apache.commons.imaging.ImageInfo;
-import org.apache.commons.imaging.ImageParser;
-import org.apache.commons.imaging.ImageReadException;
-import org.apache.commons.imaging.ImageWriteException;
-import org.apache.commons.imaging.Imaging;
-import org.apache.commons.imaging.formats.gif.GifImageParser;
-import org.apache.commons.imaging.formats.png.PngImageParser;
-import org.apache.commons.imaging.formats.tiff.TiffImageParser;
import org.apache.commons.io.FileUtils;
import org.apache.commons.io.FilenameUtils;
import org.apache.commons.lang.StringUtils;
@@ -117,6 +108,8 @@ import org.w3c.dom.Node;
import org.w3c.dom.NodeList;
import org.xml.sax.SAXException;
+import com.drew.imaging.FileType;
+import com.drew.imaging.FileTypeDetector;
import com.drew.imaging.ImageMetadataReader;
import com.drew.imaging.ImageProcessingException;
import com.drew.metadata.Directory;
@@ -402,9 +395,8 @@ public class SecuredUpload {
* @param fileType
* @return true if the file is valid
* @throws IOException
- * @throws ImageReadException
*/
- public static boolean isValidFile(String fileToCheck, String fileType,
Delegator delegator) throws IOException, ImageReadException {
+ public static boolean isValidFile(String fileToCheck, String fileType,
Delegator delegator) throws IOException {
// Allow all uploads w/o check
if
(("true".equalsIgnoreCase(EntityUtilProperties.getPropertyValue("security",
"allowAllUploads", delegator)))) {
return true;
@@ -534,16 +526,16 @@ public class SecuredUpload {
* Is it a supported image format?
* @param fileName
* @return true if it's a valid image file
- * @throws IOException ImageReadException
+ * @throws IOException
*/
- private static boolean isValidImageFile(String fileName) throws
ImageReadException, IOException {
+ private static boolean isValidImageFile(String fileName) throws
IOException {
Path filePath = Paths.get(fileName);
byte[] bytesFromFile = Files.readAllBytes(filePath);
- ImageFormat imageFormat = Imaging.guessFormat(bytesFromFile);
- boolean knownRasterFormat = imageFormat.equals(ImageFormats.PNG)
- || imageFormat.equals(ImageFormats.GIF)
- || imageFormat.equals(ImageFormats.TIFF)
- || imageFormat.equals(ImageFormats.JPEG);
+ FileType fileType = FileTypeDetector.detectFileType(new
ByteArrayInputStream(bytesFromFile));
+ boolean knownRasterFormat = fileType == FileType.Png
+ || fileType == FileType.Gif
+ || fileType == FileType.Tiff
+ || fileType == FileType.Jpeg;
if (!knownRasterFormat) {
return false;
}
@@ -557,12 +549,12 @@ public class SecuredUpload {
/**
* Implementation based on
https://github.com/righettod/document-upload-protection sanitizer for Image
file. See
*
https://github.com/righettod/document-upload-protection/blob/master/src/main/java/eu/righettod/poc/sanitizer/ImageDocumentSanitizerImpl.java
- * Uses Java built-in API in complement of Apache Commons Imaging for
format not supported by the built-in API. See
- * http://commons.apache.org/proper/commons-imaging/ and
http://commons.apache.org/proper/commons-imaging/formatsupport.html
+ * PNG, GIF and JPEG are supported by the JDK's built-in ImageIO; TIFF
support comes from the TwelveMonkeys
+ * ImageIO plugin (com.twelvemonkeys.imageio:imageio-tiff), registered
transparently as an ImageIO service
+ * provider, so no format-specific fallback code is needed here.
*/
private static boolean imageMadeSafe(String fileName) {
File file = new File(fileName);
- boolean fallbackOnApacheCommonsImaging;
if (!noWebshellInMetadata(file)) {
return false;
@@ -583,31 +575,17 @@ public class SecuredUpload {
try {
// Get the image format
String formatName;
- ImageInputStream iis = ImageIO.createImageInputStream(file);
- Iterator<ImageReader> imageReaderIterator =
ImageIO.getImageReaders(iis);
- // If there not ImageReader instance found so it's means that
the current format is not supported by the Java built-in API
- if (!imageReaderIterator.hasNext()) {
- ImageInfo imageInfo = Imaging.getImageInfo(file);
- if (imageInfo != null && imageInfo.getFormat() != null &&
imageInfo.getFormat().getName() != null) {
- formatName = imageInfo.getFormat().getName();
- fallbackOnApacheCommonsImaging = true;
- } else {
+ try (ImageInputStream iis =
ImageIO.createImageInputStream(file)) {
+ Iterator<ImageReader> imageReaderIterator =
ImageIO.getImageReaders(iis);
+ if (!imageReaderIterator.hasNext()) {
throw new IOException("Format of the original image "
+ fileName + " is not supported for read operation !");
}
- } else {
ImageReader reader = imageReaderIterator.next();
formatName = reader.getFormatName();
- fallbackOnApacheCommonsImaging = false;
- iis.close(); // This was not correctly handled in the
document-upload-protection example, and I did not spot it :/
}
// Load the image
- BufferedImage originalImage;
- if (!fallbackOnApacheCommonsImaging) {
- originalImage = ImageIO.read(file);
- } else {
- originalImage = Imaging.getBufferedImage(file);
- }
+ BufferedImage originalImage = ImageIO.read(file);
// Check that image has been successfully loaded
if (originalImage == null) {
@@ -634,34 +612,11 @@ public class SecuredUpload {
// Open the output stream only after the sanitized image is
ready, so that
// TRUNCATE_EXISTING does not wipe the file before it has been
read.
try (OutputStream fos = Files.newOutputStream(file.toPath(),
StandardOpenOption.WRITE, StandardOpenOption.TRUNCATE_EXISTING)) {
- if (!fallbackOnApacheCommonsImaging) {
- ImageIO.write(sanitizedImage, formatName, fos);
- } else {
- ImageParser<?> imageParser;
- // Handle only formats for which Apache Commons
Imaging can successfully write (YES in Write column of the reference link)
- // the image format. See reference link in the class
header
- switch (formatName) {
- case "TIFF":
- imageParser = new TiffImageParser();
- break;
- case "GIF":
- imageParser = new GifImageParser();
- break;
- case "PNG":
- imageParser = new PngImageParser();
- break;
- // case "JPEG":
- // imageParser = new JpegImageParser(); // Does not
provide imageParser.writeImage used below
- // break;
- default:
- throw new IOException("Format of the original
image " + fileName + " is not supported for write operation !");
- }
- imageParser.writeImage(sanitizedImage, fos, null);
- }
+ ImageIO.write(sanitizedImage, formatName, fos);
}
// Set state flag
safeState = true;
- } catch (IOException | ImageReadException | ImageWriteException e)
{
+ } catch (IOException e) {
Debug.logWarning(e, "Error during Image file " + fileName + "
processing !", MODULE);
}
}
@@ -750,7 +705,7 @@ public class SecuredUpload {
private static boolean noWebshellInJPEG(File file) {
try {
byte[] bytes = Files.readAllBytes(file.toPath());
- if (!Imaging.guessFormat(bytes).equals(ImageFormats.JPEG)) {
+ if (FileTypeDetector.detectFileType(new
ByteArrayInputStream(bytes)) != FileType.Jpeg) {
return true; // Not a JPEG file, it's OK so far
}
// SOI marker check
@@ -821,7 +776,7 @@ public class SecuredUpload {
private static boolean noWebshellInGIF(File file) {
try {
byte[] bytes = Files.readAllBytes(file.toPath());
- if (!Imaging.guessFormat(bytes).equals(ImageFormats.GIF)) {
+ if (FileTypeDetector.detectFileType(new
ByteArrayInputStream(bytes)) != FileType.Gif) {
return true; // Not a GIF file, it's OK so far
}
// Header: "GIF87a" or "GIF89a"
@@ -902,8 +857,7 @@ public class SecuredUpload {
private static boolean isPNG(File file) throws IOException {
Path filePath = Paths.get(file.getPath());
byte[] bytesFromFile = Files.readAllBytes(filePath);
- ImageFormat imageFormat = Imaging.guessFormat(bytesFromFile);
- return (imageFormat.equals(ImageFormats.PNG));
+ return FileTypeDetector.detectFileType(new
ByteArrayInputStream(bytesFromFile)) == FileType.Png;
}
private static boolean inflate(byte[] data) {
@@ -948,9 +902,9 @@ public class SecuredUpload {
* Is it a supported image format, including SVG?
* @param fileName
* @return true if it's a valid image file
- * @throws IOException ImageReadException
+ * @throws IOException
*/
- private static boolean isValidImageIncludingSvgFile(String fileName)
throws ImageReadException, IOException {
+ private static boolean isValidImageIncludingSvgFile(String fileName)
throws IOException {
return isValidImageFile(fileName) || isValidSvgFile(fileName);
}
@@ -1137,9 +1091,9 @@ public class SecuredUpload {
* http://commons.apache.org/proper/commons-compress/examples.html
* @param fileName
* @return true if it's a valid compressed file
- * @throws IOException ImageReadException
+ * @throws IOException
*/
- private static boolean isValidCompressedFile(String fileName, Delegator
delegator) throws IOException, ImageReadException {
+ private static boolean isValidCompressedFile(String fileName, Delegator
delegator) throws IOException {
String mimeType = getMimeTypeFromFileName(fileName);
// I planned to handle more formats but did only ZIP
// The code can be extended based on that
@@ -1195,7 +1149,7 @@ public class SecuredUpload {
return null;
}
- private static boolean isValidDirectoryInCompressedFile(String folderName,
Delegator delegator) throws IOException, ImageReadException {
+ private static boolean isValidDirectoryInCompressedFile(String folderName,
Delegator delegator) throws IOException {
File folder = new File(folderName);
Collection<File> files = FileUtils.listFiles(folder, null, true);
for (File f : files) {
