podemos-info/census

# frozen_string_literal: true

class AttachmentUploader < ApplicationUploader
  include CarrierWave::MiniMagick

  # Choose what kind of storage to use for this uploader:
  storage :encrypted_file
  cache_storage :encrypted_file

  process :set_content_type
  process :validate_dimensions
  version :thumbnail, if: :image? do
    process resize_to_fit: [nil, 400]
  end

  version :big, if: :image? do
    process resize_to_limit: [nil, 1000]
  end

  protected

  # CarrierWave automatically calls this method and validates the content
  # type fo the temp file to match against any of these options.
  def content_type_whitelist
    [
      %r{image\/},
      %r{application\/vnd.oasis.opendocument},
      %r{application\/vnd.ms-},
      %r{application\/msword},
      %r{application\/vnd.ms-word},
      %r{application\/vnd.openxmlformats-officedocument},
      %r{application\/vnd.oasis.opendocument},
      %r{application\/pdf},
      %r{application\/rtf}
    ]
  end

  # Checks if the file is an image based on the content type. We need this so
  # we only create different versions of the file when it's an image.
  #
  # new_file - The uploaded file.
  #
  # Returns a Boolean.
  def image?(new_file)
    content_type = model.try(:content_type) || new_file.content_type
    content_type.to_s.start_with? "image"
  end

  # Copies the content type and file size to the model where this is mounted.
  #
  # Returns nothing.
  def set_content_type
    model.content_type = file.content_type if file.content_type
  end

  # A simple check to avoid DoS with maliciously crafted images, or just to
  # avoid reckless users that upload gigapixels images.
  #
  # See https://hackerone.com/reports/390
  def validate_dimensions
    return unless image?(self)

    manipulate! do |image|
      raise CarrierWave::IntegrityError, I18n.t("errors.messages.image_too_big") if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }

      image
    end
  end

  def max_image_height_or_width
    8000
  end
end