@trebired/frontend 6.12.1 → 6.14.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/dist/dom/index.d.ts +2 -1
- package/dist/dom/index.d.ts.map +1 -1
- package/dist/dom/index.js +8 -1
- package/dist/dom/index.js.map +1 -1
- package/dist/live/index.d.ts +1 -0
- package/dist/live/index.d.ts.map +1 -1
- package/dist/live/index.js +1 -0
- package/dist/live/index.js.map +1 -1
- package/dist/live/overlays.d.ts +41 -0
- package/dist/live/overlays.d.ts.map +1 -0
- package/dist/live/overlays.js +301 -0
- package/dist/live/overlays.js.map +1 -0
- package/dist/modal/index.d.ts.map +1 -1
- package/dist/modal/index.js +2 -9
- package/dist/modal/index.js.map +1 -1
- package/dist/server/index.d.ts +3 -0
- package/dist/server/index.d.ts.map +1 -1
- package/dist/server/index.js +3 -0
- package/dist/server/index.js.map +1 -1
- package/dist/server/live-socket.d.ts +77 -0
- package/dist/server/live-socket.d.ts.map +1 -0
- package/dist/server/live-socket.js +186 -0
- package/dist/server/live-socket.js.map +1 -0
- package/dist/server/security/cors.d.ts +22 -0
- package/dist/server/security/cors.d.ts.map +1 -0
- package/dist/server/security/cors.js +41 -0
- package/dist/server/security/cors.js.map +1 -0
- package/dist/server/security/helpers.d.ts +6 -0
- package/dist/server/security/helpers.d.ts.map +1 -0
- package/dist/server/security/helpers.js +17 -0
- package/dist/server/security/helpers.js.map +1 -0
- package/dist/server/security/policy.d.ts +42 -0
- package/dist/server/security/policy.d.ts.map +1 -0
- package/dist/server/security/policy.js +159 -0
- package/dist/server/security/policy.js.map +1 -0
- package/dist/server/security.d.ts.map +1 -1
- package/dist/server/security.js +2 -13
- package/dist/server/security.js.map +1 -1
- package/dist/src/dom/index.d.ts +2 -1
- package/dist/src/dom/index.d.ts.map +1 -1
- package/dist/src/dom/index.js +8 -1
- package/dist/src/dom/index.js.map +1 -1
- package/dist/src/live/index.d.ts +1 -0
- package/dist/src/live/index.d.ts.map +1 -1
- package/dist/src/live/index.js +1 -0
- package/dist/src/live/index.js.map +1 -1
- package/dist/src/live/overlays.d.ts +41 -0
- package/dist/src/live/overlays.d.ts.map +1 -0
- package/dist/src/live/overlays.js +301 -0
- package/dist/src/live/overlays.js.map +1 -0
- package/dist/src/modal/index.d.ts.map +1 -1
- package/dist/src/modal/index.js +2 -9
- package/dist/src/modal/index.js.map +1 -1
- package/dist/src/server/index.d.ts +3 -0
- package/dist/src/server/index.d.ts.map +1 -1
- package/dist/src/server/index.js +3 -0
- package/dist/src/server/index.js.map +1 -1
- package/dist/src/server/live-socket.d.ts +77 -0
- package/dist/src/server/live-socket.d.ts.map +1 -0
- package/dist/src/server/live-socket.js +186 -0
- package/dist/src/server/live-socket.js.map +1 -0
- package/dist/src/server/security/cors.d.ts +22 -0
- package/dist/src/server/security/cors.d.ts.map +1 -0
- package/dist/src/server/security/cors.js +41 -0
- package/dist/src/server/security/cors.js.map +1 -0
- package/dist/src/server/security/helpers.d.ts +6 -0
- package/dist/src/server/security/helpers.d.ts.map +1 -0
- package/dist/src/server/security/helpers.js +17 -0
- package/dist/src/server/security/helpers.js.map +1 -0
- package/dist/src/server/security/policy.d.ts +42 -0
- package/dist/src/server/security/policy.d.ts.map +1 -0
- package/dist/src/server/security/policy.js +159 -0
- package/dist/src/server/security/policy.js.map +1 -0
- package/dist/src/server/security.d.ts.map +1 -1
- package/dist/src/server/security.js +2 -13
- package/dist/src/server/security.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,159 @@
|
|
|
1
|
+
import crypto from "node:crypto";
|
|
2
|
+
import { setResponseHeader, } from "../../../server/http.js";
|
|
3
|
+
import { attachUseMiddleware, responseLocals, securityText, } from "./helpers.js";
|
|
4
|
+
function createNonceMiddleware(options = {}) {
|
|
5
|
+
const bytes = Math.max(8, Math.floor(Number(options.bytes) || 16));
|
|
6
|
+
const localsKey = options.localsKey || "nonce";
|
|
7
|
+
return function nonceMiddleware(_req, res, next) {
|
|
8
|
+
const locals = responseLocals(res);
|
|
9
|
+
if (locals)
|
|
10
|
+
locals[localsKey] = crypto.randomBytes(bytes).toString("base64");
|
|
11
|
+
return next();
|
|
12
|
+
};
|
|
13
|
+
}
|
|
14
|
+
function attachNonceMiddleware(app, options = {}) {
|
|
15
|
+
attachUseMiddleware(app, createNonceMiddleware(options));
|
|
16
|
+
}
|
|
17
|
+
function hstsHeader(options) {
|
|
18
|
+
if (options === false)
|
|
19
|
+
return "";
|
|
20
|
+
if (typeof options === "string")
|
|
21
|
+
return options;
|
|
22
|
+
if (options && typeof options === "object" && options.header) {
|
|
23
|
+
return options.header;
|
|
24
|
+
}
|
|
25
|
+
return "max-age=31536000; includeSubDomains; preload";
|
|
26
|
+
}
|
|
27
|
+
function shouldSendHsts(req, options) {
|
|
28
|
+
if (options === false)
|
|
29
|
+
return false;
|
|
30
|
+
if (options && typeof options === "object" && options.shouldSend) {
|
|
31
|
+
return options.shouldSend(req);
|
|
32
|
+
}
|
|
33
|
+
return Boolean(req && req.secure);
|
|
34
|
+
}
|
|
35
|
+
function defaultPermissionsPolicy() {
|
|
36
|
+
return [
|
|
37
|
+
"geolocation=()",
|
|
38
|
+
"camera=()",
|
|
39
|
+
"microphone=()",
|
|
40
|
+
"payment=()",
|
|
41
|
+
"gamepad=()",
|
|
42
|
+
"gyroscope=()",
|
|
43
|
+
"magnetometer=()",
|
|
44
|
+
"display-capture=()",
|
|
45
|
+
];
|
|
46
|
+
}
|
|
47
|
+
function permissionsPolicyHeader(input) {
|
|
48
|
+
if (input === false)
|
|
49
|
+
return "";
|
|
50
|
+
if (typeof input === "string")
|
|
51
|
+
return input;
|
|
52
|
+
const entries = input || defaultPermissionsPolicy();
|
|
53
|
+
return Array.from(entries).join(", ");
|
|
54
|
+
}
|
|
55
|
+
function applySecurityHeaders(req, res, options = {}) {
|
|
56
|
+
const hsts = hstsHeader(options.hsts);
|
|
57
|
+
if (hsts && shouldSendHsts(req, options.hsts)) {
|
|
58
|
+
setResponseHeader(res, "Strict-Transport-Security", hsts);
|
|
59
|
+
}
|
|
60
|
+
setResponseHeader(res, "X-Content-Type-Options", "nosniff");
|
|
61
|
+
if (options.dnsPrefetchControl !== false) {
|
|
62
|
+
setResponseHeader(res, "X-DNS-Prefetch-Control", options.dnsPrefetchControl || "off");
|
|
63
|
+
}
|
|
64
|
+
if (options.permittedCrossDomainPolicies !== false) {
|
|
65
|
+
setResponseHeader(res, "X-Permitted-Cross-Domain-Policies", options.permittedCrossDomainPolicies || "none");
|
|
66
|
+
}
|
|
67
|
+
if (options.frameOptions !== false) {
|
|
68
|
+
setResponseHeader(res, "X-Frame-Options", options.frameOptions || "SAMEORIGIN");
|
|
69
|
+
}
|
|
70
|
+
if (options.referrerPolicy !== false) {
|
|
71
|
+
setResponseHeader(res, "Referrer-Policy", options.referrerPolicy || "strict-origin-when-cross-origin");
|
|
72
|
+
}
|
|
73
|
+
const permissions = permissionsPolicyHeader(options.permissionsPolicy);
|
|
74
|
+
if (permissions)
|
|
75
|
+
setResponseHeader(res, "Permissions-Policy", permissions);
|
|
76
|
+
if (options.crossOriginOpenerPolicy !== false) {
|
|
77
|
+
setResponseHeader(res, "Cross-Origin-Opener-Policy", options.crossOriginOpenerPolicy || "same-origin");
|
|
78
|
+
}
|
|
79
|
+
if (options.crossOriginResourcePolicy !== false) {
|
|
80
|
+
setResponseHeader(res, "Cross-Origin-Resource-Policy", options.crossOriginResourcePolicy || "same-origin");
|
|
81
|
+
}
|
|
82
|
+
if (options.originAgentCluster !== false) {
|
|
83
|
+
setResponseHeader(res, "Origin-Agent-Cluster", options.originAgentCluster || "?1");
|
|
84
|
+
}
|
|
85
|
+
if (options.acceptClientHints && options.acceptClientHints.length) {
|
|
86
|
+
setResponseHeader(res, "Accept-CH", options.acceptClientHints.join(", "));
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
function createSecurityHeadersMiddleware(options = {}) {
|
|
90
|
+
return function securityHeadersMiddleware(req, res, next) {
|
|
91
|
+
applySecurityHeaders(req, res, options);
|
|
92
|
+
return next();
|
|
93
|
+
};
|
|
94
|
+
}
|
|
95
|
+
function attachSecurityHeadersMiddleware(app, options = {}) {
|
|
96
|
+
attachUseMiddleware(app, createSecurityHeadersMiddleware(options));
|
|
97
|
+
}
|
|
98
|
+
function cspNonce(res, options) {
|
|
99
|
+
const key = options.nonceLocalKey || "nonce";
|
|
100
|
+
const nonce = res && res.locals ? res.locals[key] : "";
|
|
101
|
+
return securityText(nonce) || "";
|
|
102
|
+
}
|
|
103
|
+
function defaultContentSecurityPolicyDirectives(context) {
|
|
104
|
+
return [
|
|
105
|
+
"default-src 'self'",
|
|
106
|
+
`script-src 'self' 'nonce-${context.nonce}'`,
|
|
107
|
+
`script-src-elem 'self' 'nonce-${context.nonce}'`,
|
|
108
|
+
"script-src-attr 'none'",
|
|
109
|
+
"style-src 'self' 'unsafe-inline'",
|
|
110
|
+
"font-src 'self' data:",
|
|
111
|
+
"img-src 'self' data: blob: https:",
|
|
112
|
+
"worker-src 'self' blob:",
|
|
113
|
+
"frame-src 'self'",
|
|
114
|
+
"connect-src 'self'",
|
|
115
|
+
"frame-ancestors 'self'",
|
|
116
|
+
"object-src 'none'",
|
|
117
|
+
"base-uri 'self'",
|
|
118
|
+
"form-action 'self'",
|
|
119
|
+
];
|
|
120
|
+
}
|
|
121
|
+
function contentSecurityPolicyDirectives(context, options) {
|
|
122
|
+
if (typeof options.directives === "function") {
|
|
123
|
+
return options.directives(context);
|
|
124
|
+
}
|
|
125
|
+
return options.directives || defaultContentSecurityPolicyDirectives(context);
|
|
126
|
+
}
|
|
127
|
+
function contentSecurityPolicyHeader(context, options = {}) {
|
|
128
|
+
const values = Array.from(contentSecurityPolicyDirectives(context, options))
|
|
129
|
+
.map((directive) => String(directive || "").trim())
|
|
130
|
+
.filter(Boolean);
|
|
131
|
+
if (options.shouldUpgradeInsecureRequests &&
|
|
132
|
+
options.shouldUpgradeInsecureRequests(context.req)) {
|
|
133
|
+
values.push("upgrade-insecure-requests");
|
|
134
|
+
}
|
|
135
|
+
return values.join("; ");
|
|
136
|
+
}
|
|
137
|
+
function applyContentSecurityPolicy(req, res, options = {}) {
|
|
138
|
+
const nonce = cspNonce(res, options);
|
|
139
|
+
if (!nonce) {
|
|
140
|
+
throw new Error("Content security policy nonce is missing. Ensure nonce middleware runs first.");
|
|
141
|
+
}
|
|
142
|
+
setResponseHeader(res, "Content-Security-Policy", contentSecurityPolicyHeader({ nonce, req }, options));
|
|
143
|
+
}
|
|
144
|
+
function createContentSecurityPolicyMiddleware(options = {}) {
|
|
145
|
+
return function contentSecurityPolicyMiddleware(req, res, next) {
|
|
146
|
+
try {
|
|
147
|
+
applyContentSecurityPolicy(req, res, options);
|
|
148
|
+
return next();
|
|
149
|
+
}
|
|
150
|
+
catch (error) {
|
|
151
|
+
return next(error);
|
|
152
|
+
}
|
|
153
|
+
};
|
|
154
|
+
}
|
|
155
|
+
function attachContentSecurityPolicyMiddleware(app, options = {}) {
|
|
156
|
+
attachUseMiddleware(app, createContentSecurityPolicyMiddleware(options));
|
|
157
|
+
}
|
|
158
|
+
export { applyContentSecurityPolicy, applySecurityHeaders, attachContentSecurityPolicyMiddleware, attachNonceMiddleware, attachSecurityHeadersMiddleware, contentSecurityPolicyHeader, createContentSecurityPolicyMiddleware, createNonceMiddleware, createSecurityHeadersMiddleware, defaultContentSecurityPolicyDirectives, };
|
|
159
|
+
//# sourceMappingURL=policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/server/security/policy.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AAuCtB,SAAS,qBAAqB,CAAC,UAAkC,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,OAAO,SAAS,eAAe,CAC7B,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7E,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,OAAuC;IACzD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,8CAA8C,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CACrB,GAAsB,EACtB,OAAuC;IAEvC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO;QACL,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkD;IAElD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,wBAAwB,EAAE,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAsB,EACtB,GAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,GAAG,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CACf,GAAG,EACH,wBAAwB,EACxB,OAAO,CAAC,kBAAkB,IAAI,KAAK,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,4BAA4B,KAAK,KAAK,EAAE,CAAC;QACnD,iBAAiB,CACf,GAAG,EACH,mCAAmC,EACnC,OAAO,CAAC,4BAA4B,IAAI,MAAM,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACnC,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACrC,iBAAiB,CACf,GAAG,EACH,iBAAiB,EACjB,OAAO,CAAC,cAAc,IAAI,iCAAiC,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,WAAW;QAAE,iBAAiB,CAAC,GAAG,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,uBAAuB,KAAK,KAAK,EAAE,CAAC;QAC9C,iBAAiB,CACf,GAAG,EACH,4BAA4B,EAC5B,OAAO,CAAC,uBAAuB,IAAI,aAAa,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAChD,iBAAiB,CACf,GAAG,EACH,8BAA8B,EAC9B,OAAO,CAAC,yBAAyB,IAAI,aAAa,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAClE,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,UAAkC,EAAE;IAEpC,OAAO,SAAS,yBAAyB,CACvC,GAAsB,EACtB,GAAuB,EACvB,IAAmB;QAEnB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CACf,GAAuB,EACvB,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,sCAAsC,CAC7C,OAAqC;IAErC,OAAO;QACL,oBAAoB;QACpB,4BAA4B,OAAO,CAAC,KAAK,GAAG;QAC5C,iCAAiC,OAAO,CAAC,KAAK,GAAG;QACjD,wBAAwB;QACxB,kCAAkC;QAClC,uBAAuB;QACvB,mCAAmC;QACnC,yBAAyB;QACzB,kBAAkB;QAClB,oBAAoB;QACpB,wBAAwB;QACxB,mBAAmB;QACnB,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAqC,EACrC,OAAqC;IAErC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,IAAI,sCAAsC,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAqC,EACrC,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACjB,IACE,OAAO,CAAC,6BAA6B;QACnC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,EACpD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAsB,EACtB,GAAuB,EACvB,UAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,iBAAiB,CACf,GAAG,EACH,yBAAyB,EACzB,2BAA2B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,UAAwC,EAAE;IAE1C,OAAO,SAAS,+BAA+B,CAC7C,GAAsB,EACtB,GAAuB,EACvB,IAAkC;QAElC,IAAI,CAAC;YACH,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,GAAY,EACZ,UAAwC,EAAE;IAE1C,mBAAmB,CAAC,GAAG,EAAE,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,2BAA2B,EAC3B,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,sCAAsC,GACvC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAOpD,KAAK,aAAa,GAAG;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,iBAAS,mBAAmB,CAC1B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,GACtC,aAAa,CAMf;AAED,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,iBAOxC;AAED,iBAAS,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,IAErE,MAAM,OAAO,EACb,KAAK,kBAAkB,EACvB,MAAM,MAAM,OAAO,aAKtB;AAED,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,yBAA8B,QAGxC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC;AACF,YAAY,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC"}
|
|
@@ -1,13 +1,4 @@
|
|
|
1
|
-
|
|
2
|
-
return value == null ? null : String(value);
|
|
3
|
-
}
|
|
4
|
-
function responseLocals(res) {
|
|
5
|
-
if (!res)
|
|
6
|
-
return null;
|
|
7
|
-
if (!res.locals || typeof res.locals !== "object")
|
|
8
|
-
res.locals = {};
|
|
9
|
-
return res.locals;
|
|
10
|
-
}
|
|
1
|
+
import { attachUseMiddleware, responseLocals, securityText, } from "./security/helpers.js";
|
|
11
2
|
function createSecurityState(res, options = {}) {
|
|
12
3
|
const locals = responseLocals(res) || {};
|
|
13
4
|
return {
|
|
@@ -30,9 +21,7 @@ function createSecurityMiddleware(options = {}) {
|
|
|
30
21
|
};
|
|
31
22
|
}
|
|
32
23
|
function attachSecurityMiddleware(app, options = {}) {
|
|
33
|
-
|
|
34
|
-
app.use(createSecurityMiddleware(options));
|
|
35
|
-
}
|
|
24
|
+
attachUseMiddleware(app, createSecurityMiddleware(options));
|
|
36
25
|
}
|
|
37
26
|
export { applySecurityToLocals, attachSecurityMiddleware, createSecurityMiddleware, createSecurityState, };
|
|
38
27
|
//# sourceMappingURL=security.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAa/B,SAAS,mBAAmB,CAC1B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO;QACL,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;QACpE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAqC,EAAE;IACvE,OAAO,SAAS,kBAAkB,CAChC,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAAY,EACZ,UAAqC,EAAE;IAEvC,mBAAmB,CAAC,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC"}
|