2018-04-01 01:04:06 +02:00
|
|
|
import os
|
2018-03-31 20:56:15 +02:00
|
|
|
import re
|
2018-04-01 01:04:06 +02:00
|
|
|
import shutil
|
2018-03-31 15:47:06 +02:00
|
|
|
import tempfile
|
2018-04-01 15:08:38 +02:00
|
|
|
import datetime
|
2018-04-01 01:04:06 +02:00
|
|
|
import zipfile
|
2018-06-04 22:54:01 +02:00
|
|
|
from typing import Dict, Set
|
2018-03-31 15:47:06 +02:00
|
|
|
|
|
|
|
from . import abstract, parser_factory
|
|
|
|
|
2018-06-04 22:54:01 +02:00
|
|
|
assert Set # make pyflakes happy
|
2018-04-04 23:21:48 +02:00
|
|
|
|
2018-04-01 01:04:06 +02:00
|
|
|
class ArchiveBasedAbstractParser(abstract.AbstractParser):
|
2018-06-04 22:54:01 +02:00
|
|
|
whitelist = set() # type: Set[str]
|
|
|
|
|
2018-05-16 22:36:59 +02:00
|
|
|
def _clean_zipinfo(self, zipinfo: zipfile.ZipInfo) -> zipfile.ZipInfo:
|
2018-04-01 01:04:06 +02:00
|
|
|
zipinfo.compress_type = zipfile.ZIP_DEFLATED
|
|
|
|
zipinfo.create_system = 3 # Linux
|
|
|
|
zipinfo.comment = b''
|
|
|
|
zipinfo.date_time = (1980, 1, 1, 0, 0, 0)
|
|
|
|
return zipinfo
|
|
|
|
|
2018-06-04 22:54:01 +02:00
|
|
|
def _get_zipinfo_meta(self, zipinfo: zipfile.ZipInfo) -> Dict[str, str]:
|
2018-04-01 15:08:38 +02:00
|
|
|
metadata = {}
|
|
|
|
if zipinfo.create_system == 3:
|
|
|
|
#metadata['create_system'] = 'Linux'
|
|
|
|
pass
|
|
|
|
elif zipinfo.create_system == 2:
|
|
|
|
metadata['create_system'] = 'Windows'
|
|
|
|
else:
|
|
|
|
metadata['create_system'] = 'Weird'
|
|
|
|
|
|
|
|
if zipinfo.comment:
|
2018-06-04 22:54:01 +02:00
|
|
|
metadata['comment'] = zipinfo.comment # type: ignore
|
2018-04-01 15:08:38 +02:00
|
|
|
|
|
|
|
if zipinfo.date_time != (1980, 1, 1, 0, 0, 0):
|
2018-06-04 22:54:01 +02:00
|
|
|
metadata['date_time'] =str(datetime.datetime(*zipinfo.date_time))
|
2018-04-01 15:08:38 +02:00
|
|
|
|
|
|
|
return metadata
|
|
|
|
|
|
|
|
|
2018-05-16 22:36:59 +02:00
|
|
|
def _clean_internal_file(self, item: zipfile.ZipInfo, temp_folder: str,
|
|
|
|
zin: zipfile.ZipFile, zout: zipfile.ZipFile):
|
2018-06-04 22:54:01 +02:00
|
|
|
output = ''
|
2018-04-01 01:04:06 +02:00
|
|
|
zin.extract(member=item, path=temp_folder)
|
2018-06-04 22:54:01 +02:00
|
|
|
if item.filename not in self.whitelist:
|
|
|
|
full_path = os.path.join(temp_folder, item.filename)
|
|
|
|
tmp_parser, mtype = parser_factory.get_parser(full_path) # type: ignore
|
|
|
|
if not tmp_parser:
|
|
|
|
print("%s's format (%s) isn't supported" % (item.filename, mtype))
|
|
|
|
return
|
|
|
|
tmp_parser.remove_all()
|
|
|
|
output = tmp_parser.output_filename
|
|
|
|
else:
|
|
|
|
output = os.path.join(temp_folder, item.filename)
|
|
|
|
zinfo = zipfile.ZipInfo(item.filename) # type: ignore
|
2018-04-02 23:35:03 +02:00
|
|
|
clean_zinfo = self._clean_zipinfo(zinfo)
|
2018-06-04 22:54:01 +02:00
|
|
|
with open(output, 'rb') as f:
|
2018-04-02 23:35:03 +02:00
|
|
|
zout.writestr(clean_zinfo, f.read())
|
2018-04-01 01:04:06 +02:00
|
|
|
|
2018-04-04 23:21:48 +02:00
|
|
|
|
2018-04-01 01:04:06 +02:00
|
|
|
class MSOfficeParser(ArchiveBasedAbstractParser):
|
2018-03-31 15:47:06 +02:00
|
|
|
mimetypes = {
|
2018-05-16 22:36:59 +02:00
|
|
|
'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
|
|
|
|
'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
|
|
|
|
'application/vnd.openxmlformats-officedocument.presentationml.presentation'
|
2018-03-31 15:47:06 +02:00
|
|
|
}
|
|
|
|
files_to_keep = {'_rels/.rels', 'word/_rels/document.xml.rels'}
|
|
|
|
|
|
|
|
def get_meta(self):
|
2018-03-31 20:56:15 +02:00
|
|
|
"""
|
|
|
|
Yes, I know that parsing xml with regexp ain't pretty,
|
|
|
|
be my guest and fix it if you want.
|
|
|
|
"""
|
2018-03-31 15:47:06 +02:00
|
|
|
metadata = {}
|
|
|
|
zipin = zipfile.ZipFile(self.filename)
|
2018-04-01 15:08:38 +02:00
|
|
|
for item in zipin.infolist():
|
|
|
|
if item.filename.startswith('docProps/') and item.filename.endswith('.xml'):
|
2018-03-31 20:56:15 +02:00
|
|
|
content = zipin.read(item).decode('utf-8')
|
|
|
|
for (key, value) in re.findall(r"<(.+)>(.+)</\1>", content, re.I):
|
|
|
|
metadata[key] = value
|
|
|
|
if not metadata: # better safe than sorry
|
|
|
|
metadata[item] = 'harmful content'
|
2018-04-01 15:08:38 +02:00
|
|
|
|
2018-06-04 22:54:01 +02:00
|
|
|
for key, value in self._get_zipinfo_meta(item).items():
|
|
|
|
metadata[key] = value
|
2018-03-31 15:47:06 +02:00
|
|
|
zipin.close()
|
|
|
|
return metadata
|
|
|
|
|
2018-04-01 00:17:06 +02:00
|
|
|
|
2018-03-31 15:47:06 +02:00
|
|
|
def remove_all(self):
|
|
|
|
zin = zipfile.ZipFile(self.filename, 'r')
|
|
|
|
zout = zipfile.ZipFile(self.output_filename, 'w')
|
|
|
|
temp_folder = tempfile.mkdtemp()
|
|
|
|
|
|
|
|
for item in zin.infolist():
|
2018-03-31 15:57:14 +02:00
|
|
|
if item.filename[-1] == '/':
|
|
|
|
continue # `is_dir` is added in Python3.6
|
2018-03-31 15:47:06 +02:00
|
|
|
elif item.filename.startswith('docProps/'):
|
|
|
|
if not item.filename.endswith('.rels'):
|
|
|
|
continue # don't keep metadata files
|
|
|
|
if item.filename in self.files_to_keep:
|
2018-04-01 01:04:06 +02:00
|
|
|
item = self._clean_zipinfo(item)
|
2018-03-31 15:47:06 +02:00
|
|
|
zout.writestr(item, zin.read(item))
|
|
|
|
continue
|
|
|
|
|
2018-04-01 01:04:06 +02:00
|
|
|
self._clean_internal_file(item, temp_folder, zin, zout)
|
|
|
|
|
|
|
|
shutil.rmtree(temp_folder)
|
|
|
|
zout.close()
|
|
|
|
zin.close()
|
|
|
|
return True
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class LibreOfficeParser(ArchiveBasedAbstractParser):
|
|
|
|
mimetypes = {
|
2018-05-16 22:36:59 +02:00
|
|
|
'application/vnd.oasis.opendocument.text',
|
|
|
|
'application/vnd.oasis.opendocument.spreadsheet',
|
|
|
|
'application/vnd.oasis.opendocument.presentation',
|
|
|
|
'application/vnd.oasis.opendocument.graphics',
|
|
|
|
'application/vnd.oasis.opendocument.chart',
|
|
|
|
'application/vnd.oasis.opendocument.formula',
|
|
|
|
'application/vnd.oasis.opendocument.image',
|
2018-04-01 01:04:06 +02:00
|
|
|
}
|
2018-06-04 22:54:01 +02:00
|
|
|
whitelist = {'mimetype', 'manifest.rdf'}
|
|
|
|
|
2018-04-01 01:04:06 +02:00
|
|
|
|
|
|
|
def get_meta(self):
|
|
|
|
"""
|
|
|
|
Yes, I know that parsing xml with regexp ain't pretty,
|
|
|
|
be my guest and fix it if you want.
|
|
|
|
"""
|
|
|
|
metadata = {}
|
|
|
|
zipin = zipfile.ZipFile(self.filename)
|
2018-04-01 15:08:38 +02:00
|
|
|
for item in zipin.infolist():
|
|
|
|
if item.filename == 'meta.xml':
|
2018-04-01 01:04:06 +02:00
|
|
|
content = zipin.read(item).decode('utf-8')
|
|
|
|
for (key, value) in re.findall(r"<((?:meta|dc|cp).+?)>(.+)</\1>", content, re.I):
|
|
|
|
metadata[key] = value
|
|
|
|
if not metadata: # better safe than sorry
|
|
|
|
metadata[item] = 'harmful content'
|
2018-06-04 22:54:01 +02:00
|
|
|
for key, value in self._get_zipinfo_meta(item).items():
|
|
|
|
metadata[key] = value
|
2018-04-01 01:04:06 +02:00
|
|
|
zipin.close()
|
|
|
|
return metadata
|
|
|
|
|
|
|
|
def remove_all(self):
|
|
|
|
zin = zipfile.ZipFile(self.filename, 'r')
|
|
|
|
zout = zipfile.ZipFile(self.output_filename, 'w')
|
|
|
|
temp_folder = tempfile.mkdtemp()
|
|
|
|
|
|
|
|
for item in zin.infolist():
|
|
|
|
if item.filename[-1] == '/':
|
|
|
|
continue # `is_dir` is added in Python3.6
|
|
|
|
elif item.filename == 'meta.xml':
|
|
|
|
continue # don't keep metadata files
|
|
|
|
|
|
|
|
self._clean_internal_file(item, temp_folder, zin, zout)
|
2018-04-01 00:17:06 +02:00
|
|
|
|
2018-03-31 15:47:06 +02:00
|
|
|
shutil.rmtree(temp_folder)
|
|
|
|
zout.close()
|
|
|
|
zin.close()
|
|
|
|
return True
|