from django.conf import settings
from django.http import HttpResponse, Http404
from django.utils.decorators import method_decorator
+from django.utils.encoding import force_unicode
from django.views.decorators.vary import vary_on_headers
from django.views.generic import FormView, RedirectView
+from unidecode import unidecode
+
from .forms import UploadForm
class UploadViewMixin(object):
def get_safe_path(self, filename=""):
"""Finds absolute filesystem path of the browsed dir of file.
-
+
Makes sure it's inside MEDIA_ROOT.
-
+
"""
path = os.path.abspath(os.path.join(settings.MEDIA_ROOT, self.get_directory(), filename))
- # WTF how would that be possible?
if not path.startswith(os.path.abspath(settings.MEDIA_ROOT)):
raise Http404
if filename:
if not path.startswith(self.get_safe_path()):
raise Http404
- return path
+ return force_unicode(path)
class UploadView(UploadViewMixin, FormView):
os.makedirs(path)
data = []
for f in flist:
+ f.name = unidecode(f.name)
with open(self.get_safe_path(f.name), 'w') as destination:
for chunk in f.chunks():
destination.write(chunk)
data.append({
- 'name': f.name,
+ 'name': f.name,
'url': self.get_url(f.name),
'thumbnail_url': thumbnail(self.get_directory() + f.name),
'delete_url': "%s?file=%s" % (
class PackageView(UploadViewMixin, RedirectView):
+ # usage of RedirectView here is really really ugly
+ permanent = False
+
def dispatch(self, request, *args, **kwargs):
self.object = self.get_object(request, *args, **kwargs)
path = self.get_safe_path()