@ui5/server 2.2.10 → 3.0.0-alpha.0

package/CHANGELOG.md

@@ -2,7 +2,25 @@
 All notable changes to this project will be documented in this file.  
 This project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
-A list of unreleased changes can be found [here](https://github.com/SAP/ui5-server/compare/v2.2.10...HEAD).
+A list of unreleased changes can be found [here](https://github.com/SAP/ui5-server/compare/v3.0.0-alpha.0...HEAD).
+
+<a name="v3.0.0-alpha.0"></a>
+## [v3.0.0-alpha.0] - 2021-12-14
+
+<a name="v2.4.0"></a>
+## [v2.4.0] - 2021-10-19
+### Features
+- Enhance versionInfo middleware to serve sap-ui-version.json ([#420](https://github.com/SAP/ui5-server/issues/420)) [`c6f83f5`](https://github.com/SAP/ui5-server/commit/c6f83f5472eb2fe6a8d4eca10ecdc5f4b522bc3c)
+
+
+<a name="v2.3.1"></a>
+## [v2.3.1] - 2021-07-23
+
+<a name="v2.3.0"></a>
+## [v2.3.0] - 2021-07-01
+### Features
+- **server:** Expose configuration options for SAP CSP policies [`55d6a96`](https://github.com/SAP/ui5-server/commit/55d6a96cc1a3c762af8173d9fb9588fe742a302d)
+
 
 <a name="v2.2.10"></a>
 ## [v2.2.10] - 2021-06-01
@@ -231,6 +249,10 @@ Only Node.js v10 or higher is supported.
 <a name="v0.0.1"></a>
 ## v0.0.1 - 2018-06-06
 
+[v3.0.0-alpha.0]: https://github.com/SAP/ui5-server/compare/v2.4.0...v3.0.0-alpha.0
+[v2.4.0]: https://github.com/SAP/ui5-server/compare/v2.3.1...v2.4.0
+[v2.3.1]: https://github.com/SAP/ui5-server/compare/v2.3.0...v2.3.1
+[v2.3.0]: https://github.com/SAP/ui5-server/compare/v2.2.10...v2.3.0
 [v2.2.10]: https://github.com/SAP/ui5-server/compare/v2.2.9...v2.2.10
 [v2.2.9]: https://github.com/SAP/ui5-server/compare/v2.2.8...v2.2.9
 [v2.2.8]: https://github.com/SAP/ui5-server/compare/v2.2.7...v2.2.8

package/LICENSE.txt

@@ -1,208 +1,201 @@
-Apache License
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
 
-Version 2.0, January 2004
-
-http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION,
-AND DISTRIBUTION
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
    1. Definitions.
 
-      
-
-"License" shall mean the terms and conditions for use, reproduction, and distribution
-as defined by Sections 1 through 9 of this document.
-
-      
-
-"Licensor" shall mean the copyright owner or entity authorized by the copyright
-owner that is granting the License.
-
-      
-
-"Legal Entity" shall mean the union of the acting entity and all other entities
-that control, are controlled by, or are under common control with that entity.
-For the purposes of this definition, "control" means (i) the power, direct
-or indirect, to cause the direction or management of such entity, whether
-by contract or otherwise, or (ii) ownership of fifty percent (50%) or more
-of the outstanding shares, or (iii) beneficial ownership of such entity.
-
-      
-
-"You" (or "Your") shall mean an individual or Legal Entity exercising permissions
-granted by this License.
-
-      
-
-"Source" form shall mean the preferred form for making modifications, including
-but not limited to software source code, documentation source, and configuration
-files.
-
-      
-
-"Object" form shall mean any form resulting from mechanical transformation
-or translation of a Source form, including but not limited to compiled object
-code, generated documentation, and conversions to other media types.
-
-      
-
-"Work" shall mean the work of authorship, whether in Source or Object form,
-made available under the License, as indicated by a copyright notice that
-is included in or attached to the work (an example is provided in the Appendix
-below).
-
-      
-
-"Derivative Works" shall mean any work, whether in Source or Object form,
-that is based on (or derived from) the Work and for which the editorial revisions,
-annotations, elaborations, or other modifications represent, as a whole, an
-original work of authorship. For the purposes of this License, Derivative
-Works shall not include works that remain separable from, or merely link (or
-bind by name) to the interfaces of, the Work and Derivative Works thereof.
-
-      
-
-"Contribution" shall mean any work of authorship, including the original version
-of the Work and any modifications or additions to that Work or Derivative
-Works thereof, that is intentionally submitted to Licensor for inclusion in
-the Work by the copyright owner or by an individual or Legal Entity authorized
-to submit on behalf of the copyright owner. For the purposes of this definition,
-"submitted" means any form of electronic, verbal, or written communication
-sent to the Licensor or its representatives, including but not limited to
-communication on electronic mailing lists, source code control systems, and
-issue tracking systems that are managed by, or on behalf of, the Licensor
-for the purpose of discussing and improving the Work, but excluding communication
-that is conspicuously marked or otherwise designated in writing by the copyright
-owner as "Not a Contribution."
-
-      
-
-"Contributor" shall mean Licensor and any individual or Legal Entity on behalf
-of whom a Contribution has been received by Licensor and subsequently incorporated
-within the Work.
-
-2. Grant of Copyright License. Subject to the terms and conditions of this
-License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive,
-no-charge, royalty-free, irrevocable copyright license to reproduce, prepare
-Derivative Works of, publicly display, publicly perform, sublicense, and distribute
-the Work and such Derivative Works in Source or Object form.
-
-3. Grant of Patent License. Subject to the terms and conditions of this License,
-each Contributor hereby grants to You a perpetual, worldwide, non-exclusive,
-no-charge, royalty-free, irrevocable (except as stated in this section) patent
-license to make, have made, use, offer to sell, sell, import, and otherwise
-transfer the Work, where such license applies only to those patent claims
-licensable by such Contributor that are necessarily infringed by their Contribution(s)
-alone or by combination of their Contribution(s) with the Work to which such
-Contribution(s) was submitted. If You institute patent litigation against
-any entity (including a cross-claim or counterclaim in a lawsuit) alleging
-that the Work or a Contribution incorporated within the Work constitutes direct
-or contributory patent infringement, then any patent licenses granted to You
-under this License for that Work shall terminate as of the date such litigation
-is filed.
-
-4. Redistribution. You may reproduce and distribute copies of the Work or
-Derivative Works thereof in any medium, with or without modifications, and
-in Source or Object form, provided that You meet the following conditions:
-
-(a) You must give any other recipients of the Work or Derivative Works a copy
-of this License; and
-
-(b) You must cause any modified files to carry prominent notices stating that
-You changed the files; and
-
-(c) You must retain, in the Source form of any Derivative Works that You distribute,
-all copyright, patent, trademark, and attribution notices from the Source
-form of the Work, excluding those notices that do not pertain to any part
-of the Derivative Works; and
-
-(d) If the Work includes a "NOTICE" text file as part of its distribution,
-then any Derivative Works that You distribute must include a readable copy
-of the attribution notices contained within such NOTICE file, excluding those
-notices that do not pertain to any part of the Derivative Works, in at least
-one of the following places: within a NOTICE text file distributed as part
-of the Derivative Works; within the Source form or documentation, if provided
-along with the Derivative Works; or, within a display generated by the Derivative
-Works, if and wherever such third-party notices normally appear. The contents
-of the NOTICE file are for informational purposes only and do not modify the
-License. You may add Your own attribution notices within Derivative Works
-that You distribute, alongside or as an addendum to the NOTICE text from the
-Work, provided that such additional attribution notices cannot be construed
-as modifying the License.
-
-You may add Your own copyright statement to Your modifications and may provide
-additional or different license terms and conditions for use, reproduction,
-or distribution of Your modifications, or for any such Derivative Works as
-a whole, provided Your use, reproduction, and distribution of the Work otherwise
-complies with the conditions stated in this License.
-
-5. Submission of Contributions. Unless You explicitly state otherwise, any
-Contribution intentionally submitted for inclusion in the Work by You to the
-Licensor shall be under the terms and conditions of this License, without
-any additional terms or conditions. Notwithstanding the above, nothing herein
-shall supersede or modify the terms of any separate license agreement you
-may have executed with Licensor regarding such Contributions.
-
-6. Trademarks. This License does not grant permission to use the trade names,
-trademarks, service marks, or product names of the Licensor, except as required
-for reasonable and customary use in describing the origin of the Work and
-reproducing the content of the NOTICE file.
-
-7. Disclaimer of Warranty. Unless required by applicable law or agreed to
-in writing, Licensor provides the Work (and each Contributor provides its
-Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-KIND, either express or implied, including, without limitation, any warranties
-or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR
-A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness
-of using or redistributing the Work and assume any risks associated with Your
-exercise of permissions under this License.
-
-8. Limitation of Liability. In no event and under no legal theory, whether
-in tort (including negligence), contract, or otherwise, unless required by
-applicable law (such as deliberate and grossly negligent acts) or agreed to
-in writing, shall any Contributor be liable to You for damages, including
-any direct, indirect, special, incidental, or consequential damages of any
-character arising as a result of this License or out of the use or inability
-to use the Work (including but not limited to damages for loss of goodwill,
-work stoppage, computer failure or malfunction, or any and all other commercial
-damages or losses), even if such Contributor has been advised of the possibility
-of such damages.
-
-9. Accepting Warranty or Additional Liability. While redistributing the Work
-or Derivative Works thereof, You may choose to offer, and charge a fee for,
-acceptance of support, warranty, indemnity, or other liability obligations
-and/or rights consistent with this License. However, in accepting such obligations,
-You may act only on Your own behalf and on Your sole responsibility, not on
-behalf of any other Contributor, and only if You agree to indemnify, defend,
-and hold each Contributor harmless for any liability incurred by, or claims
-asserted against, such Contributor by reason of your accepting any such warranty
-or additional liability. END OF TERMS AND CONDITIONS
-
-APPENDIX: How to apply the Apache License to your work.
-
-To apply the Apache License to your work, attach the following boilerplate
-notice, with the fields enclosed by brackets "[]" replaced with your own identifying
-information. (Don't include the brackets!) The text should be enclosed in
-the appropriate comment syntax for the file format. We also recommend that
-a file or class name and description of purpose be included on the same "printed
-page" as the copyright notice for easier identification within third-party
-archives.
-
-Copyright [yyyy] [name of copyright owner]
-
-Licensed under the Apache License, Version 2.0 (the "License");
-
-you may not use this file except in compliance with the License.
-
-You may obtain a copy of the License at
-
-http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-
-distributed under the License is distributed on an "AS IS" BASIS,
-
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-
-See the License for the specific language governing permissions and
-
-limitations under the License.
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2021 SAP SE or an SAP affiliate company and UI5 Tooling contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/lib/middleware/MiddlewareManager.js

@@ -1,5 +1,6 @@
 const middlewareRepository = require("./middlewareRepository");
 const MiddlewareUtil = require("./MiddlewareUtil");
+const hasOwn = Function.prototype.call.bind(Object.prototype.hasOwnProperty);
 
 /**
  *
@@ -125,17 +126,42 @@ class MiddlewareManager {
 							"worker-src  'self' blob:; " +
 							"child-src   'self' blob:; " +
 							"connect-src 'self' https: wss:; " +
+							"base-uri    'self';",
+						"sap-target-level-3":
+							"default-src 'self'; " +
+							"script-src  'self'; " +
+							"style-src   'self'; " +
+							"font-src    'self'; " +
+							"img-src     'self' https:; " +
+							"media-src   'self' https:; " +
+							"object-src  'self'; " +
+							"frame-src   'self' https: gap: mailto: tel:; " +
+							"worker-src  'self'; " +
+							"child-src   'self'; " +
+							"connect-src 'self' https: wss:; " +
 							"base-uri    'self';"
 					}
 				};
 				if (this.options.sendSAPTargetCSP) {
-					Object.assign(oCspConfig, {
+					const defaultSAPTargetConfig = {
 						defaultPolicy: "sap-target-level-1",
 						defaultPolicyIsReportOnly: true,
 						defaultPolicy2: "sap-target-level-2",
 						defaultPolicy2IsReportOnly: true,
 						ignorePaths: ["test-resources/sap/ui/qunit/testrunner.html"]
-					});
+					};
+					Object.assign(oCspConfig, defaultSAPTargetConfig);
+
+					if (typeof this.options.sendSAPTargetCSP === "object") {
+						for (const [name, value] of Object.entries(this.options.sendSAPTargetCSP)) {
+							if (!hasOwn(defaultSAPTargetConfig, name)) {
+								throw new TypeError(
+									`Unknown SAP Target CSP configuration option '${name}'. Allowed options are ` +
+									`${Object.keys(defaultSAPTargetConfig)}`);
+							}
+							oCspConfig[name] = value;
+						}
+					}
 				}
 				if (this.options.serveCSPReports) {
 					Object.assign(oCspConfig, {
@@ -218,7 +244,8 @@ class MiddlewareManager {
 						if (
 							specVersion === "2.0" || specVersion === "2.1" ||
 							specVersion === "2.2" || specVersion === "2.3" ||
-							specVersion === "2.4"
+							specVersion === "2.4" || specVersion === "2.5" ||
+							specVersion === "2.6"
 						) {
 							// Supply interface to MiddlewareUtil instance starting with specVersion 2.0
 							params.middlewareUtil = middlewareUtil.getInterface(specVersion);

package/lib/middleware/MiddlewareUtil.js

@@ -33,6 +33,8 @@ class MiddlewareUtil {
 		case "2.2":
 		case "2.3":
 		case "2.4":
+		case "2.5":
+		case "2.6":
 			return baseInterface;
 		default:
 			throw new Error(`MiddlewareUtil: Unknown or unsupported Specification Version ${specVersion}`);

package/lib/middleware/versionInfo.js

@@ -1,4 +1,7 @@
 const createVersionInfoProcessor = require("@ui5/builder").processors.versionInfoGenerator;
+const createManifestProcessor = require("@ui5/builder").processors.manifestCreator;
+
+const MANIFEST_JSON = "manifest.json";
 
 /**
  * Creates and returns the middleware to create the version info as json object.
@@ -10,37 +13,61 @@ const createVersionInfoProcessor = require("@ui5/builder").processors.versionInf
  * @returns {Function} Returns a server middleware closure.
  */
 function createMiddleware({resources, tree: project}) {
-	return function versionInfo(req, res, next) {
-		resources.dependencies.byGlob("/resources/**/.library")
-			.then((resources) => {
-				resources.sort((a, b) => {
-					return a._project.metadata.name.localeCompare(b._project.metadata.name);
-				});
-				return createVersionInfoProcessor({
-					options: {
-						rootProjectName: project.metadata.name,
-						rootProjectVersion: project.version,
-						libraryInfos: resources.map((dotLibResource) => {
-							return {
-								name: dotLibResource._project.metadata.name,
-								version: dotLibResource._project.version
-							};
-						})
-					}
-				});
-			})
-			.then(([versionInfoResource]) => {
-				return versionInfoResource.getBuffer();
-			})
-			.then((versionInfoContent) => {
-				res.writeHead(200, {
-					"Content-Type": "application/json"
+	return async function versionInfo(req, res, next) {
+		try {
+			const dependencies = resources.dependencies;
+			const dotLibResources = await dependencies.byGlob("/resources/**/.library");
+
+			dotLibResources.sort((a, b) => {
+				return a._project.metadata.name.localeCompare(b._project.metadata.name);
+			});
+
+			const libraryInfosPromises = dotLibResources.map(async (dotLibResource) => {
+				const namespace = dotLibResource._project.metadata.namespace;
+				const manifestResources = await dependencies.byGlob(`/resources/${namespace}/**/${MANIFEST_JSON}`);
+				let libraryManifest = manifestResources.find((manifestResource) => {
+					return manifestResource.getPath() === `/resources/${namespace}/${MANIFEST_JSON}`;
 				});
-				res.end(versionInfoContent.toString());
-			})
-			.catch((err) => {
-				next(err);
+				const embeddedManifests =
+					manifestResources.filter((manifestResource) => manifestResource !== libraryManifest);
+				if (!libraryManifest) {
+					const extensions = "js,json,library,less,css,theming,theme,properties";
+					const libResources = await dependencies.byGlob(`/resources/${namespace}/**/*.{${extensions}}`);
+
+					libraryManifest = await createManifestProcessor({
+						libraryResource: dotLibResource,
+						namespace,
+						resources: libResources,
+						options: {
+							omitMinVersions: true
+						}
+					});
+				}
+				return {
+					libraryManifest,
+					embeddedManifests,
+					name: dotLibResource._project.metadata.name,
+					version: dotLibResource._project.version
+				};
+			});
+			const libraryInfos = await Promise.all(libraryInfosPromises);
+
+			const [versionInfoResource] = await createVersionInfoProcessor({
+				options: {
+					rootProjectName: project.metadata.name,
+					rootProjectVersion: project.version,
+					libraryInfos
+				}
+			});
+			const versionInfoContent = await versionInfoResource.getBuffer();
+
+			res.writeHead(200, {
+				"Content-Type": "application/json"
 			});
+			res.end(versionInfoContent.toString());
+		} catch (err) {
+			next(err);
+		}
 	};
 }
 

package/lib/server.js

@@ -88,6 +88,20 @@ function _addSsl({app, key, cert}) {
 	return require("spdy").createServer({cert, key}, app);
 }
 
+
+/**
+ * SAP target CSP middleware options
+ *
+ * @public
+ * @typedef {object} module:@ui5/server.server.SAPTargetCSPOptions
+ * @property {string} [defaultPolicy="sap-target-level-1"]
+ * @property {string} [defaultPolicyIsReportOnly=true]
+ * @property {string} [defaultPolicy2="sap-target-level-2"]
+ * @property {string} [defaultPolicy2IsReportOnly=true]
+ * @property {string[]} [ignorePaths=["test-resources/sap/ui/qunit/testrunner.html"]]
+ */
+
+
 /**
  * @public
  * @namespace
@@ -105,14 +119,15 @@ module.exports = {
 	 * @param {boolean} [options.h2=false] Whether HTTP/2 should be used - defaults to <code>http</code>
 	 * @param {string} [options.key] Path to private key to be used for https
 	 * @param {string} [options.cert] Path to certificate to be used for for https
+	 * @param {boolean} [options.simpleIndex=false] Use a simplified view for the server directory listing
 	 * @param {boolean} [options.acceptRemoteConnections=false] If true, listens to remote connections and
 	 * 															not only to localhost connections
-	 * @param {boolean} [options.sendSAPTargetCSP=false] If true, then the content security policies that SAP and UI5
-	 * 													aim for (AKA 'target policies'), are send for any requested
-	 * 													<code>*.html</code> file
-	 * @param {boolean} [options.simpleIndex=false] Use a simplified view for the server directory listing
-	 * @param {boolean} [options.serveCSPReports=false] Enable csp reports serving for request url
-	 * '/.ui5/csp/csp-reports.json'
+	 * @param {boolean|module:@ui5/server.server.SAPTargetCSPOptions} [options.sendSAPTargetCSP=false]
+	 * 										If set to <code>true</code> or an object, then the default (or configured)
+	 * 										set of security policies that SAP and UI5 aim for (AKA 'target policies'),
+	 * 										are send for any requested <code>*.html</code> file
+	 * @param {boolean} [options.serveCSPReports=false] Enable CSP reports serving for request url
+	 * 										'/.ui5/csp/csp-reports.json'
 	 * @returns {Promise<object>} Promise resolving once the server is listening.
 	 * 							It resolves with an object containing the <code>port</code>,
 	 * 							<code>h2</code>-flag and a <code>close</code> function,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ui5/server",
-	"version": "2.2.10",
+	"version": "3.0.0-alpha.0",
 	"description": "UI5 Tooling - Server",
 	"author": {
 		"name": "SAP SE",
@@ -104,10 +104,10 @@
 		"url": "git@github.com:SAP/ui5-server.git"
 	},
 	"dependencies": {
-		"@ui5/builder": "^2.9.0",
-		"@ui5/fs": "^2.0.6",
-		"@ui5/logger": "^2.0.1",
-		"body-parser": "^1.19.0",
+		"@ui5/builder": "^3.0.0-alpha.0",
+		"@ui5/fs": "^3.0.0-alpha.0",
+		"@ui5/logger": "^3.0.0-alpha.0",
+		"body-parser": "^1.19.1",
 		"compression": "^1.7.4",
 		"connect-openui5": "^0.10.2",
 		"cors": "^2.8.5",
@@ -116,34 +116,34 @@
 		"etag": "^1.8.1",
 		"express": "^4.17.1",
 		"fresh": "^0.5.2",
-		"graceful-fs": "^4.2.6",
+		"graceful-fs": "^4.2.8",
 		"make-dir": "^3.1.0",
-		"mime-types": "^2.1.30",
+		"mime-types": "^2.1.34",
 		"parseurl": "^1.3.3",
 		"portscanner": "^2.1.1",
 		"replacestream": "^4.0.3",
-		"router": "^1.3.5",
+		"router": "^1.3.6",
 		"spdy": "^4.0.2",
 		"treeify": "^1.0.1",
 		"yesno": "^0.3.1"
 	},
 	"devDependencies": {
-		"@ui5/project": "^2.3.1",
+		"@ui5/project": "^2.6.0",
 		"ava": "^3.15.0",
-		"chokidar-cli": "^2.1.0",
+		"chokidar-cli": "^3.0.0",
 		"cross-env": "^7.0.3",
-		"depcheck": "^1.4.1",
+		"depcheck": "^1.4.2",
 		"docdash": "^1.2.0",
-		"eslint": "^7.27.0",
+		"eslint": "^7.32.0",
 		"eslint-config-google": "^0.14.0",
-		"eslint-plugin-jsdoc": "^35.0.0",
+		"eslint-plugin-jsdoc": "^37.2.0",
 		"jsdoc": "^3.6.7",
 		"mock-require": "^3.0.3",
 		"nyc": "^15.1.0",
 		"open-cli": "^6.0.1",
 		"rimraf": "^3.0.2",
-		"sinon": "^11.1.1",
-		"supertest": "^6.1.3",
+		"sinon": "^11.1.2",
+		"supertest": "^6.1.6",
 		"tap-nyan": "^1.1.0",
 		"tap-xunit": "^2.4.1"
 	}