[d24f17c] | 1 | /*!
|
---|
| 2 | * express
|
---|
| 3 | * Copyright(c) 2009-2013 TJ Holowaychuk
|
---|
| 4 | * Copyright(c) 2014-2015 Douglas Christopher Wilson
|
---|
| 5 | * MIT Licensed
|
---|
| 6 | */
|
---|
| 7 |
|
---|
| 8 | 'use strict';
|
---|
| 9 |
|
---|
| 10 | /**
|
---|
| 11 | * Module dependencies.
|
---|
| 12 | * @api private
|
---|
| 13 | */
|
---|
| 14 |
|
---|
| 15 | var Buffer = require('safe-buffer').Buffer
|
---|
| 16 | var contentDisposition = require('content-disposition');
|
---|
| 17 | var contentType = require('content-type');
|
---|
| 18 | var deprecate = require('depd')('express');
|
---|
| 19 | var flatten = require('array-flatten');
|
---|
| 20 | var mime = require('send').mime;
|
---|
| 21 | var etag = require('etag');
|
---|
| 22 | var proxyaddr = require('proxy-addr');
|
---|
| 23 | var qs = require('qs');
|
---|
| 24 | var querystring = require('querystring');
|
---|
| 25 |
|
---|
| 26 | /**
|
---|
| 27 | * Return strong ETag for `body`.
|
---|
| 28 | *
|
---|
| 29 | * @param {String|Buffer} body
|
---|
| 30 | * @param {String} [encoding]
|
---|
| 31 | * @return {String}
|
---|
| 32 | * @api private
|
---|
| 33 | */
|
---|
| 34 |
|
---|
| 35 | exports.etag = createETagGenerator({ weak: false })
|
---|
| 36 |
|
---|
| 37 | /**
|
---|
| 38 | * Return weak ETag for `body`.
|
---|
| 39 | *
|
---|
| 40 | * @param {String|Buffer} body
|
---|
| 41 | * @param {String} [encoding]
|
---|
| 42 | * @return {String}
|
---|
| 43 | * @api private
|
---|
| 44 | */
|
---|
| 45 |
|
---|
| 46 | exports.wetag = createETagGenerator({ weak: true })
|
---|
| 47 |
|
---|
| 48 | /**
|
---|
| 49 | * Check if `path` looks absolute.
|
---|
| 50 | *
|
---|
| 51 | * @param {String} path
|
---|
| 52 | * @return {Boolean}
|
---|
| 53 | * @api private
|
---|
| 54 | */
|
---|
| 55 |
|
---|
| 56 | exports.isAbsolute = function(path){
|
---|
| 57 | if ('/' === path[0]) return true;
|
---|
| 58 | if (':' === path[1] && ('\\' === path[2] || '/' === path[2])) return true; // Windows device path
|
---|
| 59 | if ('\\\\' === path.substring(0, 2)) return true; // Microsoft Azure absolute path
|
---|
| 60 | };
|
---|
| 61 |
|
---|
| 62 | /**
|
---|
| 63 | * Flatten the given `arr`.
|
---|
| 64 | *
|
---|
| 65 | * @param {Array} arr
|
---|
| 66 | * @return {Array}
|
---|
| 67 | * @api private
|
---|
| 68 | */
|
---|
| 69 |
|
---|
| 70 | exports.flatten = deprecate.function(flatten,
|
---|
| 71 | 'utils.flatten: use array-flatten npm module instead');
|
---|
| 72 |
|
---|
| 73 | /**
|
---|
| 74 | * Normalize the given `type`, for example "html" becomes "text/html".
|
---|
| 75 | *
|
---|
| 76 | * @param {String} type
|
---|
| 77 | * @return {Object}
|
---|
| 78 | * @api private
|
---|
| 79 | */
|
---|
| 80 |
|
---|
| 81 | exports.normalizeType = function(type){
|
---|
| 82 | return ~type.indexOf('/')
|
---|
| 83 | ? acceptParams(type)
|
---|
| 84 | : { value: mime.lookup(type), params: {} };
|
---|
| 85 | };
|
---|
| 86 |
|
---|
| 87 | /**
|
---|
| 88 | * Normalize `types`, for example "html" becomes "text/html".
|
---|
| 89 | *
|
---|
| 90 | * @param {Array} types
|
---|
| 91 | * @return {Array}
|
---|
| 92 | * @api private
|
---|
| 93 | */
|
---|
| 94 |
|
---|
| 95 | exports.normalizeTypes = function(types){
|
---|
| 96 | var ret = [];
|
---|
| 97 |
|
---|
| 98 | for (var i = 0; i < types.length; ++i) {
|
---|
| 99 | ret.push(exports.normalizeType(types[i]));
|
---|
| 100 | }
|
---|
| 101 |
|
---|
| 102 | return ret;
|
---|
| 103 | };
|
---|
| 104 |
|
---|
| 105 | /**
|
---|
| 106 | * Generate Content-Disposition header appropriate for the filename.
|
---|
| 107 | * non-ascii filenames are urlencoded and a filename* parameter is added
|
---|
| 108 | *
|
---|
| 109 | * @param {String} filename
|
---|
| 110 | * @return {String}
|
---|
| 111 | * @api private
|
---|
| 112 | */
|
---|
| 113 |
|
---|
| 114 | exports.contentDisposition = deprecate.function(contentDisposition,
|
---|
| 115 | 'utils.contentDisposition: use content-disposition npm module instead');
|
---|
| 116 |
|
---|
| 117 | /**
|
---|
| 118 | * Parse accept params `str` returning an
|
---|
| 119 | * object with `.value`, `.quality` and `.params`.
|
---|
| 120 | * also includes `.originalIndex` for stable sorting
|
---|
| 121 | *
|
---|
| 122 | * @param {String} str
|
---|
| 123 | * @param {Number} index
|
---|
| 124 | * @return {Object}
|
---|
| 125 | * @api private
|
---|
| 126 | */
|
---|
| 127 |
|
---|
| 128 | function acceptParams(str, index) {
|
---|
| 129 | var parts = str.split(/ *; */);
|
---|
| 130 | var ret = { value: parts[0], quality: 1, params: {}, originalIndex: index };
|
---|
| 131 |
|
---|
| 132 | for (var i = 1; i < parts.length; ++i) {
|
---|
| 133 | var pms = parts[i].split(/ *= */);
|
---|
| 134 | if ('q' === pms[0]) {
|
---|
| 135 | ret.quality = parseFloat(pms[1]);
|
---|
| 136 | } else {
|
---|
| 137 | ret.params[pms[0]] = pms[1];
|
---|
| 138 | }
|
---|
| 139 | }
|
---|
| 140 |
|
---|
| 141 | return ret;
|
---|
| 142 | }
|
---|
| 143 |
|
---|
| 144 | /**
|
---|
| 145 | * Compile "etag" value to function.
|
---|
| 146 | *
|
---|
| 147 | * @param {Boolean|String|Function} val
|
---|
| 148 | * @return {Function}
|
---|
| 149 | * @api private
|
---|
| 150 | */
|
---|
| 151 |
|
---|
| 152 | exports.compileETag = function(val) {
|
---|
| 153 | var fn;
|
---|
| 154 |
|
---|
| 155 | if (typeof val === 'function') {
|
---|
| 156 | return val;
|
---|
| 157 | }
|
---|
| 158 |
|
---|
| 159 | switch (val) {
|
---|
| 160 | case true:
|
---|
| 161 | case 'weak':
|
---|
| 162 | fn = exports.wetag;
|
---|
| 163 | break;
|
---|
| 164 | case false:
|
---|
| 165 | break;
|
---|
| 166 | case 'strong':
|
---|
| 167 | fn = exports.etag;
|
---|
| 168 | break;
|
---|
| 169 | default:
|
---|
| 170 | throw new TypeError('unknown value for etag function: ' + val);
|
---|
| 171 | }
|
---|
| 172 |
|
---|
| 173 | return fn;
|
---|
| 174 | }
|
---|
| 175 |
|
---|
| 176 | /**
|
---|
| 177 | * Compile "query parser" value to function.
|
---|
| 178 | *
|
---|
| 179 | * @param {String|Function} val
|
---|
| 180 | * @return {Function}
|
---|
| 181 | * @api private
|
---|
| 182 | */
|
---|
| 183 |
|
---|
| 184 | exports.compileQueryParser = function compileQueryParser(val) {
|
---|
| 185 | var fn;
|
---|
| 186 |
|
---|
| 187 | if (typeof val === 'function') {
|
---|
| 188 | return val;
|
---|
| 189 | }
|
---|
| 190 |
|
---|
| 191 | switch (val) {
|
---|
| 192 | case true:
|
---|
| 193 | case 'simple':
|
---|
| 194 | fn = querystring.parse;
|
---|
| 195 | break;
|
---|
| 196 | case false:
|
---|
| 197 | fn = newObject;
|
---|
| 198 | break;
|
---|
| 199 | case 'extended':
|
---|
| 200 | fn = parseExtendedQueryString;
|
---|
| 201 | break;
|
---|
| 202 | default:
|
---|
| 203 | throw new TypeError('unknown value for query parser function: ' + val);
|
---|
| 204 | }
|
---|
| 205 |
|
---|
| 206 | return fn;
|
---|
| 207 | }
|
---|
| 208 |
|
---|
| 209 | /**
|
---|
| 210 | * Compile "proxy trust" value to function.
|
---|
| 211 | *
|
---|
| 212 | * @param {Boolean|String|Number|Array|Function} val
|
---|
| 213 | * @return {Function}
|
---|
| 214 | * @api private
|
---|
| 215 | */
|
---|
| 216 |
|
---|
| 217 | exports.compileTrust = function(val) {
|
---|
| 218 | if (typeof val === 'function') return val;
|
---|
| 219 |
|
---|
| 220 | if (val === true) {
|
---|
| 221 | // Support plain true/false
|
---|
| 222 | return function(){ return true };
|
---|
| 223 | }
|
---|
| 224 |
|
---|
| 225 | if (typeof val === 'number') {
|
---|
| 226 | // Support trusting hop count
|
---|
| 227 | return function(a, i){ return i < val };
|
---|
| 228 | }
|
---|
| 229 |
|
---|
| 230 | if (typeof val === 'string') {
|
---|
| 231 | // Support comma-separated values
|
---|
| 232 | val = val.split(',')
|
---|
| 233 | .map(function (v) { return v.trim() })
|
---|
| 234 | }
|
---|
| 235 |
|
---|
| 236 | return proxyaddr.compile(val || []);
|
---|
| 237 | }
|
---|
| 238 |
|
---|
| 239 | /**
|
---|
| 240 | * Set the charset in a given Content-Type string.
|
---|
| 241 | *
|
---|
| 242 | * @param {String} type
|
---|
| 243 | * @param {String} charset
|
---|
| 244 | * @return {String}
|
---|
| 245 | * @api private
|
---|
| 246 | */
|
---|
| 247 |
|
---|
| 248 | exports.setCharset = function setCharset(type, charset) {
|
---|
| 249 | if (!type || !charset) {
|
---|
| 250 | return type;
|
---|
| 251 | }
|
---|
| 252 |
|
---|
| 253 | // parse type
|
---|
| 254 | var parsed = contentType.parse(type);
|
---|
| 255 |
|
---|
| 256 | // set charset
|
---|
| 257 | parsed.parameters.charset = charset;
|
---|
| 258 |
|
---|
| 259 | // format type
|
---|
| 260 | return contentType.format(parsed);
|
---|
| 261 | };
|
---|
| 262 |
|
---|
| 263 | /**
|
---|
| 264 | * Create an ETag generator function, generating ETags with
|
---|
| 265 | * the given options.
|
---|
| 266 | *
|
---|
| 267 | * @param {object} options
|
---|
| 268 | * @return {function}
|
---|
| 269 | * @private
|
---|
| 270 | */
|
---|
| 271 |
|
---|
| 272 | function createETagGenerator (options) {
|
---|
| 273 | return function generateETag (body, encoding) {
|
---|
| 274 | var buf = !Buffer.isBuffer(body)
|
---|
| 275 | ? Buffer.from(body, encoding)
|
---|
| 276 | : body
|
---|
| 277 |
|
---|
| 278 | return etag(buf, options)
|
---|
| 279 | }
|
---|
| 280 | }
|
---|
| 281 |
|
---|
| 282 | /**
|
---|
| 283 | * Parse an extended query string with qs.
|
---|
| 284 | *
|
---|
| 285 | * @return {Object}
|
---|
| 286 | * @private
|
---|
| 287 | */
|
---|
| 288 |
|
---|
| 289 | function parseExtendedQueryString(str) {
|
---|
| 290 | return qs.parse(str, {
|
---|
| 291 | allowPrototypes: true
|
---|
| 292 | });
|
---|
| 293 | }
|
---|
| 294 |
|
---|
| 295 | /**
|
---|
| 296 | * Return new empty object.
|
---|
| 297 | *
|
---|
| 298 | * @return {Object}
|
---|
| 299 | * @api private
|
---|
| 300 | */
|
---|
| 301 |
|
---|
| 302 | function newObject() {
|
---|
| 303 | return {};
|
---|
| 304 | }
|
---|