@wxn0brp/falcon-frame 0.0.7 → 0.0.10

package/dist/plugins/cors.js

@@ -1,3 +1,9 @@
+function setHeader(res, opts) {
+    if (opts.accessControlAllowMethods)
+        res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS");
+    if (opts.accessControlAllowHeaders)
+        res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+}
 export function createCORSPlugin(allowedOrigins, opts = {}) {
     opts = {
         accessControlAllowMethods: true,
@@ -7,13 +13,15 @@ export function createCORSPlugin(allowedOrigins, opts = {}) {
     return {
         id: "cors",
         process: (req, res, next) => {
+            if (allowedOrigins.includes("*")) {
+                res.setHeader("Access-Control-Allow-Origin", "*");
+                setHeader(res, opts);
+                return next();
+            }
             const origin = req.headers.origin;
             if (origin && allowedOrigins.includes(origin)) {
                 res.setHeader("Access-Control-Allow-Origin", origin);
-                if (opts.accessControlAllowMethods)
-                    res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS");
-                if (opts.accessControlAllowHeaders)
-                    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+                setHeader(res, opts);
             }
             if (req.method === "OPTIONS") {
                 res.statusCode = 204;

package/dist/req.js

@@ -10,9 +10,18 @@ export function handleRequest(req, res, FF) {
         return originalEnd.call(res, ...any);
     };
     const { logger, middlewares } = FF;
-    const parsedUrl = new URL(req.url || "", "http://localhost");
-    req.path = parsedUrl.pathname || "/";
-    req.query = Object.fromEntries(parsedUrl.searchParams);
+    try {
+        const [path, params] = (req.url || "").split("?");
+        const normalizedPath = path.replace(/\/{2,}/g, "/");
+        const parsedUrl = new URL(normalizedPath + (params ? `?${params}` : ""), "http://localhost");
+        req.path = parsedUrl.pathname || "/";
+        req.query = Object.fromEntries(parsedUrl.searchParams);
+    }
+    catch (e) {
+        logger.error(`Error parsing URL (${req.url}): ${e}`);
+        res.status(400).end("400: Bad request");
+        return;
+    }
     req.cookies = parseCookies(req.headers.cookie || "");
     req.params = {};
     req.valid = (schema) => validate(schema, req.body);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wxn0brp/falcon-frame",
-  "version": "0.0.7",
+  "version": "0.0.10",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "author": "wxn0brP",