* ``` * * @see https://docs.typo3.org/permalink/t3viewhelper:typo3-backend-loginlogo * @internal */ final class LoginLogoViewHelper extends AbstractViewHelper { /** * @var bool */ protected $escapeOutput = false; protected AuthenticationStyleInformation $authenticationStyleInformation; protected PageRenderer $pageRenderer; protected SvgSanitizer $svgSanitizer; protected CacheManager $cacheManager; protected PackageDependentCacheIdentifier $packageDependentCacheIdentifier; public function injectAuthenticationStyleInformation(AuthenticationStyleInformation $authenticationStyleInformation): void { $this->authenticationStyleInformation = $authenticationStyleInformation; } public function injectPageRenderer(PageRenderer $pageRenderer): void { $this->pageRenderer = $pageRenderer; } public function injectSvgSanitizer(SvgSanitizer $svgSanitizer): void { $this->svgSanitizer = $svgSanitizer; } public function injectPackageDependentCacheIdentifier(PackageDependentCacheIdentifier $packageDependentCacheIdentifier): void { $this->packageDependentCacheIdentifier = $packageDependentCacheIdentifier; } public function injectCacheManager(CacheManager $cacheManager): void { $this->cacheManager = $cacheManager; } public function render(): string { $languageService = $this->getLanguageService(); if (($filepath = $this->authenticationStyleInformation->getLogo()) !== '') { $alternativeText = $this->authenticationStyleInformation->getLogoAlt() ?: $languageService->sL('LLL:EXT:backend/Resources/Private/Language/locallang_login.xlf:typo3.altText'); } else { $filepath = $this->authenticationStyleInformation->getDefaultLogo(); $alternativeText = $languageService->sL('LLL:EXT:backend/Resources/Private/Language/locallang_login.xlf:typo3.altText'); } if (($renderedSvg = $this->getInlineSvg($filepath)) !== null) { return $renderedSvg; } $uri = $this->authenticationStyleInformation->getUriForFileName($filepath); return $this->renderImage($uri, $alternativeText); } protected function renderImage(string $uri, string $alt): string { return sprintf('', GeneralUtility::implodeAttributes([ 'src' => $uri, 'alt' => $alt, ], true)); } protected function getInlineSvg(string $filepath): ?string { $cacheIdentifier = $this->packageDependentCacheIdentifier ->withPrefix('LoginLogo') ->withAdditionalHashedIdentifier($filepath) ->toString(); $cache = $this->cacheManager->getCache('assets'); if ($cache->has($cacheIdentifier)) { return $cache->get($cacheIdentifier); } $svgContent = $this->parseSvg($filepath); $cache->set($cacheIdentifier, $svgContent); return $svgContent; } protected function parseSvg(string $filepath): ?string { if (!str_ends_with($filepath, '.svg')) { return null; } // Check if it's a URL if (preg_match('/^(https?:)?\/\//', $filepath)) { return null; } $absoluteFilePath = GeneralUtility::getFileAbsFileName(ltrim($filepath, '/')); if (!file_exists($absoluteFilePath)) { return null; } $svgContent = file_get_contents($absoluteFilePath); if ($svgContent === false) { return null; } // SVG is sanitized, because login screen needs increased security precautions $svgContent = $this->svgSanitizer->sanitizeContent($svgContent); if (!$svgContent) { return null; } $domXml = new \DOMDocument(); if (!$domXml->loadXML($svgContent)) { return null; } // @todo: move link-removal into a configurable svg-sanitizer option $xpath = new \DOMXPath($domXml); $links = $xpath->query('//*[local-name()="a"]'); foreach ($links as $link) { if ($link instanceof \DOMElement) { $link->remove(); } } // Remove SVG xmlns which is not needed in HTML5, as HTML5 imports SVG into it's namespace $svgElement = $domXml->documentElement; $svgElement->removeAttributeNS('http://www.w3.org/2000/svg', ''); if ($svgElement->hasAttribute('version')) { $svgElement->removeAttribute('version'); } if (!$svgElement->hasAttribute('viewBox') && $svgElement->hasAttribute('width') && $svgElement->hasAttribute('height')) { $svgElement->setAttribute('viewBox', sprintf('0 0 %d %d', (int)$svgElement->getAttribute('width'), (int)$svgElement->getAttribute('height'))); } $svgElement->setAttribute('aria-hidden', 'true'); return $domXml->saveXML($svgElement); } protected function getLanguageService(): LanguageService { return $GLOBALS['LANG']; } }