@rivetjs/router 0.0.0-stage → 0.1.0-alpha.1

package/server/security.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Reject cross-site unsafe requests: `Origin` must equal the app origin; without it `Sec-Fetch-Site`
+ * must be `same-origin`; with neither, form content types are rejected outside dev (browsers send at
+ * least one header; non-browser JSON clients send none; dev keeps `curl -d` working).
+ */
+export declare function crossSite(request: Request, origin: string, dev: boolean): boolean;
+/** Request body limit: bytes for every body, or per kind (`multipart` uploads usually get more). */
+export type BodyLimit = number | {
+    readonly default?: number;
+    readonly multipart?: number;
+};
+/**
+ * The request with its body limited to `limit` bytes: 413 at once for a larger `Content-Length`,
+ * else the body stream errors (and `state.exceeded` is set) once it passes the limit.
+ */
+export declare function limitBody(request: Request, limit: BodyLimit | undefined, state: {
+    exceeded: boolean;
+}): Request;

package/server/security.js

@@ -0,0 +1,47 @@
+// Request hardening the handler applies to state-changing requests: cross-site request rejection
+// (Origin / Fetch Metadata) and a request body size limit.
+import { HttpError } from "../shared/errors.js";
+/** Content types a cross-site HTML form (or a CORS "simple" request) can send. */
+const FORM_TYPES = new Set(["application/x-www-form-urlencoded", "multipart/form-data", "text/plain"]);
+const MiB = 1024 * 1024;
+/**
+ * Reject cross-site unsafe requests: `Origin` must equal the app origin; without it `Sec-Fetch-Site`
+ * must be `same-origin`; with neither, form content types are rejected outside dev (browsers send at
+ * least one header; non-browser JSON clients send none; dev keeps `curl -d` working).
+ */
+export function crossSite(request, origin, dev) {
+    const header = request.headers.get("origin");
+    if (header !== null)
+        return header !== origin;
+    const site = request.headers.get("sec-fetch-site");
+    if (site !== null)
+        return site !== "same-origin";
+    return !dev && FORM_TYPES.has(mediaType(request));
+}
+const mediaType = (request) => (request.headers.get("content-type") ?? "").split(";", 1)[0].trim().toLowerCase();
+const TOO_LARGE = "Payload too large";
+/**
+ * The request with its body limited to `limit` bytes: 413 at once for a larger `Content-Length`,
+ * else the body stream errors (and `state.exceeded` is set) once it passes the limit.
+ */
+export function limitBody(request, limit, state) {
+    const max = typeof limit === "number" ? limit : mediaType(request) === "multipart/form-data" ? (limit?.multipart ?? 10 * MiB) : (limit?.default ?? MiB);
+    const declared = request.headers.get("content-length");
+    if (declared !== null && Number(declared) > max) {
+        state.exceeded = true;
+        throw new HttpError(413, TOO_LARGE);
+    }
+    if (!request.body || max === Infinity)
+        return request;
+    let size = 0;
+    const body = request.body.pipeThrough(new TransformStream({
+        transform(chunk, controller) {
+            size += chunk.byteLength;
+            if (size <= max)
+                return controller.enqueue(chunk);
+            state.exceeded = true;
+            controller.error(new HttpError(413, TOO_LARGE));
+        },
+    }));
+    return new Request(request, { body, duplex: "half" });
+}

package/server/shell-build.d.ts

@@ -0,0 +1,3 @@
+import type * as ShellCache from "./shell-cache.js";
+/** Loads the shell cache module, or undefined when this bundle has none (rewritten by `build/vite.ts`). */
+export declare const SHELL_BUILD: (() => Promise<typeof ShellCache>) | undefined;

package/server/shell-build.js

@@ -0,0 +1,2 @@
+/** Loads the shell cache module, or undefined when this bundle has none (rewritten by `build/vite.ts`). */
+export const SHELL_BUILD = undefined;

package/server/shell-cache.d.ts

@@ -0,0 +1,8 @@
+import type { ShellHost, ShellServe } from "./route-cache.js";
+/**
+ * Where the shell ends in `text` (latin1 view of the document so far): after the root state tail — the state script,
+ * the loader script and (with pending boundaries, `data-stream`) the stream add-on. -1: not yet (or never).
+ */
+export declare function shellCut(text: string): number;
+/** The route rules' shell entry point (`withRouteRules`): undefined = render without the shell. */
+export declare function createShells(host: ShellHost): ShellServe;