Show excel.html syntax highlighted
% # vim: set syntax=mason:
<%args>
$file => -1
$format => 'text'
</%args>
<%init>
my ($user, $prefix);
eval {
$user = Apache2::SiteControl->getCurrentUser($r);
$prefix = $config->getScratchDir($user);
};
if($@) {
$logger->error("Unable to get attachment: $@");
$m->redirect(build_url("$base/mail/index.html", { message => "Request failed" }));
}
my $username = $user->getUsername();
my $xlhtml = $config->get('xlhtml');
my $sandbox_dir = $config->get('sandbox');
my $sandbox = $config->get('sandbox_util');
$file =~ s/\\/\\\\/g; # Un-escape escapes
if($file == -1) {
$m->redirect(build_url("$base/mail/index.html", { message => "No filename for attachment." }));
} elsif($file =~ m!(^|/)\.\./!) {
$logger->error("Security Violation! $username attempted to view $file. Prefix was $prefix");
$m->redirect(build_url("$base/mail/index.html", { message => "Security violation on filename $file" }));
}
my $name = $file;
$name =~ s!^.*/([^/]*)$!$1!;
unlink "$sandbox_dir/tmp/$name";
link "$prefix/$file", "$sandbox_dir/tmp/$name" or $logger->error("Could not create link from $file to $sandbox_dir/tmp");
$r->content_type('text/html');
my @lines = qx($sandbox $xlhtml '/tmp/$name' 2>&1);
unlink "$sandbox_dir/tmp/$name";
$m->print(@lines);
</%init>
<%once>
our $logger = Log::Log4perl->get_logger('alphamail');
our $base = $config->get('base_uri');
</%once>
See more files for this project here