Merge pull request #36016 from nextcloud/enh/noid/opengraph-link-reference-limits

Add restrictions when downloading to resolve with opengraph link provider

Author: szaimen

lib/private/Collaboration/Reference/LinkReferenceProvider.php

@@ -104,6 +104,22 @@ private function fetchReference(Reference $reference): void {
 		}
 
 		$client = $this->clientService->newClient();
+		try {
+			$headResponse = $client->head($reference->getId(), [ 'timeout' => 10 ]);
+		} catch (\Exception $e) {
+			$this->logger->debug('Failed to perform HEAD request to get target metadata', ['exception' => $e]);
+			return;
+		}
+		$linkContentLength = $headResponse->getHeader('Content-Length');
+		if (is_numeric($linkContentLength) && (int) $linkContentLength > 5 * 1024 * 1024) {
+			$this->logger->debug('Skip resolving links pointing to content length > 5 MB');
+			return;
+		}
+		$linkContentType = $headResponse->getHeader('Content-Type');
+		if ($linkContentType !== 'text/html') {
+			$this->logger->debug('Skip resolving links pointing to content type that is not "text/html"');
+			return;
+		}
 		try {
 			$response = $client->get($reference->getId(), [ 'timeout' => 10 ]);
 		} catch (\Exception $e) {