import { WebApp } from 'meteor/webapp'; import { Uploads } from '../../../models'; import { FileUpload } from './FileUpload'; WebApp.connectHandlers.use('/file-upload/', function(req, res, next) { const match = /^\/([^\/]+)\/(.*)/.exec(req.url); if (match[1]) { const file = Uploads.findOneById(match[1]); if (file) { if (!FileUpload.requestCanAccessFiles(req)) { res.writeHead(403); return res.end(); } res.setHeader('Content-Security-Policy', 'default-src \'none\''); return FileUpload.get(file, req, res, next); } } res.writeHead(404); res.end(); });