1 | /*!
|
---|
2 | * express
|
---|
3 | * Copyright(c) 2009-2013 TJ Holowaychuk
|
---|
4 | * Copyright(c) 2014-2015 Douglas Christopher Wilson
|
---|
5 | * MIT Licensed
|
---|
6 | */
|
---|
7 |
|
---|
8 | 'use strict';
|
---|
9 |
|
---|
10 | /**
|
---|
11 | * Module dependencies.
|
---|
12 | * @api private
|
---|
13 | */
|
---|
14 |
|
---|
15 | var Buffer = require('safe-buffer').Buffer
|
---|
16 | var contentDisposition = require('content-disposition');
|
---|
17 | var contentType = require('content-type');
|
---|
18 | var deprecate = require('depd')('express');
|
---|
19 | var flatten = require('array-flatten');
|
---|
20 | var mime = require('send').mime;
|
---|
21 | var etag = require('etag');
|
---|
22 | var proxyaddr = require('proxy-addr');
|
---|
23 | var qs = require('qs');
|
---|
24 | var querystring = require('querystring');
|
---|
25 |
|
---|
26 | /**
|
---|
27 | * Return strong ETag for `body`.
|
---|
28 | *
|
---|
29 | * @param {String|Buffer} body
|
---|
30 | * @param {String} [encoding]
|
---|
31 | * @return {String}
|
---|
32 | * @api private
|
---|
33 | */
|
---|
34 |
|
---|
35 | exports.etag = createETagGenerator({ weak: false })
|
---|
36 |
|
---|
37 | /**
|
---|
38 | * Return weak ETag for `body`.
|
---|
39 | *
|
---|
40 | * @param {String|Buffer} body
|
---|
41 | * @param {String} [encoding]
|
---|
42 | * @return {String}
|
---|
43 | * @api private
|
---|
44 | */
|
---|
45 |
|
---|
46 | exports.wetag = createETagGenerator({ weak: true })
|
---|
47 |
|
---|
48 | /**
|
---|
49 | * Check if `path` looks absolute.
|
---|
50 | *
|
---|
51 | * @param {String} path
|
---|
52 | * @return {Boolean}
|
---|
53 | * @api private
|
---|
54 | */
|
---|
55 |
|
---|
56 | exports.isAbsolute = function(path){
|
---|
57 | if ('/' === path[0]) return true;
|
---|
58 | if (':' === path[1] && ('\\' === path[2] || '/' === path[2])) return true; // Windows device path
|
---|
59 | if ('\\\\' === path.substring(0, 2)) return true; // Microsoft Azure absolute path
|
---|
60 | };
|
---|
61 |
|
---|
62 | /**
|
---|
63 | * Flatten the given `arr`.
|
---|
64 | *
|
---|
65 | * @param {Array} arr
|
---|
66 | * @return {Array}
|
---|
67 | * @api private
|
---|
68 | */
|
---|
69 |
|
---|
70 | exports.flatten = deprecate.function(flatten,
|
---|
71 | 'utils.flatten: use array-flatten npm module instead');
|
---|
72 |
|
---|
73 | /**
|
---|
74 | * Normalize the given `type`, for example "html" becomes "text/html".
|
---|
75 | *
|
---|
76 | * @param {String} type
|
---|
77 | * @return {Object}
|
---|
78 | * @api private
|
---|
79 | */
|
---|
80 |
|
---|
81 | exports.normalizeType = function(type){
|
---|
82 | return ~type.indexOf('/')
|
---|
83 | ? acceptParams(type)
|
---|
84 | : { value: mime.lookup(type), params: {} };
|
---|
85 | };
|
---|
86 |
|
---|
87 | /**
|
---|
88 | * Normalize `types`, for example "html" becomes "text/html".
|
---|
89 | *
|
---|
90 | * @param {Array} types
|
---|
91 | * @return {Array}
|
---|
92 | * @api private
|
---|
93 | */
|
---|
94 |
|
---|
95 | exports.normalizeTypes = function(types){
|
---|
96 | var ret = [];
|
---|
97 |
|
---|
98 | for (var i = 0; i < types.length; ++i) {
|
---|
99 | ret.push(exports.normalizeType(types[i]));
|
---|
100 | }
|
---|
101 |
|
---|
102 | return ret;
|
---|
103 | };
|
---|
104 |
|
---|
105 | /**
|
---|
106 | * Generate Content-Disposition header appropriate for the filename.
|
---|
107 | * non-ascii filenames are urlencoded and a filename* parameter is added
|
---|
108 | *
|
---|
109 | * @param {String} filename
|
---|
110 | * @return {String}
|
---|
111 | * @api private
|
---|
112 | */
|
---|
113 |
|
---|
114 | exports.contentDisposition = deprecate.function(contentDisposition,
|
---|
115 | 'utils.contentDisposition: use content-disposition npm module instead');
|
---|
116 |
|
---|
117 | /**
|
---|
118 | * Parse accept params `str` returning an
|
---|
119 | * object with `.value`, `.quality` and `.params`.
|
---|
120 | * also includes `.originalIndex` for stable sorting
|
---|
121 | *
|
---|
122 | * @param {String} str
|
---|
123 | * @return {Object}
|
---|
124 | * @api private
|
---|
125 | */
|
---|
126 |
|
---|
127 | function acceptParams(str, index) {
|
---|
128 | var parts = str.split(/ *; */);
|
---|
129 | var ret = { value: parts[0], quality: 1, params: {}, originalIndex: index };
|
---|
130 |
|
---|
131 | for (var i = 1; i < parts.length; ++i) {
|
---|
132 | var pms = parts[i].split(/ *= */);
|
---|
133 | if ('q' === pms[0]) {
|
---|
134 | ret.quality = parseFloat(pms[1]);
|
---|
135 | } else {
|
---|
136 | ret.params[pms[0]] = pms[1];
|
---|
137 | }
|
---|
138 | }
|
---|
139 |
|
---|
140 | return ret;
|
---|
141 | }
|
---|
142 |
|
---|
143 | /**
|
---|
144 | * Compile "etag" value to function.
|
---|
145 | *
|
---|
146 | * @param {Boolean|String|Function} val
|
---|
147 | * @return {Function}
|
---|
148 | * @api private
|
---|
149 | */
|
---|
150 |
|
---|
151 | exports.compileETag = function(val) {
|
---|
152 | var fn;
|
---|
153 |
|
---|
154 | if (typeof val === 'function') {
|
---|
155 | return val;
|
---|
156 | }
|
---|
157 |
|
---|
158 | switch (val) {
|
---|
159 | case true:
|
---|
160 | fn = exports.wetag;
|
---|
161 | break;
|
---|
162 | case false:
|
---|
163 | break;
|
---|
164 | case 'strong':
|
---|
165 | fn = exports.etag;
|
---|
166 | break;
|
---|
167 | case 'weak':
|
---|
168 | fn = exports.wetag;
|
---|
169 | break;
|
---|
170 | default:
|
---|
171 | throw new TypeError('unknown value for etag function: ' + val);
|
---|
172 | }
|
---|
173 |
|
---|
174 | return fn;
|
---|
175 | }
|
---|
176 |
|
---|
177 | /**
|
---|
178 | * Compile "query parser" value to function.
|
---|
179 | *
|
---|
180 | * @param {String|Function} val
|
---|
181 | * @return {Function}
|
---|
182 | * @api private
|
---|
183 | */
|
---|
184 |
|
---|
185 | exports.compileQueryParser = function compileQueryParser(val) {
|
---|
186 | var fn;
|
---|
187 |
|
---|
188 | if (typeof val === 'function') {
|
---|
189 | return val;
|
---|
190 | }
|
---|
191 |
|
---|
192 | switch (val) {
|
---|
193 | case true:
|
---|
194 | fn = querystring.parse;
|
---|
195 | break;
|
---|
196 | case false:
|
---|
197 | fn = newObject;
|
---|
198 | break;
|
---|
199 | case 'extended':
|
---|
200 | fn = parseExtendedQueryString;
|
---|
201 | break;
|
---|
202 | case 'simple':
|
---|
203 | fn = querystring.parse;
|
---|
204 | break;
|
---|
205 | default:
|
---|
206 | throw new TypeError('unknown value for query parser function: ' + val);
|
---|
207 | }
|
---|
208 |
|
---|
209 | return fn;
|
---|
210 | }
|
---|
211 |
|
---|
212 | /**
|
---|
213 | * Compile "proxy trust" value to function.
|
---|
214 | *
|
---|
215 | * @param {Boolean|String|Number|Array|Function} val
|
---|
216 | * @return {Function}
|
---|
217 | * @api private
|
---|
218 | */
|
---|
219 |
|
---|
220 | exports.compileTrust = function(val) {
|
---|
221 | if (typeof val === 'function') return val;
|
---|
222 |
|
---|
223 | if (val === true) {
|
---|
224 | // Support plain true/false
|
---|
225 | return function(){ return true };
|
---|
226 | }
|
---|
227 |
|
---|
228 | if (typeof val === 'number') {
|
---|
229 | // Support trusting hop count
|
---|
230 | return function(a, i){ return i < val };
|
---|
231 | }
|
---|
232 |
|
---|
233 | if (typeof val === 'string') {
|
---|
234 | // Support comma-separated values
|
---|
235 | val = val.split(/ *, */);
|
---|
236 | }
|
---|
237 |
|
---|
238 | return proxyaddr.compile(val || []);
|
---|
239 | }
|
---|
240 |
|
---|
241 | /**
|
---|
242 | * Set the charset in a given Content-Type string.
|
---|
243 | *
|
---|
244 | * @param {String} type
|
---|
245 | * @param {String} charset
|
---|
246 | * @return {String}
|
---|
247 | * @api private
|
---|
248 | */
|
---|
249 |
|
---|
250 | exports.setCharset = function setCharset(type, charset) {
|
---|
251 | if (!type || !charset) {
|
---|
252 | return type;
|
---|
253 | }
|
---|
254 |
|
---|
255 | // parse type
|
---|
256 | var parsed = contentType.parse(type);
|
---|
257 |
|
---|
258 | // set charset
|
---|
259 | parsed.parameters.charset = charset;
|
---|
260 |
|
---|
261 | // format type
|
---|
262 | return contentType.format(parsed);
|
---|
263 | };
|
---|
264 |
|
---|
265 | /**
|
---|
266 | * Create an ETag generator function, generating ETags with
|
---|
267 | * the given options.
|
---|
268 | *
|
---|
269 | * @param {object} options
|
---|
270 | * @return {function}
|
---|
271 | * @private
|
---|
272 | */
|
---|
273 |
|
---|
274 | function createETagGenerator (options) {
|
---|
275 | return function generateETag (body, encoding) {
|
---|
276 | var buf = !Buffer.isBuffer(body)
|
---|
277 | ? Buffer.from(body, encoding)
|
---|
278 | : body
|
---|
279 |
|
---|
280 | return etag(buf, options)
|
---|
281 | }
|
---|
282 | }
|
---|
283 |
|
---|
284 | /**
|
---|
285 | * Parse an extended query string with qs.
|
---|
286 | *
|
---|
287 | * @return {Object}
|
---|
288 | * @private
|
---|
289 | */
|
---|
290 |
|
---|
291 | function parseExtendedQueryString(str) {
|
---|
292 | return qs.parse(str, {
|
---|
293 | allowPrototypes: true
|
---|
294 | });
|
---|
295 | }
|
---|
296 |
|
---|
297 | /**
|
---|
298 | * Return new empty object.
|
---|
299 | *
|
---|
300 | * @return {Object}
|
---|
301 | * @api private
|
---|
302 | */
|
---|
303 |
|
---|
304 | function newObject() {
|
---|
305 | return {};
|
---|
306 | }
|
---|