@matterbridge/core 3.7.2 → 3.7.3-dev-20260402-2f4f273

package/dist/backendExpress.d.ts

@@ -9,6 +9,7 @@ export declare class BackendExpress {
     private backend;
     private matterbridge;
     private readonly server;
+    private fileLimiter;
     constructor(matterbridge: SharedMatterbridge, backend: Frontend);
     destroy(): void;
     private broadcastMsgHandler;

package/dist/backendExpress.js

@@ -5,7 +5,9 @@ import { MATTER_LOGGER_FILE, MATTER_STORAGE_DIR, MATTERBRIDGE_BACKUP_FILE, MATTE
 import { hasParameter } from '@matterbridge/utils/cli';
 import { getErrorMessage } from '@matterbridge/utils/error';
 import { formatBytes } from '@matterbridge/utils/format';
+import escapeHtml from 'escape-html';
 import express from 'express';
+import rateLimit from 'express-rate-limit';
 import multer from 'multer';
 import { AnsiLogger, er, nf } from 'node-ansi-logger';
 if (hasParameter('loader'))
@@ -18,6 +20,10 @@ export class BackendExpress {
     backend;
     matterbridge;
     server;
+    fileLimiter = rateLimit({
+        windowMs: 60 * 1000,
+        max: 20,
+    });
     constructor(matterbridge, backend) {
         this.debug = hasParameter('debug') || hasParameter('verbose') || hasParameter('debug-frontend') || hasParameter('verbose-frontend');
         this.verbose = hasParameter('verbose') || hasParameter('verbose-frontend');
@@ -157,7 +163,7 @@ export class BackendExpress {
                 res.status(500).send('Error reading matterbridge log file. Please enable the matterbridge log on file in the settings.');
             }
         });
-        this.expressApp.get('/api/download-mblog', async (req, res) => {
+        this.expressApp.get('/api/download-mblog', this.fileLimiter, async (req, res) => {
             this.log.debug(`The frontend sent /api/download-mblog ${path.join(this.matterbridge.matterbridgeDirectory, MATTERBRIDGE_LOGGER_FILE)}`);
             if (!this.validateReq(req, res))
                 return;
@@ -197,7 +203,7 @@ export class BackendExpress {
                 res.status(500).send('Error reading matter log file. Please enable the matter log on file in the settings.');
             }
         });
-        this.expressApp.get('/api/download-mjlog', async (req, res) => {
+        this.expressApp.get('/api/download-mjlog', this.fileLimiter, async (req, res) => {
             this.log.debug(`The frontend sent /api/download-mjlog ${path.join(this.matterbridge.matterbridgeDirectory, MATTER_LOGGER_FILE)}`);
             if (!this.validateReq(req, res))
                 return;
@@ -238,7 +244,7 @@ export class BackendExpress {
                 res.status(500).send('Error reading diagnostic log file.');
             }
         });
-        this.expressApp.get('/api/download-diagnostic', async (req, res) => {
+        this.expressApp.get('/api/download-diagnostic', this.fileLimiter, async (req, res) => {
             this.log.debug(`The frontend sent /api/download-diagnostic`);
             if (!this.validateReq(req, res))
                 return;
@@ -278,7 +284,7 @@ export class BackendExpress {
                 res.status(500).send('Error reading history file.');
             }
         });
-        this.expressApp.get('/api/downloadhistory', async (req, res) => {
+        this.expressApp.get('/api/downloadhistory', this.fileLimiter, async (req, res) => {
             this.log.debug(`The frontend sent /api/downloadhistory`);
             if (!this.validateReq(req, res))
                 return;
@@ -303,7 +309,7 @@ export class BackendExpress {
                 res.status(500).send('Error reading history file.');
             }
         });
-        this.expressApp.get('/api/download-backup', async (req, res) => {
+        this.expressApp.get('/api/download-backup', this.fileLimiter, async (req, res) => {
             this.log.debug('The frontend sent /api/download-backup');
             if (!this.validateReq(req, res))
                 return;
@@ -318,7 +324,7 @@ export class BackendExpress {
                 }
             });
         });
-        this.expressApp.get('/api/download-mbstorage', async (req, res) => {
+        this.expressApp.get('/api/download-mbstorage', this.fileLimiter, async (req, res) => {
             this.log.debug('The frontend sent /api/download-mbstorage');
             if (!this.validateReq(req, res))
                 return;
@@ -333,7 +339,7 @@ export class BackendExpress {
                 }
             });
         });
-        this.expressApp.get('/api/download-mjstorage', async (req, res) => {
+        this.expressApp.get('/api/download-mjstorage', this.fileLimiter, async (req, res) => {
             this.log.debug('The frontend sent /api/download-mjstorage');
             if (!this.validateReq(req, res))
                 return;
@@ -348,7 +354,7 @@ export class BackendExpress {
                 }
             });
         });
-        this.expressApp.get('/api/download-pluginstorage', async (req, res) => {
+        this.expressApp.get('/api/download-pluginstorage', this.fileLimiter, async (req, res) => {
             this.log.debug('The frontend sent /api/download-pluginstorage');
             if (!this.validateReq(req, res))
                 return;
@@ -363,7 +369,7 @@ export class BackendExpress {
                 }
             });
         });
-        this.expressApp.get('/api/download-pluginconfig', async (req, res) => {
+        this.expressApp.get('/api/download-pluginconfig', this.fileLimiter, async (req, res) => {
             this.log.debug('The frontend sent /api/download-pluginconfig');
             if (!this.validateReq(req, res))
                 return;
@@ -378,7 +384,7 @@ export class BackendExpress {
                 }
             });
         });
-        this.expressApp.post('/api/uploadpackage', upload.single('file'), async (req, res) => {
+        this.expressApp.post('/api/uploadpackage', this.fileLimiter, upload.single('file'), async (req, res) => {
             this.log.debug('The frontend sent /api/uploadpackage');
             if (!this.validateReq(req, res))
                 return;
@@ -412,13 +418,13 @@ export class BackendExpress {
                         },
                     });
                 }
-                res.send(`File ${filename} uploaded successfully`);
+                res.send(`File ${escapeHtml(filename)} uploaded successfully`);
             }
             catch (err) {
                 this.log.error(`Error uploading or installing plugin package file ${plg}${filename}${er}:`, err);
                 this.backend.wssSendCloseSnackbarMessage(`Installing package ${filename}...`);
                 this.backend.wssSendSnackbarMessage(`Error uploading or installing plugin package ${filename}`, 10, 'error');
-                res.status(500).send(`Error uploading or installing plugin package ${filename}`);
+                res.status(500).send(`Error uploading or installing plugin package ${escapeHtml(filename)}`);
             }
         });
         this.expressApp.use((req, res) => {

package/dist/cli.js

@@ -12,7 +12,7 @@ export let instance;
 export const tracker = new Tracker('Cli', false, false);
 export const inspector = new Inspector('Cli', false, false);
 const manager = new ThreadsManager();
-const colorEnabled = Boolean(process.stdout.isTTY && !process.env.NO_COLOR && process.env.TERM !== 'dumb' && process.env.FORCE_COLOR !== '0' && !hasParameter('no-ansi'));
+const colorEnabled = Boolean(!process.env.NO_COLOR && process.env.TERM !== 'dumb' && process.env.FORCE_COLOR !== '0' && !hasParameter('no-ansi'));
 if (!colorEnabled)
     process.env.NO_COLOR = '1';
 const log = new AnsiLogger({ logName: 'Cli', logTimestampFormat: 4, logLevel: hasParameter('debug') ? "debug" : "info" });

package/dist/jestutils/jestHelpers.js

@@ -255,7 +255,7 @@ export async function createMatterbridgeEnvironment(name, createOnly = false) {
     matterbridge = await Matterbridge.loadInstance(false);
     expect(matterbridge).toBeDefined();
     expect(matterbridge).toBeInstanceOf(Matterbridge);
-    matterbridge.matterbridgeVersion = '3.7.2';
+    matterbridge.matterbridgeVersion = '3.7.3';
     matterbridge.bridgeMode = 'bridge';
     matterbridge.rootDirectory = path.join(HOMEDIR);
     matterbridge.homeDirectory = path.join(HOMEDIR);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matterbridge/core",
-  "version": "3.7.2",
+  "version": "3.7.3-dev-20260402-2f4f273",
   "description": "Matterbridge core library",
   "author": "https://github.com/Luligu",
   "homepage": "https://matterbridge.io/",
@@ -126,11 +126,13 @@
   ],
   "dependencies": {
     "@matter/main": "0.16.10",
-    "@matterbridge/dgram": "3.7.2",
-    "@matterbridge/thread": "3.7.2",
-    "@matterbridge/types": "3.7.2",
-    "@matterbridge/utils": "3.7.2",
+    "@matterbridge/dgram": "3.7.3-dev-20260402-2f4f273",
+    "@matterbridge/thread": "3.7.3-dev-20260402-2f4f273",
+    "@matterbridge/types": "3.7.3-dev-20260402-2f4f273",
+    "@matterbridge/utils": "3.7.3-dev-20260402-2f4f273",
+    "escape-html": "1.0.3",
     "express": "5.2.1",
+    "express-rate-limit": "8.3.2",
     "multer": "2.1.1",
     "node-ansi-logger": "3.2.1-dev-20260327-7069fd7",
     "node-persist-manager": "2.0.2-dev-20260327-af13e76",