org.rapidoid.http.customize.defaults.DefaultStaticFilesSecurity Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of rapidoid-http-fast Show documentation

Rapidoid HTTP Fast

The newest version!

/*-
 * #%L
 * rapidoid-http-fast
 * %%
 * Copyright (C) 2014 - 2018 Nikolche Mihajlovski and contributors
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */

package org.rapidoid.http.customize.defaults;


import org.rapidoid.RapidoidThing;
import org.rapidoid.annotation.Authors;
import org.rapidoid.annotation.Since;
import org.rapidoid.http.Req;
import org.rapidoid.http.customize.StaticFilesSecurity;
import org.rapidoid.io.Res;

import java.util.regex.Pattern;

@Authors("Nikolche Mihajlovski")
@Since("5.2.0")
public class DefaultStaticFilesSecurity extends RapidoidThing implements StaticFilesSecurity {

	private static final Pattern PRIVATE = Pattern.compile("(^|\\\\|/)\\.");

	@Override
	public boolean canServe(Req req, Res staticResource) throws RuntimeException {
		String name = staticResource.getName();
		return !staticResource.isHidden() && !PRIVATE.matcher(name).find();
	}

}