WEB-4122 : Create adapter/validator to filter valid image mimetype our solutions

CHANGES.rst

@@ -5,7 +5,8 @@ Changelog
 1.2.19 (unreleased)
 -------------------
 
-- Nothing changed yet.
+- WEB-4122 : Create adapter/validator to filter valid image mimetype in our solutions
+  [boulch]
 
 
 1.2.18 (2024-07-01)

src/imio/smartweb/common/adapters.py

@@ -1,7 +1,12 @@
 # -*- coding: utf-8 -*-
 
 from plone.namedfile.interfaces import IAvailableSizes
+from plone.namedfile.interfaces import INamedImageField
+from plone.namedfile.field import InvalidImageFile
+from plone.namedfile.utils import get_contenttype
+from zope.component import adapter
 from zope.component import getUtility
+from zope.interface import Interface
 
 
 class BaseCroppingProvider(object):
@@ -17,3 +22,24 @@ def get_scales(self, fieldname, request=None):
         scales = list(allowed_sizes.keys())
         scales.remove("banner")
         return scales
+
+
+@adapter(INamedImageField, Interface)
+class ImageContenttypeValidator:
+    def __init__(self, field, value):
+        self.field = field
+        self.value = value
+
+    def __call__(self):
+        if self.value is None:
+            return
+        mimetype = get_contenttype(self.value)
+        valid_mimetypes = [
+            "image/gif",
+            "image/jpeg",
+            "image/png",
+            "image/svg+xml",
+            "image/webp",
+        ]
+        if mimetype not in valid_mimetypes:
+            raise InvalidImageFile(mimetype, self.field.__name__)

src/imio/smartweb/common/adapters.zcml

@@ -7,4 +7,14 @@
       factory=".adapters.BaseCroppingProvider"
       />
 
+  <unconfigure>
+    <adapter name="image_contenttype" factory="plone.namedfile.field.ImageContenttypeValidator" />
+  </unconfigure>
+
+  <adapter
+      factory=".adapters.ImageContenttypeValidator"
+      provides="plone.namedfile.field.IPluggableImageFieldValidation"
+      name="smartweb_image_contenttype"
+      />
+
 </configure>

src/imio/smartweb/common/configure.zcml

@@ -1,6 +1,7 @@
 <configure
     xmlns="http://namespaces.zope.org/zope">
 
+  <include package="z3c.unconfigure" file="meta.zcml" />
   <include package="collective.taxonomy" />
   <include package="eea.facetednavigation" />
   <include package="eea.facetednavigation" file="meta.zcml" />