Changeset 11887 for main/waeup.kwarapoly/trunk/src/waeup/kwarapoly/browser

Timestamp:

28 Oct 2014, 17:48:22 (10 years ago)

Author:

uli

Message:

Merge uli-pdfsigs back into trunk.

Location:

main/waeup.kwarapoly/trunk

Files:

• . (modified) (1 prop)
• src/waeup/kwarapoly (modified) (1 prop)
• src/waeup/kwarapoly/browser/pdf.py (modified) (2 diffs)
• src/waeup/kwarapoly/browser/static/pdf_signature.png (copied) (copied from main/waeup.kwarapoly/branches/uli-pdfsigs/src/waeup/kwarapoly/browser/static/pdf_signature.png)

main/waeup.kwarapoly/trunk/src/waeup/kwarapoly/browser/pdf.py

@@ -21 +21 @@
 
 import os
+from string import Template
 from waeup.kofa.browser.pdf import PDFCreator
 
@@ -34 +35 @@
     #watermark_pos = [-25, 100]
     logo_pos = [507, 740, 70]
+
+    signature_img_path = os.path.join(
+        os.path.dirname(__file__), 'static', 'pdf_signature.png')
+
+    def substitute_markers(self, text):
+        """If `text` contains some marker, substitute it.
+
+        Markers are standard library string template placeholders. See
+        https://docs.python.org/2/library/string.html and
+        `string.Template` for details. Roughly, placeholders look like
+        ``${some_marker}``.
+
+        Valid markers:
+           ``signature_img_path`` -- path to signature image stored in
+                                     `signature_img_path`` attribute.
+        """
+        text = Template(text)
+        return text.safe_substitute(
+            {
+                'signature_img_path': self.signature_img_path,
+                }
+            )
+
+    def create_pdf(self, *args, **kw):
+        """Create PDF from args and keywords.
+
+        Unlike the base method, we mangle any `notes` keyword and
+        substitute any valid placeholder strings in it. See
+        `substitute_markers` for a list of valid placeholders.
+
+        XXX: This is only a quick, dirty hack, that should not appear
+             in this package. Instead it should be moved to the
+             waeup.kofa basepackage.
+
+        Please note: string substitution like this can introduce nasty
+        security holes. For instance all dynamic input in `notes` must
+        be cleaned up and placeholder expressions should be removed
+        from it before using it in `note`.
+
+        Also, `note` is clearly misused in this case. We might want to
+        look for a more general approach, maybe z3c.rml?
+        """
+        if 'note' in kw.keys() and kw['note'] is not None:
+            kw['note'] = self.substitute_markers(kw['note'])
+        return super(CustomPDFCreator, self).create_pdf(*args, **kw)