class ThemeController < ContentController caches_page :stylesheets, :javascript, :images session :off def stylesheets render_theme_item(:stylesheets, params[:filename], 'text/css; charset=utf-8') end def javascript render_theme_item(:javascript, params[:filename], 'text/javascript; charset=utf-8') end def images render_theme_item(:images, params[:filename]) end def error render :nothing => true, :status => 404 end def static_view_test end private def render_theme_item(type, file, mime = nil) mime ||= mime_for(file) if file.split(%r{[\\/]}).include?("..") render :text => "Not Found", :status => 404 return end send_file(this_blog.current_theme.path + "/#{type}/#{file}", :type => mime, :disposition => 'inline', :stream => false) end def mime_for(filename) case filename.downcase when /\.js$/ 'text/javascript' when /\.css$/ 'text/css' when /\.gif$/ 'image/gif' when /(\.jpg|\.jpeg)$/ 'image/jpeg' when /\.png$/ 'image/png' when /\.swf$/ 'application/x-shockwave-flash' else 'application/binary' end end end