480e7eafbd
📋 Commit iniziale con: - ✅ Documentazione unificata in docs/ - ✅ Codice Laravel in netgescon-laravel/ - ✅ Script automazione in scripts/ - ✅ Configurazione sync rsync - ✅ Struttura organizzata e pulita 🔄 Versione: 2025.07.19-1644 🎯 Sistema pronto per Git distribuito
61 lines
1.7 KiB
PHP
61 lines
1.7 KiB
PHP
<?php
|
|
|
|
namespace Illuminate\Filesystem;
|
|
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use League\Flysystem\PathTraversalDetected;
|
|
|
|
class ServeFile
|
|
{
|
|
/**
|
|
* Create a new invokable controller to serve files.
|
|
*/
|
|
public function __construct(
|
|
protected string $disk,
|
|
protected array $config,
|
|
protected bool $isProduction,
|
|
) {
|
|
//
|
|
}
|
|
|
|
/**
|
|
* Handle the incoming request.
|
|
*/
|
|
public function __invoke(Request $request, string $path)
|
|
{
|
|
abort_unless(
|
|
$this->hasValidSignature($request),
|
|
$this->isProduction ? 404 : 403
|
|
);
|
|
try {
|
|
abort_unless(Storage::disk($this->disk)->exists($path), 404);
|
|
|
|
$headers = [
|
|
'Cache-Control' => 'no-store, no-cache, must-revalidate, max-age=0',
|
|
'Content-Security-Policy' => "default-src 'none'; style-src 'unsafe-inline'; sandbox",
|
|
];
|
|
|
|
return tap(
|
|
Storage::disk($this->disk)->serve($request, $path, headers: $headers),
|
|
function ($response) use ($headers) {
|
|
if (! $response->headers->has('Content-Security-Policy')) {
|
|
$response->headers->replace($headers);
|
|
}
|
|
}
|
|
);
|
|
} catch (PathTraversalDetected $e) {
|
|
abort(404);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Determine if the request has a valid signature if applicable.
|
|
*/
|
|
protected function hasValidSignature(Request $request): bool
|
|
{
|
|
return ($this->config['visibility'] ?? 'private') === 'public' ||
|
|
$request->hasValidRelativeSignature();
|
|
}
|
|
}
|