Kunstmaan / KunstmaanBundlesCMS

src/Kunstmaan/MediaBundle/Helper/File/SVGMimeTypeGuesser.php

<?php

namespace Kunstmaan\MediaBundle\Helper\File;

use Symfony\Component\HttpFoundation\File\Exception\AccessDeniedException;
use Symfony\Component\HttpFoundation\File\Exception\FileNotFoundException;
use Symfony\Component\HttpFoundation\File\MimeType\MimeTypeGuesserInterface;

@trigger_error(sprintf('The "%s" class is deprecated since KunstmaanMediaBundle 5.7 and will be removed in KunstmaanMediaBundle 6.0. Use the "symfony/mime" component instead.', __CLASS__), E_USER_DEPRECATED);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

/**
 * @deprecated this class is deprecated since KunstmaanMediaBundle 5.7 and will be removed in KunstmaanMediaBundle 6.0. Use the "symfony/mime" component instead.
 *
 * Simple Mime type guesser to detect SVG image files, it will test if the file is an XML file and return SVG mime type
 * if the XML contains a valid SVG namespace...
 */
class SVGMimeTypeGuesser implements MimeTypeGuesserInterface
{
    private $_MIMETYPE_NAMESPACES = array(
        'http://www.w3.org/2000/svg' => 'image/svg+xml',
    );

    /**
     * {@inheritdoc}
     */
    public function guess($path)
    {
        if (!is_file($path)) {
            throw new FileNotFoundException($path);
        }

        if (!is_readable($path)) {
            throw new AccessDeniedException($path);
        }

        if (!self::isSupported()) {
            return;
        }

        $dom = new \DOMDocument();
        $xml = $dom->load($path, LIBXML_NOERROR + LIBXML_ERR_FATAL + LIBXML_ERR_NONE);
        if ($xml === false) {
            return;
        }
        $xpath = new \DOMXPath($dom);
        foreach ($xpath->query('namespace::*') as $node) {
            if (isset($this->_MIMETYPE_NAMESPACES[$node->nodeValue])) {
                return $this->_MIMETYPE_NAMESPACES[$node->nodeValue];
            }
        }

        return;
    }

    /**
     * Returns whether this guesser is supported on the current OS
     *
     * @return bool
     */
    public static function isSupported()
    {
        return class_exists('DOMDocument') && class_exists('DOMXPath');
    }
}