Merge pull request #2545 from bbielsa/csv-subscriptions-import

Add CSV Subscriptions Import

2 files changed, 42 insertions, 3 deletions

diff --git a/src/invidious.cr b/src/invidious.cr
index fb67af87..7a324bd1 100644
--- a/src/invidious.cr
+++ b/src/invidious.cr
@@ -746,6 +746,8 @@ post "/data_control" do |env|
 
     HTTP::FormData.parse(env.request) do |part|
       body = part.body.gets_to_end
+      type = part.headers["Content-Type"]
+
       next if body.empty?
 
       # TODO: Unify into single import based on content-type
@@ -816,19 +818,29 @@ post "/data_control" do |env|
           end
         end
       when "import_youtube"
-        if body[0..4] == "<opml"
+        filename = part.filename || ""
+        extension = filename.split(".").last
+
+        if extension == "xml" || type == "application/xml" || type == "text/xml"
           subscriptions = XML.parse(body)
           user.subscriptions += subscriptions.xpath_nodes(%q(//outline[@type="rss"])).map do |channel|
             channel["xmlUrl"].match(/UC[a-zA-Z0-9_-]{22}/).not_nil![0]
           end
-        else
+        elsif extension == "json" || type == "application/json"
           subscriptions = JSON.parse(body)
           user.subscriptions += subscriptions.as_a.compact_map do |entry|
             entry["snippet"]["resourceId"]["channelId"].as_s
           end
+        elsif extension == "csv" || type == "text/csv"
+          subscriptions = parse_subscription_export_csv(body)
+          user.subscriptions += subscriptions
+        else
+          halt(env, status_code: 415,
+            response: error_template(415, "Invalid subscription file uploaded")
+          )
         end
-        user.subscriptions.uniq!
 
+        user.subscriptions.uniq!
         user.subscriptions = get_batch_channels(user.subscriptions, false, false)
 
         Invidious::Database::Users.update_subscriptions(user)
diff --git a/src/invidious/user/imports.cr b/src/invidious/user/imports.cr
new file mode 100644
index 00000000..2ae1dcb1
--- /dev/null
+++ b/src/invidious/user/imports.cr
@@ -0,0 +1,27 @@
+require "csv"
+
+def parse_subscription_export_csv(csv_content : String)
+  rows = CSV.new(csv_content, headers: true)
+  subscriptions = Array(String).new
+
+  # Counter to limit the amount of imports.
+  # This is intended to prevent DoS.
+  row_counter = 0
+
+  rows.each do |row|
+    # Limit to 1200
+    row_counter += 1
+    break if row_counter > 1_200
+
+    # Channel ID is the first column in the csv export we can't use the header
+    # name, because the header name is localized depending on the
+    # language the user has set on their account
+    channel_id = row[0].strip
+
+    next if channel_id.empty?
+
+    subscriptions << channel_id
+  end
+
+  return subscriptions
+end