Terranet\Administrator\Middleware\SanitizePaths

Complexity

Total Complexity

9

Size/Duplication

Total Lines	63
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	handle()	0	9	2
A	sanitizePath()	0	25	6
A	guardedPaths()	0	5	1

<?php

namespace Terranet\Administrator\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Arr;

class SanitizePaths
{
    /**
     * Handle an incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure $next
     *
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        if (!empty($paths = $this->guardedPaths($request))) {
            $request->merge(
                array_map([$this, 'sanitizePath'], $paths)
            );
        }

        return $next($request);
    }

    /**
     * @param string $path
     *
     * @return string
     */
    protected function sanitizePath($path)
    {
        if (\is_array($path)) {

The condition is_array($path) is always false.

            return array_map([$this, 'sanitizePath'], $path);
        }

        $path = iconv($encoding = 'UTF-8', "$encoding//IGNORE//TRANSLIT", $path);

        $parts = explode('/', $path);
        $safe = [];
        foreach ($parts as $part) {
            if (empty($part) || ('.' === $part)) {
                continue;
            }

            if ('..' === $part) {
                array_pop($safe);

                continue;
            }

            $safe[] = $part;
        }

        return implode(\DIRECTORY_SEPARATOR, $safe);
    }

    /**
     * @param Request $request
     *
     * @return array
     */
    protected function guardedPaths(Request $request)
    {
        return Arr::only(
            $request->all(),
            ['path', 'basedir', 'directories', 'from', 'to', 'name']
        );
    }
}