module ThemeStore; end class ThemeStore::TgzImporter attr_reader :url def initialize(filename) @temp_folder = "#{Pathname.new(Dir.tmpdir).realpath}/discourse_theme_#{SecureRandom.hex}" @filename = filename end def import! FileUtils.mkdir(@temp_folder) Dir.chdir(@temp_folder) do Discourse::Utils.execute_command("tar", "-xzvf", @filename, "--strip", "1") end end def cleanup! FileUtils.rm_rf(@temp_folder) end def version "" end def real_path(relative) fullpath = "#{@temp_folder}/#{relative}" return nil unless File.exist?(fullpath) # careful to handle symlinks here, don't want to expose random data fullpath = Pathname.new(fullpath).realpath.to_s if fullpath && fullpath.start_with?(@temp_folder) fullpath else nil end end def [](value) fullpath = real_path(value) return nil unless fullpath File.read(fullpath) end end