TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:00 +02:00
commit f9941541b7
1178 changed files with 135377 additions and 0 deletions
@@ -0,0 +1,78 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Backend\Controller\Wizard;
+
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use TYPO3\CMS\Backend\Attribute\AsController;
+use TYPO3\CMS\Backend\View\BackendViewFactory;
+use TYPO3\CMS\Core\Crypto\HashService;
+use TYPO3\CMS\Core\Http\HtmlResponse;
+use TYPO3\CMS\Core\Resource\Exception\FileDoesNotExistException;
+use TYPO3\CMS\Core\Resource\ResourceFactory;
+use TYPO3\CMS\Core\Utility\MathUtility;
+
+/**
+ * Wizard for rendering image manipulation view
+ * @internal This class is a specific Backend controller implementation and is not considered part of the Public TYPO3 API.
+ */
+#[AsController]
+readonly class ImageManipulationController
+{
+    public function __construct(
+        protected BackendViewFactory $backendViewFactory,
+        protected HashService $hashService,
+        protected ResourceFactory $resourceFactory,
+    ) {}
+
+    /**
+     * Returns the HTML for the wizard inside the modal
+     */
+    public function getWizardContent(ServerRequestInterface $request): ResponseInterface
+    {
+        if ($this->isSignatureValid($request)) {
+            $parsedBody = json_decode($request->getParsedBody()['arguments'], true);
+            $fileUid = $parsedBody['image'];
+            $image = null;
+            if (MathUtility::canBeInterpretedAsInteger($fileUid)) {
+                try {
+                    $image = $this->resourceFactory->getFileObject($fileUid);
+                } catch (FileDoesNotExistException $e) {
+                }
+            }
+            $view = $this->backendViewFactory->create($request);
+            $view->assignMultiple([
+                'image' => $image,
+                'cropVariants' => $parsedBody['cropVariants'],
+            ]);
+            return new HtmlResponse($view->render('Form/ImageManipulationWizard'));
+        }
+        return new HtmlResponse('', 403);
+    }
+
+    /**
+     * Check if hmac signature is correct
+     *
+     * @param ServerRequestInterface $request the request with the POST parameters
+     */
+    protected function isSignatureValid(ServerRequestInterface $request): bool
+    {
+        $token = $this->hashService->hmac($request->getParsedBody()['arguments'], 'ajax_wizard_image_manipulation');
+        return hash_equals($token, $request->getParsedBody()['signature']);
+    }
+}