Function processWebSocketMessage

middleware/websocket/file_editor.go:19–107

(msg []byte, filePath string, c *websocket.Conn, mt int)

)

func processWebSocketMessage(msg []byte, filePath string, c *websocket.Conn, mt int) error {
	var message types.EditorChange
	var account types.Account = c.Locals("account").(types.Account)

	if err := json.Unmarshal(msg, &message); err != nil {
		return err
	}

	switch message.Type {
	case "editor-change":
		if !account.Permissions.Change {
			permissionError, _ := json.Marshal(fiber.Map{
				"type":  "error",
				"error": "You don't have permission to change!",
			})

			c.WriteMessage(mt, permissionError)
			return nil // Server doesn't care about permission errors
		}

		utils.ScheduleDebouncedLog(account.Username, filePath)

		utils.SendToAllExclude(filePath, mt, msg, c)
		return applyEditorChange(filePath, message.Change, &account)
	case "change-path":
		if !account.Permissions.ReadDirectories {
			permissionError, _ := json.Marshal(fiber.Map{
				"type":  "error",
				"error": "You don't have permission to read-directories!",
			})

			c.WriteMessage(mt, permissionError)
			return nil
		}

		path := config.Config.GetScopedFolder(account.Scope) + "/" + message.Path

		if !utils.IsSafePath(path) {
			c.Close()
			return fmt.Errorf("path traversal security issue")
		}

		fileStat, err := os.Stat(path)
		if err != nil {
			c.Close()
			return fmt.Errorf("unknown error")
		}

		return utils.ChangePath(c, path, fileStat.IsDir())
	case "unzip":
		if !account.Permissions.Extract {
			permissionError, _ := json.Marshal(fiber.Map{
				"type":  "error",
				"error": "You don't have permission to unzip!",
			})

			c.WriteMessage(mt, permissionError)
			return nil // Server doesn't care about permission errors