LPD-49016 Validate file mime type when uploading file as guest user

Author: carolmariaabb

modules/apps/dynamic-data-mapping/dynamic-data-mapping-form-web/src/main/java/com/liferay/dynamic/data/mapping/form/web/internal/portlet/action/UploadFileEntryMVCActionCommand.java

@@ -5,11 +5,14 @@
 
 package com.liferay.dynamic.data.mapping.form.web.internal.portlet.action;
 
+import com.liferay.document.library.configuration.DLFileEntryMimeTypeConfiguration;
 import com.liferay.document.library.kernel.exception.FileExtensionException;
+import com.liferay.document.library.kernel.exception.FileMimeTypeException;
 import com.liferay.document.library.kernel.exception.FileNameException;
 import com.liferay.document.library.kernel.exception.FileSizeException;
 import com.liferay.document.library.kernel.exception.InvalidFileException;
 import com.liferay.document.library.kernel.model.DLFileEntry;
+import com.liferay.document.library.kernel.util.DLValidator;
 import com.liferay.dynamic.data.mapping.constants.DDMActionKeys;
 import com.liferay.dynamic.data.mapping.constants.DDMFormConstants;
 import com.liferay.dynamic.data.mapping.constants.DDMPortletKeys;
@@ -22,6 +25,7 @@
 import com.liferay.object.model.ObjectFieldSetting;
 import com.liferay.object.service.ObjectFieldSettingLocalService;
 import com.liferay.petra.string.StringPool;
+import com.liferay.portal.configuration.module.configuration.ConfigurationProvider;
 import com.liferay.portal.kernel.exception.PortalException;
 import com.liferay.portal.kernel.io.unsync.UnsyncByteArrayInputStream;
 import com.liferay.portal.kernel.json.JSONObject;
@@ -96,6 +100,9 @@ protected void doProcessAction(
 	@Reference
 	private CompanyLocalService _companyLocalService;
 
+	@Reference
+	private ConfigurationProvider _configurationProvider;
+
 	private final DDMFormUploadFileEntryHandler _ddmFormUploadFileEntryHandler =
 		new DDMFormUploadFileEntryHandler();
 	private final DDMFormUploadResponseHandler _ddmFormUploadResponseHandler =
@@ -104,6 +111,9 @@ protected void doProcessAction(
 	@Reference(target = "(upload.response.handler.system.default=true)")
 	private UploadResponseHandler _defaultUploadResponseHandler;
 
+	@Reference
+	private DLValidator _dlValidator;
+
 	@Reference
 	private Language _language;
 
@@ -129,6 +139,10 @@ public FileEntry upload(UploadPortletRequest uploadPortletRequest)
 			File file = null;
 
 			try {
+				ThemeDisplay themeDisplay =
+					(ThemeDisplay)uploadPortletRequest.getAttribute(
+						WebKeys.THEME_DISPLAY);
+
 				InputStream inputStream = uploadPortletRequest.getFileAsStream(
 					"file");
 
@@ -140,6 +154,11 @@ public FileEntry upload(UploadPortletRequest uploadPortletRequest)
 
 				String fileName = uploadPortletRequest.getFileName("file");
 
+				String mimeType = MimeTypesUtil.getContentType(file, fileName);
+
+				_dlValidator.validateFileMimeType(
+					themeDisplay.getCompanyId(), mimeType);
+
 				DDMFormUploadValidator.validateFileSize(file, fileName);
 
 				long objectFieldId = ParamUtil.getLong(
@@ -155,9 +174,7 @@ public FileEntry upload(UploadPortletRequest uploadPortletRequest)
 					ParamUtil.getLong(uploadPortletRequest, "formInstanceId"),
 					ParamUtil.getLong(uploadPortletRequest, "groupId"),
 					ParamUtil.getLong(uploadPortletRequest, "folderId"), file,
-					fileName, MimeTypesUtil.getContentType(file, fileName),
-					(ThemeDisplay)uploadPortletRequest.getAttribute(
-						WebKeys.THEME_DISPLAY));
+					fileName, mimeType, themeDisplay);
 			}
 			finally {
 				FileUtil.delete(file);
@@ -252,6 +269,19 @@ public JSONObject onFailure(
 						DDMFormUploadValidator.getGuestUploadFileExtensions(),
 						StringPool.COMMA_AND_SPACE));
 			}
+			else if (portalException instanceof FileMimeTypeException) {
+				DLFileEntryMimeTypeConfiguration
+					dlFileEntryMimeTypeConfiguration =
+						_configurationProvider.getCompanyConfiguration(
+							DLFileEntryMimeTypeConfiguration.class,
+							themeDisplay.getCompanyId());
+
+				errorMessage = themeDisplay.translate(
+					"please-enter-a-file-with-a-valid-mime-type-x",
+					StringUtil.merge(
+						dlFileEntryMimeTypeConfiguration.fileMimeTypes(),
+						StringPool.COMMA_AND_SPACE));
+			}
 			else if (portalException instanceof FileNameException) {
 				errorMessage = themeDisplay.translate(
 					"please-enter-a-file-with-a-valid-file-name");