mirror of
https://github.com/discourse/discourse.git
synced 2024-11-25 18:30:26 -06:00
e3de45359f
Now all external requests from the service worker will be in CORS mode without credentials.
90 lines
2.5 KiB
Ruby
90 lines
2.5 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class SvgSpriteController < ApplicationController
|
|
skip_before_action :preload_json, :redirect_to_login_if_required, :check_xhr, :verify_authenticity_token, only: [:show, :search, :svg_icon]
|
|
|
|
cdn_action only: [:show, :search, :svg_icon]
|
|
|
|
requires_login except: [:show, :svg_icon]
|
|
|
|
def show
|
|
|
|
no_cookies
|
|
|
|
RailsMultisite::ConnectionManagement.with_hostname(params[:hostname]) do
|
|
theme_ids = params[:theme_ids].split(",").map(&:to_i)
|
|
|
|
if SvgSprite.version(theme_ids) != params[:version]
|
|
return redirect_to path(SvgSprite.path(theme_ids))
|
|
end
|
|
|
|
svg_sprite = "window.__svg_sprite = #{SvgSprite.bundle(theme_ids).inspect};"
|
|
|
|
response.headers["Last-Modified"] = 10.years.ago.httpdate
|
|
response.headers["Content-Length"] = svg_sprite.bytesize.to_s
|
|
immutable_for 1.year
|
|
|
|
render plain: svg_sprite, disposition: nil, content_type: 'application/javascript'
|
|
end
|
|
end
|
|
|
|
def search
|
|
RailsMultisite::ConnectionManagement.with_hostname(params[:hostname]) do
|
|
|
|
keyword = params.require(:keyword)
|
|
data = SvgSprite.search(keyword)
|
|
|
|
if data.blank?
|
|
render body: nil, status: 404
|
|
else
|
|
render plain: data.inspect, disposition: nil, content_type: 'text/plain'
|
|
end
|
|
end
|
|
end
|
|
|
|
def icon_picker_search
|
|
RailsMultisite::ConnectionManagement.with_hostname(params[:hostname]) do
|
|
params.permit(:filter)
|
|
filter = params[:filter] || ""
|
|
|
|
icons = SvgSprite.icon_picker_search(filter)
|
|
render json: icons.take(200), root: false
|
|
end
|
|
end
|
|
|
|
def svg_icon
|
|
no_cookies
|
|
|
|
RailsMultisite::ConnectionManagement.with_hostname(params[:hostname]) do
|
|
params.permit(:color)
|
|
name = params.require(:name)
|
|
icon = SvgSprite.search(name)
|
|
|
|
if icon.blank?
|
|
render body: nil, status: 404
|
|
else
|
|
doc = Nokogiri.XML(icon)
|
|
doc.at_xpath("symbol").name = "svg"
|
|
doc.at_xpath("svg")['xmlns'] = "http://www.w3.org/2000/svg"
|
|
doc.at_xpath("svg")['fill'] = adjust_hex(params[:color]) if params[:color]
|
|
|
|
response.headers["Last-Modified"] = 1.years.ago.httpdate
|
|
response.headers["Content-Length"] = doc.to_s.bytesize.to_s
|
|
immutable_for 1.day
|
|
|
|
render plain: doc, disposition: nil, content_type: 'image/svg+xml'
|
|
end
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def adjust_hex(hex)
|
|
if hex.size == 3
|
|
chars = hex.scan(/\w/)
|
|
hex = chars.zip(chars).flatten.join
|
|
end
|
|
"##{hex}"
|
|
end
|
|
end
|