df378d33ef
Some checks failed
CI / go (push) Waiting to run
CI / docker (push) Waiting to run
CI / lint-go (push) Waiting to run
CI / lint-docs (push) Waiting to run
CI / check-paperclip (push) Waiting to run
Deploy static site / Deploy to GitHub Pages (push) Has been cancelled
Deploy static site / Deploy via Docker to hatch.surf (push) Has been cancelled
Resolved conflicts by taking GitHub versions for: - .dockerignore, .gitignore, Dockerfile, README.md, docker-compose.yml Kept deploy.sh updated to: - Pull from GitHub (primary source) - Push to Gitea (push-mirror) - Build from site/ directory (GitHub structure) Co-Authored-By: Paperclip <noreply@paperclip.ing>
71 lines
1.8 KiB
JavaScript
71 lines
1.8 KiB
JavaScript
/*
|
|
MIT License http://www.opensource.org/licenses/mit-license.php
|
|
Author Ivan Kopeykin @vankop
|
|
*/
|
|
|
|
"use strict";
|
|
|
|
/** @typedef {import("./Resolver")} Resolver */
|
|
/** @typedef {import("./Resolver").ResolveStepHook} ResolveStepHook */
|
|
|
|
const slashCode = "/".charCodeAt(0);
|
|
const backslashCode = "\\".charCodeAt(0);
|
|
|
|
/**
|
|
* @param {string} path path
|
|
* @param {string} parent parent path
|
|
* @returns {boolean} true, if path is inside of parent
|
|
*/
|
|
const isInside = (path, parent) => {
|
|
if (!path.startsWith(parent)) return false;
|
|
if (path.length === parent.length) return true;
|
|
const charCode = path.charCodeAt(parent.length);
|
|
return charCode === slashCode || charCode === backslashCode;
|
|
};
|
|
|
|
module.exports = class RestrictionsPlugin {
|
|
/**
|
|
* @param {string | ResolveStepHook} source source
|
|
* @param {Set<string | RegExp>} restrictions restrictions
|
|
*/
|
|
constructor(source, restrictions) {
|
|
this.source = source;
|
|
this.restrictions = restrictions;
|
|
}
|
|
|
|
/**
|
|
* @param {Resolver} resolver the resolver
|
|
* @returns {void}
|
|
*/
|
|
apply(resolver) {
|
|
resolver
|
|
.getHook(this.source)
|
|
.tapAsync("RestrictionsPlugin", (request, resolveContext, callback) => {
|
|
if (typeof request.path === "string") {
|
|
const { path } = request;
|
|
for (const rule of this.restrictions) {
|
|
if (typeof rule === "string") {
|
|
if (!isInside(path, rule)) {
|
|
if (resolveContext.log) {
|
|
resolveContext.log(
|
|
`${path} is not inside of the restriction ${rule}`,
|
|
);
|
|
}
|
|
return callback(null, null);
|
|
}
|
|
} else if (!rule.test(path)) {
|
|
if (resolveContext.log) {
|
|
resolveContext.log(
|
|
`${path} doesn't match the restriction ${rule}`,
|
|
);
|
|
}
|
|
return callback(null, null);
|
|
}
|
|
}
|
|
}
|
|
|
|
callback();
|
|
});
|
|
}
|
|
};
|