src/EventListener/CsvSanitizerListener.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use Symfony\Component\HttpKernel\Event\RequestEvent;
  6. use Symfony\Component\HttpFoundation\File\UploadedFile;
  7. use App\Config;
  10. class CsvSanitizerListener
  11. {
  12.     public function onKernelRequest(RequestEvent $event)
  13.     {
  14.         $request = $event->getRequest();
  15.         $route = $request->attributes->get('_route');
  17.         // Check if the request matches one of the target routes
  18.         if (!in_array($route, Config::CSV_SANITIZATION_TARGET_ROUTES)) {
  19.             return;
  20.         }
  22.         $csvFile = $request->files->get('file');
  24.         if ($csvFile instanceof UploadedFile && $csvFile->getClientMimeType() === 'text/csv') {
  26.             // Read the CSV file content
  27.             $csvContent = file_get_contents($csvFile->getPathname());
  29.             // Sanitize the CSV content
  30.             $sanitizedCsvContent = $this->sanitizeCsv($csvContent);
  32.             // Save the sanitized content to a temporary file
  33.             $tempFilePath = tempnam(sys_get_temp_dir(), 'sanitized_csv');
  34.             file_put_contents($tempFilePath, $sanitizedCsvContent);
  36.             // Replace the original file with the sanitized one in the request
  37.             $request->files->set('file', new \Symfony\Component\HttpFoundation\File\UploadedFile(
  38.                 $tempFilePath,
  39.                 $csvFile->getClientOriginalName(),
  40.                 $csvFile->getClientMimeType(),
  41.                 null,
  42.                 true
  43.             ));
  44.         }
  45.     }
  46.     private function sanitizeCsv(string $csvContent): string
  47.     {
  48.         // Remove BOM if it exists
  49.         $bom = pack('H*', 'EFBBBF');
  50.         $csvContent = preg_replace("/^$bom/", '', $csvContent);
  52.         $lines = explode(PHP_EOL, $csvContent);
  54.         // Use array_filter with a more comprehensive condition
  55.         $sanitizedLines = array_filter($lines, function($line) {
  56.             // Trim the line and check if it is empty or contains only commas and whitespace
  57.             $trimmedLine = trim($line);
  58.             return $trimmedLine !== '' && !preg_match('/^,+$/', $trimmedLine);
  59.         });
  61.         return implode(PHP_EOL, $sanitizedLines);
  62.     }
  63. }