mirror of
https://github.com/arsvendg/Stirling-PDF.git
synced 2026-07-15 11:00:47 +02:00
# Description of Changes This pull request introduces a new SVG to PDF conversion feature, including both backend and frontend changes. The backend adds a secure, vector-preserving SVG-to-PDF conversion endpoint with comprehensive SVG sanitization to prevent XSS and SSRF attacks. The frontend is updated to route SVG-to-PDF conversions through this new endpoint and to distinguish SVG from other image formats. Additionally, a new dependency is added for PDF rendering. **Backend: SVG to PDF Conversion and Security** * Adds a new API endpoint and controller (`ConvertSvgToPDF`) for converting SVG files to PDF, using Batik and PDFBox with vector graphics preservation and robust error handling. * Implements SVG sanitization (`SvgSanitizer`) to remove scripts, event handlers, and dangerous URLs, protecting against XSS and SSRF attacks. * Introduces a utility (`SvgToPdf`) for rendering SVG to PDF with timeout protection against resource exhaustion attacks. * Defines a new request model (`SvgToPdfRequest`) for SVG to PDF conversion requests. * Adds the `pdfbox-graphics2d` dependency for vector graphics PDF rendering. **Frontend: Routing and Format Handling** * Updates conversion endpoint constants to add `svg-pdf` and maps SVG files to use the new `svg-to-pdf` route instead of the generic image-to-PDF route. * Removes SVG from the generic image format list and introduces a dedicated check for SVG format (`isSvgFormat`). <img width="1133" height="995" alt="image" src="https://github.com/user-attachments/assets/dec8cf27-ccb9-490d-af76-bff69feb0423" /> <!-- Please provide a summary of the changes, including: - What was changed - Why the change was made - Any challenges encountered Closes #(issue_number) --> --- ## Checklist ### General - [X] I have read the [Contribution Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md) - [X] I have read the [Stirling-PDF Developer Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/DeveloperGuide.md) (if applicable) - [X] I have read the [How to add new languages to Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md) (if applicable) - [X] I have performed a self-review of my own code - [X] My changes generate no new warnings ### Documentation - [ ] I have updated relevant docs on [Stirling-PDF's doc repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/) (if functionality has heavily changed) - [ ] I have read the section [Add New Translation Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags) (for new translation tags only) ### Translations (if applicable) - [ ] I ran [`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md) ### UI Changes (if applicable) - [ ] Screenshots or videos demonstrating the UI changes are attached (e.g., as comments or direct attachments in the PR) ### Testing (if applicable) - [X] I have tested my changes locally. Refer to the [Testing Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/DeveloperGuide.md#6-testing) for more details. --------- Signed-off-by: Balázs Szücs <[email protected]>
107 lines
3.4 KiB
TypeScript
107 lines
3.4 KiB
TypeScript
import {
|
|
CONVERSION_ENDPOINTS,
|
|
ENDPOINT_NAMES,
|
|
EXTENSION_TO_ENDPOINT,
|
|
CONVERSION_MATRIX,
|
|
TO_FORMAT_OPTIONS
|
|
} from '@app/constants/convertConstants';
|
|
|
|
/**
|
|
* Resolves the endpoint name for a given conversion
|
|
*/
|
|
export const getEndpointName = (fromExtension: string, toExtension: string): string => {
|
|
if (!fromExtension || !toExtension) return '';
|
|
|
|
let endpointKey = EXTENSION_TO_ENDPOINT[fromExtension]?.[toExtension];
|
|
|
|
// If no explicit mapping exists and we're converting to PDF,
|
|
// fall back to 'any' which uses file-to-pdf endpoint
|
|
if (!endpointKey && toExtension === 'pdf' && fromExtension !== 'any') {
|
|
endpointKey = EXTENSION_TO_ENDPOINT['any']?.[toExtension];
|
|
}
|
|
|
|
return endpointKey || '';
|
|
};
|
|
|
|
/**
|
|
* Resolves the full endpoint URL for a given conversion
|
|
*/
|
|
export const getEndpointUrl = (fromExtension: string, toExtension: string): string => {
|
|
const endpointName = getEndpointName(fromExtension, toExtension);
|
|
if (!endpointName) return '';
|
|
|
|
// Find the endpoint URL from CONVERSION_ENDPOINTS using the endpoint name
|
|
for (const [key, endpoint] of Object.entries(CONVERSION_ENDPOINTS)) {
|
|
if (ENDPOINT_NAMES[key as keyof typeof ENDPOINT_NAMES] === endpointName) {
|
|
return endpoint;
|
|
}
|
|
}
|
|
return '';
|
|
};
|
|
|
|
/**
|
|
* Checks if a conversion is supported
|
|
*/
|
|
export const isConversionSupported = (fromExtension: string, toExtension: string): boolean => {
|
|
return getEndpointName(fromExtension, toExtension) !== '';
|
|
};
|
|
|
|
/**
|
|
* Checks if the given extension is an image format
|
|
*/
|
|
export const isImageFormat = (extension: string): boolean => {
|
|
return ['png', 'jpg', 'jpeg', 'gif', 'tiff', 'bmp', 'webp'].includes(extension.toLowerCase());
|
|
};
|
|
|
|
export const isSvgFormat = (extension: string): boolean => {
|
|
return extension.toLowerCase() === 'svg';
|
|
};
|
|
|
|
/**
|
|
* Checks if the given extension is a web format
|
|
*/
|
|
export const isWebFormat = (extension: string): boolean => {
|
|
return ['html', 'zip'].includes(extension.toLowerCase());
|
|
};
|
|
|
|
/**
|
|
* Checks if the given extension is an office format (Word, Excel, PowerPoint, OpenOffice)
|
|
* These formats use LibreOffice for conversion and require individual file processing
|
|
*/
|
|
export const isOfficeFormat = (extension: string): boolean => {
|
|
return [
|
|
'docx', 'doc', 'odt', // Word processors
|
|
'xlsx', 'xls', 'ods', // Spreadsheets
|
|
'pptx', 'ppt', 'odp' // Presentations
|
|
].includes(extension.toLowerCase());
|
|
};
|
|
|
|
/**
|
|
* Gets available target extensions for a given source extension
|
|
* Extracted from useConvertParameters to be reusable in automation settings
|
|
*/
|
|
export const getAvailableToExtensions = (fromExtension: string): Array<{value: string, label: string, group: string}> => {
|
|
if (!fromExtension) return [];
|
|
|
|
// Handle dynamic format identifiers (file-<extension>)
|
|
if (fromExtension.startsWith('file-')) {
|
|
// Dynamic format - use 'any' conversion options (file-to-pdf)
|
|
const supportedExtensions = CONVERSION_MATRIX['any'] || [];
|
|
return TO_FORMAT_OPTIONS.filter(option =>
|
|
supportedExtensions.includes(option.value)
|
|
);
|
|
}
|
|
|
|
let supportedExtensions = CONVERSION_MATRIX[fromExtension] || [];
|
|
|
|
// If no explicit conversion exists, but file-to-pdf might be available,
|
|
// fall back to 'any' conversion (which converts unknown files to PDF via file-to-pdf)
|
|
if (supportedExtensions.length === 0 && fromExtension !== 'any') {
|
|
supportedExtensions = CONVERSION_MATRIX['any'] || [];
|
|
}
|
|
|
|
return TO_FORMAT_OPTIONS.filter(option =>
|
|
supportedExtensions.includes(option.value)
|
|
);
|
|
};
|