ccxt 4.2.11 → 4.2.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -5
- package/build.sh +2 -2
- package/dist/ccxt.browser.js +640 -261
- package/dist/ccxt.browser.min.js +3 -3
- package/dist/cjs/_virtual/agent.js +7 -0
- package/dist/cjs/_virtual/parse-proxy-response.js +7 -0
- package/dist/cjs/_virtual/promisify.js +7 -0
- package/dist/cjs/ccxt.js +1 -1
- package/dist/cjs/js/ccxt.js +474 -0
- package/dist/cjs/js/src/abstract/ace.js +9 -0
- package/dist/cjs/js/src/abstract/alpaca.js +9 -0
- package/dist/cjs/js/src/abstract/ascendex.js +9 -0
- package/dist/cjs/js/src/abstract/bigone.js +9 -0
- package/dist/cjs/js/src/abstract/binance.js +9 -0
- package/dist/cjs/js/src/abstract/bingx.js +9 -0
- package/dist/cjs/js/src/abstract/bit2c.js +9 -0
- package/dist/cjs/js/src/abstract/bitbank.js +9 -0
- package/dist/cjs/js/src/abstract/bitbns.js +9 -0
- package/dist/cjs/js/src/abstract/bitfinex.js +9 -0
- package/dist/cjs/js/src/abstract/bitfinex2.js +9 -0
- package/dist/cjs/js/src/abstract/bitflyer.js +9 -0
- package/dist/cjs/js/src/abstract/bitforex.js +9 -0
- package/dist/cjs/js/src/abstract/bitget.js +9 -0
- package/dist/cjs/js/src/abstract/bithumb.js +9 -0
- package/dist/cjs/js/src/abstract/bitmart.js +9 -0
- package/dist/cjs/js/src/abstract/bitmex.js +9 -0
- package/dist/cjs/js/src/abstract/bitopro.js +9 -0
- package/dist/cjs/js/src/abstract/bitpanda.js +9 -0
- package/dist/cjs/js/src/abstract/bitrue.js +9 -0
- package/dist/cjs/js/src/abstract/bitso.js +9 -0
- package/dist/cjs/js/src/abstract/bitstamp.js +9 -0
- package/dist/cjs/js/src/abstract/bitteam.js +9 -0
- package/dist/cjs/js/src/abstract/bitvavo.js +9 -0
- package/dist/cjs/js/src/abstract/bl3p.js +9 -0
- package/dist/cjs/js/src/abstract/blockchaincom.js +9 -0
- package/dist/cjs/js/src/abstract/btcalpha.js +9 -0
- package/dist/cjs/js/src/abstract/btcbox.js +9 -0
- package/dist/cjs/js/src/abstract/btcmarkets.js +9 -0
- package/dist/cjs/js/src/abstract/btcturk.js +9 -0
- package/dist/cjs/js/src/abstract/bybit.js +9 -0
- package/dist/cjs/js/src/abstract/cex.js +9 -0
- package/dist/cjs/js/src/abstract/coinbase.js +9 -0
- package/dist/cjs/js/src/abstract/coinbasepro.js +9 -0
- package/dist/cjs/js/src/abstract/coincheck.js +9 -0
- package/dist/cjs/js/src/abstract/coinex.js +9 -0
- package/dist/cjs/js/src/abstract/coinlist.js +9 -0
- package/dist/cjs/js/src/abstract/coinmate.js +9 -0
- package/dist/cjs/js/src/abstract/coinone.js +9 -0
- package/dist/cjs/js/src/abstract/coinsph.js +9 -0
- package/dist/cjs/js/src/abstract/coinspot.js +9 -0
- package/dist/cjs/js/src/abstract/cryptocom.js +9 -0
- package/dist/cjs/js/src/abstract/currencycom.js +9 -0
- package/dist/cjs/js/src/abstract/delta.js +9 -0
- package/dist/cjs/js/src/abstract/deribit.js +9 -0
- package/dist/cjs/js/src/abstract/digifinex.js +9 -0
- package/dist/cjs/js/src/abstract/exmo.js +9 -0
- package/dist/cjs/js/src/abstract/gate.js +9 -0
- package/dist/cjs/js/src/abstract/gemini.js +9 -0
- package/dist/cjs/js/src/abstract/hitbtc.js +9 -0
- package/dist/cjs/js/src/abstract/hollaex.js +9 -0
- package/dist/cjs/js/src/abstract/htx.js +9 -0
- package/dist/cjs/js/src/abstract/huobijp.js +9 -0
- package/dist/cjs/js/src/abstract/idex.js +9 -0
- package/dist/cjs/js/src/abstract/independentreserve.js +9 -0
- package/dist/cjs/js/src/abstract/indodax.js +9 -0
- package/dist/cjs/js/src/abstract/kraken.js +9 -0
- package/dist/cjs/js/src/abstract/krakenfutures.js +9 -0
- package/dist/cjs/js/src/abstract/kucoin.js +9 -0
- package/dist/cjs/js/src/abstract/kucoinfutures.js +9 -0
- package/dist/cjs/js/src/abstract/kuna.js +9 -0
- package/dist/cjs/js/src/abstract/latoken.js +9 -0
- package/dist/cjs/js/src/abstract/lbank.js +9 -0
- package/dist/cjs/js/src/abstract/luno.js +9 -0
- package/dist/cjs/js/src/abstract/lykke.js +9 -0
- package/dist/cjs/js/src/abstract/mercado.js +9 -0
- package/dist/cjs/js/src/abstract/mexc.js +9 -0
- package/dist/cjs/js/src/abstract/ndax.js +9 -0
- package/dist/cjs/js/src/abstract/novadax.js +9 -0
- package/dist/cjs/js/src/abstract/oceanex.js +9 -0
- package/dist/cjs/js/src/abstract/okcoin.js +9 -0
- package/dist/cjs/js/src/abstract/okx.js +9 -0
- package/dist/cjs/js/src/abstract/p2b.js +9 -0
- package/dist/cjs/js/src/abstract/paymium.js +9 -0
- package/dist/cjs/js/src/abstract/phemex.js +9 -0
- package/dist/cjs/js/src/abstract/poloniex.js +9 -0
- package/dist/cjs/js/src/abstract/poloniexfutures.js +9 -0
- package/dist/cjs/js/src/abstract/probit.js +9 -0
- package/dist/cjs/js/src/abstract/timex.js +9 -0
- package/dist/cjs/js/src/abstract/tokocrypto.js +9 -0
- package/dist/cjs/js/src/abstract/upbit.js +9 -0
- package/dist/cjs/js/src/abstract/wavesexchange.js +9 -0
- package/dist/cjs/js/src/abstract/wazirx.js +9 -0
- package/dist/cjs/js/src/abstract/whitebit.js +9 -0
- package/dist/cjs/js/src/abstract/woo.js +9 -0
- package/dist/cjs/js/src/abstract/yobit.js +9 -0
- package/dist/cjs/js/src/abstract/zaif.js +9 -0
- package/dist/cjs/js/src/abstract/zonda.js +9 -0
- package/dist/cjs/js/src/ace.js +1058 -0
- package/dist/cjs/js/src/alpaca.js +1125 -0
- package/dist/cjs/js/src/ascendex.js +3360 -0
- package/dist/cjs/js/src/base/Exchange.js +5110 -0
- package/dist/cjs/js/src/base/Precise.js +263 -0
- package/dist/cjs/js/src/base/errors.js +299 -0
- package/dist/cjs/js/src/base/functions/crypto.js +78 -0
- package/dist/cjs/js/src/base/functions/encode.js +44 -0
- package/dist/cjs/js/src/base/functions/generic.js +193 -0
- package/dist/cjs/js/src/base/functions/misc.js +96 -0
- package/dist/cjs/js/src/base/functions/number.js +297 -0
- package/dist/cjs/js/src/base/functions/platform.js +28 -0
- package/dist/cjs/js/src/base/functions/rsa.js +34 -0
- package/dist/cjs/js/src/base/functions/string.js +48 -0
- package/dist/cjs/js/src/base/functions/throttle.js +66 -0
- package/dist/cjs/js/src/base/functions/time.js +187 -0
- package/dist/cjs/js/src/base/functions/totp.js +24 -0
- package/dist/cjs/js/src/base/functions/type.js +162 -0
- package/dist/cjs/js/src/base/functions.js +157 -0
- package/dist/cjs/js/src/base/ws/Cache.js +254 -0
- package/dist/cjs/js/src/base/ws/Client.js +299 -0
- package/dist/cjs/js/src/base/ws/Future.js +34 -0
- package/dist/cjs/js/src/base/ws/OrderBook.js +107 -0
- package/dist/cjs/js/src/base/ws/OrderBookSide.js +281 -0
- package/dist/cjs/js/src/base/ws/WsClient.js +69 -0
- package/dist/cjs/js/src/bequant.js +33 -0
- package/dist/cjs/js/src/bigone.js +2142 -0
- package/dist/cjs/js/src/binance.js +9729 -0
- package/dist/cjs/js/src/binancecoinm.js +45 -0
- package/dist/cjs/js/src/binanceus.js +84 -0
- package/dist/cjs/js/src/binanceusdm.js +58 -0
- package/dist/cjs/js/src/bingx.js +3737 -0
- package/dist/cjs/js/src/bit2c.js +916 -0
- package/dist/cjs/js/src/bitbank.js +1000 -0
- package/dist/cjs/js/src/bitbay.js +17 -0
- package/dist/cjs/js/src/bitbns.js +1220 -0
- package/dist/cjs/js/src/bitcoincom.js +17 -0
- package/dist/cjs/js/src/bitfinex.js +1670 -0
- package/dist/cjs/js/src/bitfinex2.js +2990 -0
- package/dist/cjs/js/src/bitflyer.js +1045 -0
- package/dist/cjs/js/src/bitforex.js +852 -0
- package/dist/cjs/js/src/bitget.js +8284 -0
- package/dist/cjs/js/src/bithumb.js +1090 -0
- package/dist/cjs/js/src/bitmart.js +4454 -0
- package/dist/cjs/js/src/bitmex.js +2884 -0
- package/dist/cjs/js/src/bitopro.js +1724 -0
- package/dist/cjs/js/src/bitpanda.js +2002 -0
- package/dist/cjs/js/src/bitrue.js +3253 -0
- package/dist/cjs/js/src/bitso.js +1753 -0
- package/dist/cjs/js/src/bitstamp.js +2188 -0
- package/dist/cjs/js/src/bitteam.js +2309 -0
- package/dist/cjs/js/src/bitvavo.js +1968 -0
- package/dist/cjs/js/src/bl3p.js +447 -0
- package/dist/cjs/js/src/blockchaincom.js +1160 -0
- package/dist/cjs/js/src/btcalpha.js +929 -0
- package/dist/cjs/js/src/btcbox.js +565 -0
- package/dist/cjs/js/src/btcmarkets.js +1237 -0
- package/dist/cjs/js/src/btcturk.js +929 -0
- package/dist/cjs/js/src/bybit.js +7646 -0
- package/dist/cjs/js/src/cex.js +1693 -0
- package/dist/cjs/js/src/coinbase.js +3274 -0
- package/dist/cjs/js/src/coinbasepro.js +1866 -0
- package/dist/cjs/js/src/coincheck.js +843 -0
- package/dist/cjs/js/src/coinex.js +5414 -0
- package/dist/cjs/js/src/coinlist.js +2329 -0
- package/dist/cjs/js/src/coinmate.js +989 -0
- package/dist/cjs/js/src/coinone.js +1185 -0
- package/dist/cjs/js/src/coinsph.js +1933 -0
- package/dist/cjs/js/src/coinspot.js +548 -0
- package/dist/cjs/js/src/cryptocom.js +3007 -0
- package/dist/cjs/js/src/currencycom.js +2015 -0
- package/dist/cjs/js/src/delta.js +3256 -0
- package/dist/cjs/js/src/deribit.js +3306 -0
- package/dist/cjs/js/src/digifinex.js +4307 -0
- package/dist/cjs/js/src/exmo.js +2645 -0
- package/dist/cjs/js/src/fmfwio.js +34 -0
- package/dist/cjs/js/src/gate.js +7054 -0
- package/dist/cjs/js/src/gateio.js +16 -0
- package/dist/cjs/js/src/gemini.js +1801 -0
- package/dist/cjs/js/src/hitbtc.js +3660 -0
- package/dist/cjs/js/src/hitbtc3.js +19 -0
- package/dist/cjs/js/src/hollaex.js +1882 -0
- package/dist/cjs/js/src/htx.js +9024 -0
- package/dist/cjs/js/src/huobi.js +16 -0
- package/dist/cjs/js/src/huobijp.js +1918 -0
- package/dist/cjs/js/src/idex.js +1770 -0
- package/dist/cjs/js/src/independentreserve.js +759 -0
- package/dist/cjs/js/src/indodax.js +1069 -0
- package/dist/cjs/js/src/kraken.js +2861 -0
- package/dist/cjs/js/src/krakenfutures.js +2407 -0
- package/dist/cjs/js/src/kucoin.js +4489 -0
- package/dist/cjs/js/src/kucoinfutures.js +2475 -0
- package/dist/cjs/js/src/kuna.js +1949 -0
- package/dist/cjs/js/src/latoken.js +1729 -0
- package/dist/cjs/js/src/lbank.js +2825 -0
- package/dist/cjs/js/src/luno.js +1044 -0
- package/dist/cjs/js/src/lykke.js +1303 -0
- package/dist/cjs/js/src/mercado.js +897 -0
- package/dist/cjs/js/src/mexc.js +5407 -0
- package/dist/cjs/js/src/ndax.js +2450 -0
- package/dist/cjs/js/src/novadax.js +1556 -0
- package/dist/cjs/js/src/oceanex.js +964 -0
- package/dist/cjs/js/src/okcoin.js +3115 -0
- package/dist/cjs/js/src/okx.js +7329 -0
- package/dist/cjs/js/src/p2b.js +1243 -0
- package/dist/cjs/js/src/paymium.js +597 -0
- package/dist/cjs/js/src/phemex.js +4715 -0
- package/dist/cjs/js/src/poloniex.js +2356 -0
- package/dist/cjs/js/src/poloniexfutures.js +1794 -0
- package/dist/cjs/js/src/pro/alpaca.js +714 -0
- package/dist/cjs/js/src/pro/ascendex.js +957 -0
- package/dist/cjs/js/src/pro/bequant.js +33 -0
- package/dist/cjs/js/src/pro/binance.js +2796 -0
- package/dist/cjs/js/src/pro/binancecoinm.js +23 -0
- package/dist/cjs/js/src/pro/binanceus.js +51 -0
- package/dist/cjs/js/src/pro/binanceusdm.js +32 -0
- package/dist/cjs/js/src/pro/bingx.js +944 -0
- package/dist/cjs/js/src/pro/bitcoincom.js +29 -0
- package/dist/cjs/js/src/pro/bitfinex.js +672 -0
- package/dist/cjs/js/src/pro/bitfinex2.js +1159 -0
- package/dist/cjs/js/src/pro/bitget.js +1733 -0
- package/dist/cjs/js/src/pro/bitmart.js +1486 -0
- package/dist/cjs/js/src/pro/bitmex.js +1576 -0
- package/dist/cjs/js/src/pro/bitopro.js +327 -0
- package/dist/cjs/js/src/pro/bitpanda.js +1341 -0
- package/dist/cjs/js/src/pro/bitrue.js +462 -0
- package/dist/cjs/js/src/pro/bitstamp.js +547 -0
- package/dist/cjs/js/src/pro/bitvavo.js +704 -0
- package/dist/cjs/js/src/pro/blockchaincom.js +794 -0
- package/dist/cjs/js/src/pro/bybit.js +1843 -0
- package/dist/cjs/js/src/pro/cex.js +1510 -0
- package/dist/cjs/js/src/pro/coinbase.js +561 -0
- package/dist/cjs/js/src/pro/coinbasepro.js +968 -0
- package/dist/cjs/js/src/pro/coinex.js +1095 -0
- package/dist/cjs/js/src/pro/cryptocom.js +1020 -0
- package/dist/cjs/js/src/pro/currencycom.js +563 -0
- package/dist/cjs/js/src/pro/deribit.js +825 -0
- package/dist/cjs/js/src/pro/exmo.js +658 -0
- package/dist/cjs/js/src/pro/gate.js +1316 -0
- package/dist/cjs/js/src/pro/gateio.js +16 -0
- package/dist/cjs/js/src/pro/gemini.js +649 -0
- package/dist/cjs/js/src/pro/hitbtc.js +1293 -0
- package/dist/cjs/js/src/pro/hollaex.js +597 -0
- package/dist/cjs/js/src/pro/htx.js +2383 -0
- package/dist/cjs/js/src/pro/huobi.js +16 -0
- package/dist/cjs/js/src/pro/huobijp.js +606 -0
- package/dist/cjs/js/src/pro/idex.js +714 -0
- package/dist/cjs/js/src/pro/independentreserve.js +280 -0
- package/dist/cjs/js/src/pro/kraken.js +1364 -0
- package/dist/cjs/js/src/pro/krakenfutures.js +1500 -0
- package/dist/cjs/js/src/pro/kucoin.js +1052 -0
- package/dist/cjs/js/src/pro/kucoinfutures.js +981 -0
- package/dist/cjs/js/src/pro/luno.js +322 -0
- package/dist/cjs/js/src/pro/mexc.js +1170 -0
- package/dist/cjs/js/src/pro/ndax.js +545 -0
- package/dist/cjs/js/src/pro/okcoin.js +760 -0
- package/dist/cjs/js/src/pro/okx.js +1558 -0
- package/dist/cjs/js/src/pro/phemex.js +1511 -0
- package/dist/cjs/js/src/pro/poloniex.js +1253 -0
- package/dist/cjs/js/src/pro/poloniexfutures.js +1014 -0
- package/dist/cjs/js/src/pro/probit.js +586 -0
- package/dist/cjs/js/src/pro/upbit.js +234 -0
- package/dist/cjs/js/src/pro/wazirx.js +776 -0
- package/dist/cjs/js/src/pro/whitebit.js +927 -0
- package/dist/cjs/js/src/pro/woo.js +769 -0
- package/dist/cjs/js/src/probit.js +1865 -0
- package/dist/cjs/js/src/static_dependencies/fflake/browser.js +401 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/JSEncrypt.js +195 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/JSEncryptRSAKey.js +308 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/asn1js/asn1.js +554 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/asn1js/base64.js +94 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/asn1js/hex.js +70 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/asn1js/int10.js +91 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/base64.js +16 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/jsbn.js +1760 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/prng4.js +52 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/rng.js +81 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/rsa.js +376 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsbn/util.js +70 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsrsasign/asn1-1.0.js +1580 -0
- package/dist/cjs/js/src/static_dependencies/jsencrypt/lib/jsrsasign/yahoo.js +74 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/_shortw_utils.js +24 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/curve.js +158 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/edwards.js +429 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/hash-to-curve.js +176 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/modular.js +324 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/montgomery.js +163 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/utils.js +245 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/abstract/weierstrass.js +1018 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/ed25519.js +383 -0
- package/dist/cjs/js/src/static_dependencies/noble-curves/secp256k1.js +258 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/_assert.js +53 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/_sha2.js +120 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/_u64.js +69 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/crypto.js +7 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/hmac.js +83 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/md5.js +240 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/sha1.js +91 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/sha256.js +130 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/sha3.js +214 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/sha512.js +239 -0
- package/dist/cjs/js/src/static_dependencies/noble-hashes/utils.js +93 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/body.js +354 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/errors/abort-error.js +16 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/errors/base.js +20 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/errors/fetch-error.js +30 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/headers.js +239 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/index.js +372 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/request.js +273 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/response.js +139 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/utils/get-search.js +14 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/utils/is-redirect.js +16 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/utils/is.js +81 -0
- package/dist/cjs/js/src/static_dependencies/node-fetch/utils/referrer.js +292 -0
- package/dist/cjs/js/src/static_dependencies/proxies/agent-base/index.js +103 -0
- package/dist/cjs/js/src/static_dependencies/proxies/http-proxy-agent/index.js +140 -0
- package/dist/cjs/js/src/static_dependencies/proxies/https-proxy-agent/index.js +175 -0
- package/dist/cjs/js/src/static_dependencies/proxies/https-proxy-agent/parse-proxy-response.js +95 -0
- package/dist/cjs/js/src/static_dependencies/qs/index.cjs.js +7 -0
- package/dist/cjs/js/src/static_dependencies/scure-base/index.js +383 -0
- package/dist/cjs/js/src/timex.js +1562 -0
- package/dist/cjs/js/src/tokocrypto.js +2542 -0
- package/dist/cjs/js/src/upbit.js +1844 -0
- package/dist/cjs/js/src/wavesexchange.js +2607 -0
- package/dist/cjs/js/src/wazirx.js +953 -0
- package/dist/cjs/js/src/whitebit.js +2309 -0
- package/dist/cjs/js/src/woo.js +2715 -0
- package/dist/cjs/js/src/yobit.js +1314 -0
- package/dist/cjs/js/src/zaif.js +736 -0
- package/dist/cjs/js/src/zonda.js +1883 -0
- package/js/ccxt.d.ts +1 -1
- package/js/ccxt.js +1 -1
- package/js/src/abstract/bigone.d.ts +18 -0
- package/js/src/abstract/binance.d.ts +2 -0
- package/js/src/abstract/binancecoinm.d.ts +2 -0
- package/js/src/abstract/binanceus.d.ts +2 -0
- package/js/src/abstract/binanceusdm.d.ts +2 -0
- package/js/src/abstract/bybit.d.ts +1 -0
- package/js/src/abstract/gate.d.ts +11 -0
- package/js/src/abstract/gateio.d.ts +11 -0
- package/js/src/alpaca.js +18 -18
- package/js/src/base/Exchange.d.ts +5 -1
- package/js/src/base/Exchange.js +101 -12
- package/js/src/bigone.d.ts +1 -2
- package/js/src/bigone.js +340 -145
- package/js/src/binance.js +15 -8
- package/js/src/bingx.js +9 -2
- package/js/src/bitfinex.d.ts +2 -2
- package/js/src/bitfinex.js +2 -3
- package/js/src/bitget.js +21 -8
- package/js/src/bitmart.d.ts +2 -2
- package/js/src/bitmart.js +3 -3
- package/js/src/bitmex.js +1 -0
- package/js/src/bybit.js +2 -0
- package/js/src/coinlist.js +2 -3
- package/js/src/coinsph.js +2 -3
- package/js/src/deribit.js +1 -0
- package/js/src/gate.d.ts +4 -4
- package/js/src/gate.js +22 -3
- package/js/src/hitbtc.d.ts +4 -4
- package/js/src/hitbtc.js +2 -3
- package/js/src/htx.js +4 -7
- package/js/src/huobijp.js +2 -3
- package/js/src/kraken.js +1 -0
- package/js/src/mexc.js +2 -1
- package/js/src/okx.js +13 -3
- package/js/src/pro/binance.d.ts +2 -23
- package/js/src/pro/binance.js +58 -22
- package/js/src/pro/coinbase.d.ts +2 -2
- package/js/src/pro/coinbase.js +4 -1
- package/js/src/pro/coinbasepro.d.ts +2 -2
- package/js/src/pro/hitbtc.d.ts +2 -2
- package/js/src/pro/poloniex.d.ts +2 -2
- package/js/src/upbit.d.ts +3 -101
- package/js/src/upbit.js +12 -12
- package/js/src/woo.js +2 -0
- package/package.json +1 -1
- package/skip-tests.json +5 -0
|
@@ -0,0 +1,139 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
var headers = require('./headers.js');
|
|
4
|
+
var body = require('./body.js');
|
|
5
|
+
var isRedirect = require('./utils/is-redirect.js');
|
|
6
|
+
|
|
7
|
+
/**
|
|
8
|
+
* Response.js
|
|
9
|
+
*
|
|
10
|
+
* Response class provides content decoding
|
|
11
|
+
*/
|
|
12
|
+
const INTERNALS = Symbol('Response internals');
|
|
13
|
+
/**
|
|
14
|
+
* Response class
|
|
15
|
+
*
|
|
16
|
+
* Ref: https://fetch.spec.whatwg.org/#response-class
|
|
17
|
+
*
|
|
18
|
+
* @param Stream body Readable stream
|
|
19
|
+
* @param Object opts Response options
|
|
20
|
+
* @return Void
|
|
21
|
+
*/
|
|
22
|
+
class Response extends body["default"] {
|
|
23
|
+
constructor(body$1 = null, options = {}) {
|
|
24
|
+
super(body$1, options);
|
|
25
|
+
// eslint-disable-next-line no-eq-null, eqeqeq, no-negated-condition
|
|
26
|
+
const status = options.status != null ? options.status : 200;
|
|
27
|
+
const headers$1 = new headers["default"](options.headers);
|
|
28
|
+
if (body$1 !== null && !headers$1.has('Content-Type')) {
|
|
29
|
+
const contentType = body.extractContentType(body$1);
|
|
30
|
+
if (contentType) {
|
|
31
|
+
headers$1.append('Content-Type', contentType);
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
this[INTERNALS] = {
|
|
35
|
+
type: 'default',
|
|
36
|
+
url: options.url,
|
|
37
|
+
status,
|
|
38
|
+
statusText: options.statusText || '',
|
|
39
|
+
headers: headers$1,
|
|
40
|
+
counter: options.counter,
|
|
41
|
+
highWaterMark: options.highWaterMark
|
|
42
|
+
};
|
|
43
|
+
}
|
|
44
|
+
get type() {
|
|
45
|
+
return this[INTERNALS].type;
|
|
46
|
+
}
|
|
47
|
+
get url() {
|
|
48
|
+
return this[INTERNALS].url || '';
|
|
49
|
+
}
|
|
50
|
+
get status() {
|
|
51
|
+
return this[INTERNALS].status;
|
|
52
|
+
}
|
|
53
|
+
/**
|
|
54
|
+
* Convenience property representing if the request ended normally
|
|
55
|
+
*/
|
|
56
|
+
get ok() {
|
|
57
|
+
return this[INTERNALS].status >= 200 && this[INTERNALS].status < 300;
|
|
58
|
+
}
|
|
59
|
+
get redirected() {
|
|
60
|
+
return this[INTERNALS].counter > 0;
|
|
61
|
+
}
|
|
62
|
+
get statusText() {
|
|
63
|
+
return this[INTERNALS].statusText;
|
|
64
|
+
}
|
|
65
|
+
get headers() {
|
|
66
|
+
return this[INTERNALS].headers;
|
|
67
|
+
}
|
|
68
|
+
get highWaterMark() {
|
|
69
|
+
return this[INTERNALS].highWaterMark;
|
|
70
|
+
}
|
|
71
|
+
/**
|
|
72
|
+
* Clone this response
|
|
73
|
+
*
|
|
74
|
+
* @return Response
|
|
75
|
+
*/
|
|
76
|
+
clone() {
|
|
77
|
+
return new Response(body.clone(this, this.highWaterMark), {
|
|
78
|
+
type: this.type,
|
|
79
|
+
url: this.url,
|
|
80
|
+
status: this.status,
|
|
81
|
+
statusText: this.statusText,
|
|
82
|
+
headers: this.headers,
|
|
83
|
+
ok: this.ok,
|
|
84
|
+
redirected: this.redirected,
|
|
85
|
+
size: this.size,
|
|
86
|
+
highWaterMark: this.highWaterMark
|
|
87
|
+
});
|
|
88
|
+
}
|
|
89
|
+
/**
|
|
90
|
+
* @param {string} url The URL that the new response is to originate from.
|
|
91
|
+
* @param {number} status An optional status code for the response (e.g., 302.)
|
|
92
|
+
* @returns {Response} A Response object.
|
|
93
|
+
*/
|
|
94
|
+
static redirect(url, status = 302) {
|
|
95
|
+
if (!isRedirect.isRedirect(status)) {
|
|
96
|
+
throw new RangeError('Failed to execute "redirect" on "response": Invalid status code');
|
|
97
|
+
}
|
|
98
|
+
return new Response(null, {
|
|
99
|
+
headers: {
|
|
100
|
+
location: new URL(url).toString()
|
|
101
|
+
},
|
|
102
|
+
status
|
|
103
|
+
});
|
|
104
|
+
}
|
|
105
|
+
static error() {
|
|
106
|
+
const response = new Response(null, { status: 0, statusText: '' });
|
|
107
|
+
response[INTERNALS].type = 'error';
|
|
108
|
+
return response;
|
|
109
|
+
}
|
|
110
|
+
static json(data = undefined, init = {}) {
|
|
111
|
+
const body = JSON.stringify(data);
|
|
112
|
+
if (body === undefined) {
|
|
113
|
+
throw new TypeError('data is not JSON serializable');
|
|
114
|
+
}
|
|
115
|
+
const headers$1 = new headers["default"](init && init.headers);
|
|
116
|
+
if (!headers$1.has('content-type')) {
|
|
117
|
+
headers$1.set('content-type', 'application/json');
|
|
118
|
+
}
|
|
119
|
+
return new Response(body, {
|
|
120
|
+
...init,
|
|
121
|
+
headers: headers$1
|
|
122
|
+
});
|
|
123
|
+
}
|
|
124
|
+
get [Symbol.toStringTag]() {
|
|
125
|
+
return 'Response';
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
Object.defineProperties(Response.prototype, {
|
|
129
|
+
type: { enumerable: true },
|
|
130
|
+
url: { enumerable: true },
|
|
131
|
+
status: { enumerable: true },
|
|
132
|
+
ok: { enumerable: true },
|
|
133
|
+
redirected: { enumerable: true },
|
|
134
|
+
statusText: { enumerable: true },
|
|
135
|
+
headers: { enumerable: true },
|
|
136
|
+
clone: { enumerable: true }
|
|
137
|
+
});
|
|
138
|
+
|
|
139
|
+
module.exports = Response;
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
+
|
|
5
|
+
const getSearch = parsedURL => {
|
|
6
|
+
if (parsedURL.search) {
|
|
7
|
+
return parsedURL.search;
|
|
8
|
+
}
|
|
9
|
+
const lastOffset = parsedURL.href.length - 1;
|
|
10
|
+
const hash = parsedURL.hash || (parsedURL.href[lastOffset] === '#' ? '#' : '');
|
|
11
|
+
return parsedURL.href[lastOffset - hash.length] === '?' ? '?' : '';
|
|
12
|
+
};
|
|
13
|
+
|
|
14
|
+
exports.getSearch = getSearch;
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
+
|
|
5
|
+
const redirectStatus = new Set([301, 302, 303, 307, 308]);
|
|
6
|
+
/**
|
|
7
|
+
* Redirect code matching
|
|
8
|
+
*
|
|
9
|
+
* @param {number} code - Status code
|
|
10
|
+
* @return {boolean}
|
|
11
|
+
*/
|
|
12
|
+
const isRedirect = code => {
|
|
13
|
+
return redirectStatus.has(code);
|
|
14
|
+
};
|
|
15
|
+
|
|
16
|
+
exports.isRedirect = isRedirect;
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
+
|
|
5
|
+
/**
|
|
6
|
+
* Is.js
|
|
7
|
+
*
|
|
8
|
+
* Object type checks.
|
|
9
|
+
*/
|
|
10
|
+
const NAME = Symbol.toStringTag;
|
|
11
|
+
/**
|
|
12
|
+
* Check if `obj` is a URLSearchParams object
|
|
13
|
+
* ref: https://github.com/node-fetch/node-fetch/issues/296#issuecomment-307598143
|
|
14
|
+
* @param {*} object - Object to check for
|
|
15
|
+
* @return {boolean}
|
|
16
|
+
*/
|
|
17
|
+
const isURLSearchParameters = object => {
|
|
18
|
+
return (typeof object === 'object' &&
|
|
19
|
+
typeof object.append === 'function' &&
|
|
20
|
+
typeof object.delete === 'function' &&
|
|
21
|
+
typeof object.get === 'function' &&
|
|
22
|
+
typeof object.getAll === 'function' &&
|
|
23
|
+
typeof object.has === 'function' &&
|
|
24
|
+
typeof object.set === 'function' &&
|
|
25
|
+
typeof object.sort === 'function' &&
|
|
26
|
+
object[NAME] === 'URLSearchParams');
|
|
27
|
+
};
|
|
28
|
+
/**
|
|
29
|
+
* Check if `object` is a W3C `Blob` object (which `File` inherits from)
|
|
30
|
+
* @param {*} object - Object to check for
|
|
31
|
+
* @return {boolean}
|
|
32
|
+
*/
|
|
33
|
+
const isBlob = object => {
|
|
34
|
+
return (object &&
|
|
35
|
+
typeof object === 'object' &&
|
|
36
|
+
typeof object.arrayBuffer === 'function' &&
|
|
37
|
+
typeof object.type === 'string' &&
|
|
38
|
+
typeof object.stream === 'function' &&
|
|
39
|
+
typeof object.constructor === 'function' &&
|
|
40
|
+
/^(Blob|File)$/.test(object[NAME]));
|
|
41
|
+
};
|
|
42
|
+
/**
|
|
43
|
+
* Check if `obj` is an instance of AbortSignal.
|
|
44
|
+
* @param {*} object - Object to check for
|
|
45
|
+
* @return {boolean}
|
|
46
|
+
*/
|
|
47
|
+
const isAbortSignal = object => {
|
|
48
|
+
return (typeof object === 'object' && (object[NAME] === 'AbortSignal' ||
|
|
49
|
+
object[NAME] === 'EventTarget'));
|
|
50
|
+
};
|
|
51
|
+
/**
|
|
52
|
+
* isDomainOrSubdomain reports whether sub is a subdomain (or exact match) of
|
|
53
|
+
* the parent domain.
|
|
54
|
+
*
|
|
55
|
+
* Both domains must already be in canonical form.
|
|
56
|
+
* @param {string|URL} original
|
|
57
|
+
* @param {string|URL} destination
|
|
58
|
+
*/
|
|
59
|
+
const isDomainOrSubdomain = (destination, original) => {
|
|
60
|
+
const orig = new URL(original).hostname;
|
|
61
|
+
const dest = new URL(destination).hostname;
|
|
62
|
+
return orig === dest || orig.endsWith(`.${dest}`);
|
|
63
|
+
};
|
|
64
|
+
/**
|
|
65
|
+
* isSameProtocol reports whether the two provided URLs use the same protocol.
|
|
66
|
+
*
|
|
67
|
+
* Both domains must already be in canonical form.
|
|
68
|
+
* @param {string|URL} original
|
|
69
|
+
* @param {string|URL} destination
|
|
70
|
+
*/
|
|
71
|
+
const isSameProtocol = (destination, original) => {
|
|
72
|
+
const orig = new URL(original).protocol;
|
|
73
|
+
const dest = new URL(destination).protocol;
|
|
74
|
+
return orig === dest;
|
|
75
|
+
};
|
|
76
|
+
|
|
77
|
+
exports.isAbortSignal = isAbortSignal;
|
|
78
|
+
exports.isBlob = isBlob;
|
|
79
|
+
exports.isDomainOrSubdomain = isDomainOrSubdomain;
|
|
80
|
+
exports.isSameProtocol = isSameProtocol;
|
|
81
|
+
exports.isURLSearchParameters = isURLSearchParameters;
|
|
@@ -0,0 +1,292 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
+
|
|
5
|
+
var node_net = require('node:net');
|
|
6
|
+
|
|
7
|
+
/**
|
|
8
|
+
* @external URL
|
|
9
|
+
* @see {@link https://developer.mozilla.org/en-US/docs/Web/API/URL|URL}
|
|
10
|
+
*/
|
|
11
|
+
/**
|
|
12
|
+
* @module utils/referrer
|
|
13
|
+
* @private
|
|
14
|
+
*/
|
|
15
|
+
/**
|
|
16
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#strip-url|Referrer Policy §8.4. Strip url for use as a referrer}
|
|
17
|
+
* @param {string} URL
|
|
18
|
+
* @param {boolean} [originOnly=false]
|
|
19
|
+
*/
|
|
20
|
+
function stripURLForUseAsAReferrer(url, originOnly = false) {
|
|
21
|
+
// 1. If url is null, return no referrer.
|
|
22
|
+
if (url == null) { // eslint-disable-line no-eq-null, eqeqeq
|
|
23
|
+
return 'no-referrer';
|
|
24
|
+
}
|
|
25
|
+
url = new URL(url);
|
|
26
|
+
// 2. If url's scheme is a local scheme, then return no referrer.
|
|
27
|
+
if (/^(about|blob|data):$/.test(url.protocol)) {
|
|
28
|
+
return 'no-referrer';
|
|
29
|
+
}
|
|
30
|
+
// 3. Set url's username to the empty string.
|
|
31
|
+
url.username = '';
|
|
32
|
+
// 4. Set url's password to null.
|
|
33
|
+
// Note: `null` appears to be a mistake as this actually results in the password being `"null"`.
|
|
34
|
+
url.password = '';
|
|
35
|
+
// 5. Set url's fragment to null.
|
|
36
|
+
// Note: `null` appears to be a mistake as this actually results in the fragment being `"#null"`.
|
|
37
|
+
url.hash = '';
|
|
38
|
+
// 6. If the origin-only flag is true, then:
|
|
39
|
+
if (originOnly) {
|
|
40
|
+
// 6.1. Set url's path to null.
|
|
41
|
+
// Note: `null` appears to be a mistake as this actually results in the path being `"/null"`.
|
|
42
|
+
url.pathname = '';
|
|
43
|
+
// 6.2. Set url's query to null.
|
|
44
|
+
// Note: `null` appears to be a mistake as this actually results in the query being `"?null"`.
|
|
45
|
+
url.search = '';
|
|
46
|
+
}
|
|
47
|
+
// 7. Return url.
|
|
48
|
+
return url;
|
|
49
|
+
}
|
|
50
|
+
/**
|
|
51
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#enumdef-referrerpolicy|enum ReferrerPolicy}
|
|
52
|
+
*/
|
|
53
|
+
const ReferrerPolicy = new Set([
|
|
54
|
+
'',
|
|
55
|
+
'no-referrer',
|
|
56
|
+
'no-referrer-when-downgrade',
|
|
57
|
+
'same-origin',
|
|
58
|
+
'origin',
|
|
59
|
+
'strict-origin',
|
|
60
|
+
'origin-when-cross-origin',
|
|
61
|
+
'strict-origin-when-cross-origin',
|
|
62
|
+
'unsafe-url'
|
|
63
|
+
]);
|
|
64
|
+
/**
|
|
65
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#default-referrer-policy|default referrer policy}
|
|
66
|
+
*/
|
|
67
|
+
const DEFAULT_REFERRER_POLICY = 'strict-origin-when-cross-origin';
|
|
68
|
+
/**
|
|
69
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#referrer-policies|Referrer Policy §3. Referrer Policies}
|
|
70
|
+
* @param {string} referrerPolicy
|
|
71
|
+
* @returns {string} referrerPolicy
|
|
72
|
+
*/
|
|
73
|
+
function validateReferrerPolicy(referrerPolicy) {
|
|
74
|
+
if (!ReferrerPolicy.has(referrerPolicy)) {
|
|
75
|
+
throw new TypeError(`Invalid referrerPolicy: ${referrerPolicy}`);
|
|
76
|
+
}
|
|
77
|
+
return referrerPolicy;
|
|
78
|
+
}
|
|
79
|
+
/**
|
|
80
|
+
* @see {@link https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy|Referrer Policy §3.2. Is origin potentially trustworthy?}
|
|
81
|
+
* @param {external:URL} url
|
|
82
|
+
* @returns `true`: "Potentially Trustworthy", `false`: "Not Trustworthy"
|
|
83
|
+
*/
|
|
84
|
+
function isOriginPotentiallyTrustworthy(url) {
|
|
85
|
+
// 1. If origin is an opaque origin, return "Not Trustworthy".
|
|
86
|
+
// Not applicable
|
|
87
|
+
// 2. Assert: origin is a tuple origin.
|
|
88
|
+
// Not for implementations
|
|
89
|
+
// 3. If origin's scheme is either "https" or "wss", return "Potentially Trustworthy".
|
|
90
|
+
if (/^(http|ws)s:$/.test(url.protocol)) {
|
|
91
|
+
return true;
|
|
92
|
+
}
|
|
93
|
+
// 4. If origin's host component matches one of the CIDR notations 127.0.0.0/8 or ::1/128 [RFC4632], return "Potentially Trustworthy".
|
|
94
|
+
const hostIp = url.host.replace(/(^\[)|(]$)/g, '');
|
|
95
|
+
const hostIPVersion = node_net.isIP(hostIp);
|
|
96
|
+
if (hostIPVersion === 4 && /^127\./.test(hostIp)) {
|
|
97
|
+
return true;
|
|
98
|
+
}
|
|
99
|
+
if (hostIPVersion === 6 && /^(((0+:){7})|(::(0+:){0,6}))0*1$/.test(hostIp)) {
|
|
100
|
+
return true;
|
|
101
|
+
}
|
|
102
|
+
// 5. If origin's host component is "localhost" or falls within ".localhost", and the user agent conforms to the name resolution rules in [let-localhost-be-localhost], return "Potentially Trustworthy".
|
|
103
|
+
// We are returning FALSE here because we cannot ensure conformance to
|
|
104
|
+
// let-localhost-be-loalhost (https://tools.ietf.org/html/draft-west-let-localhost-be-localhost)
|
|
105
|
+
if (url.host === 'localhost' || url.host.endsWith('.localhost')) {
|
|
106
|
+
return false;
|
|
107
|
+
}
|
|
108
|
+
// 6. If origin's scheme component is file, return "Potentially Trustworthy".
|
|
109
|
+
if (url.protocol === 'file:') {
|
|
110
|
+
return true;
|
|
111
|
+
}
|
|
112
|
+
// 7. If origin's scheme component is one which the user agent considers to be authenticated, return "Potentially Trustworthy".
|
|
113
|
+
// Not supported
|
|
114
|
+
// 8. If origin has been configured as a trustworthy origin, return "Potentially Trustworthy".
|
|
115
|
+
// Not supported
|
|
116
|
+
// 9. Return "Not Trustworthy".
|
|
117
|
+
return false;
|
|
118
|
+
}
|
|
119
|
+
/**
|
|
120
|
+
* @see {@link https://w3c.github.io/webappsec-secure-contexts/#is-url-trustworthy|Referrer Policy §3.3. Is url potentially trustworthy?}
|
|
121
|
+
* @param {external:URL} url
|
|
122
|
+
* @returns `true`: "Potentially Trustworthy", `false`: "Not Trustworthy"
|
|
123
|
+
*/
|
|
124
|
+
function isUrlPotentiallyTrustworthy(url) {
|
|
125
|
+
// 1. If url is "about:blank" or "about:srcdoc", return "Potentially Trustworthy".
|
|
126
|
+
if (/^about:(blank|srcdoc)$/.test(url)) {
|
|
127
|
+
return true;
|
|
128
|
+
}
|
|
129
|
+
// 2. If url's scheme is "data", return "Potentially Trustworthy".
|
|
130
|
+
if (url.protocol === 'data:') {
|
|
131
|
+
return true;
|
|
132
|
+
}
|
|
133
|
+
// Note: The origin of blob: and filesystem: URLs is the origin of the context in which they were
|
|
134
|
+
// created. Therefore, blobs created in a trustworthy origin will themselves be potentially
|
|
135
|
+
// trustworthy.
|
|
136
|
+
if (/^(blob|filesystem):$/.test(url.protocol)) {
|
|
137
|
+
return true;
|
|
138
|
+
}
|
|
139
|
+
// 3. Return the result of executing §3.2 Is origin potentially trustworthy? on url's origin.
|
|
140
|
+
return isOriginPotentiallyTrustworthy(url);
|
|
141
|
+
}
|
|
142
|
+
/**
|
|
143
|
+
* Modifies the referrerURL to enforce any extra security policy considerations.
|
|
144
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#determine-requests-referrer|Referrer Policy §8.3. Determine request's Referrer}, step 7
|
|
145
|
+
* @callback module:utils/referrer~referrerURLCallback
|
|
146
|
+
* @param {external:URL} referrerURL
|
|
147
|
+
* @returns {external:URL} modified referrerURL
|
|
148
|
+
*/
|
|
149
|
+
/**
|
|
150
|
+
* Modifies the referrerOrigin to enforce any extra security policy considerations.
|
|
151
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#determine-requests-referrer|Referrer Policy §8.3. Determine request's Referrer}, step 7
|
|
152
|
+
* @callback module:utils/referrer~referrerOriginCallback
|
|
153
|
+
* @param {external:URL} referrerOrigin
|
|
154
|
+
* @returns {external:URL} modified referrerOrigin
|
|
155
|
+
*/
|
|
156
|
+
/**
|
|
157
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#determine-requests-referrer|Referrer Policy §8.3. Determine request's Referrer}
|
|
158
|
+
* @param {Request} request
|
|
159
|
+
* @param {object} o
|
|
160
|
+
* @param {module:utils/referrer~referrerURLCallback} o.referrerURLCallback
|
|
161
|
+
* @param {module:utils/referrer~referrerOriginCallback} o.referrerOriginCallback
|
|
162
|
+
* @returns {external:URL} Request's referrer
|
|
163
|
+
*/
|
|
164
|
+
function determineRequestsReferrer(request, { referrerURLCallback, referrerOriginCallback } = {}) {
|
|
165
|
+
// There are 2 notes in the specification about invalid pre-conditions. We return null, here, for
|
|
166
|
+
// these cases:
|
|
167
|
+
// > Note: If request's referrer is "no-referrer", Fetch will not call into this algorithm.
|
|
168
|
+
// > Note: If request's referrer policy is the empty string, Fetch will not call into this
|
|
169
|
+
// > algorithm.
|
|
170
|
+
if (request.referrer === 'no-referrer' || request.referrerPolicy === '') {
|
|
171
|
+
return null;
|
|
172
|
+
}
|
|
173
|
+
// 1. Let policy be request's associated referrer policy.
|
|
174
|
+
const policy = request.referrerPolicy;
|
|
175
|
+
// 2. Let environment be request's client.
|
|
176
|
+
// not applicable to node.js
|
|
177
|
+
// 3. Switch on request's referrer:
|
|
178
|
+
if (request.referrer === 'about:client') {
|
|
179
|
+
return 'no-referrer';
|
|
180
|
+
}
|
|
181
|
+
// "a URL": Let referrerSource be request's referrer.
|
|
182
|
+
const referrerSource = request.referrer;
|
|
183
|
+
// 4. Let request's referrerURL be the result of stripping referrerSource for use as a referrer.
|
|
184
|
+
let referrerURL = stripURLForUseAsAReferrer(referrerSource);
|
|
185
|
+
// 5. Let referrerOrigin be the result of stripping referrerSource for use as a referrer, with the
|
|
186
|
+
// origin-only flag set to true.
|
|
187
|
+
let referrerOrigin = stripURLForUseAsAReferrer(referrerSource, true);
|
|
188
|
+
// 6. If the result of serializing referrerURL is a string whose length is greater than 4096, set
|
|
189
|
+
// referrerURL to referrerOrigin.
|
|
190
|
+
if (referrerURL.toString().length > 4096) {
|
|
191
|
+
referrerURL = referrerOrigin;
|
|
192
|
+
}
|
|
193
|
+
// 7. The user agent MAY alter referrerURL or referrerOrigin at this point to enforce arbitrary
|
|
194
|
+
// policy considerations in the interests of minimizing data leakage. For example, the user
|
|
195
|
+
// agent could strip the URL down to an origin, modify its host, replace it with an empty
|
|
196
|
+
// string, etc.
|
|
197
|
+
if (referrerURLCallback) {
|
|
198
|
+
referrerURL = referrerURLCallback(referrerURL);
|
|
199
|
+
}
|
|
200
|
+
if (referrerOriginCallback) {
|
|
201
|
+
referrerOrigin = referrerOriginCallback(referrerOrigin);
|
|
202
|
+
}
|
|
203
|
+
// 8.Execute the statements corresponding to the value of policy:
|
|
204
|
+
const currentURL = new URL(request.url);
|
|
205
|
+
switch (policy) {
|
|
206
|
+
case 'no-referrer':
|
|
207
|
+
return 'no-referrer';
|
|
208
|
+
case 'origin':
|
|
209
|
+
return referrerOrigin;
|
|
210
|
+
case 'unsafe-url':
|
|
211
|
+
return referrerURL;
|
|
212
|
+
case 'strict-origin':
|
|
213
|
+
// 1. If referrerURL is a potentially trustworthy URL and request's current URL is not a
|
|
214
|
+
// potentially trustworthy URL, then return no referrer.
|
|
215
|
+
if (isUrlPotentiallyTrustworthy(referrerURL) && !isUrlPotentiallyTrustworthy(currentURL)) {
|
|
216
|
+
return 'no-referrer';
|
|
217
|
+
}
|
|
218
|
+
// 2. Return referrerOrigin.
|
|
219
|
+
return referrerOrigin.toString();
|
|
220
|
+
case 'strict-origin-when-cross-origin':
|
|
221
|
+
// 1. If the origin of referrerURL and the origin of request's current URL are the same, then
|
|
222
|
+
// return referrerURL.
|
|
223
|
+
if (referrerURL.origin === currentURL.origin) {
|
|
224
|
+
return referrerURL;
|
|
225
|
+
}
|
|
226
|
+
// 2. If referrerURL is a potentially trustworthy URL and request's current URL is not a
|
|
227
|
+
// potentially trustworthy URL, then return no referrer.
|
|
228
|
+
if (isUrlPotentiallyTrustworthy(referrerURL) && !isUrlPotentiallyTrustworthy(currentURL)) {
|
|
229
|
+
return 'no-referrer';
|
|
230
|
+
}
|
|
231
|
+
// 3. Return referrerOrigin.
|
|
232
|
+
return referrerOrigin;
|
|
233
|
+
case 'same-origin':
|
|
234
|
+
// 1. If the origin of referrerURL and the origin of request's current URL are the same, then
|
|
235
|
+
// return referrerURL.
|
|
236
|
+
if (referrerURL.origin === currentURL.origin) {
|
|
237
|
+
return referrerURL;
|
|
238
|
+
}
|
|
239
|
+
// 2. Return no referrer.
|
|
240
|
+
return 'no-referrer';
|
|
241
|
+
case 'origin-when-cross-origin':
|
|
242
|
+
// 1. If the origin of referrerURL and the origin of request's current URL are the same, then
|
|
243
|
+
// return referrerURL.
|
|
244
|
+
if (referrerURL.origin === currentURL.origin) {
|
|
245
|
+
return referrerURL;
|
|
246
|
+
}
|
|
247
|
+
// Return referrerOrigin.
|
|
248
|
+
return referrerOrigin;
|
|
249
|
+
case 'no-referrer-when-downgrade':
|
|
250
|
+
// 1. If referrerURL is a potentially trustworthy URL and request's current URL is not a
|
|
251
|
+
// potentially trustworthy URL, then return no referrer.
|
|
252
|
+
if (isUrlPotentiallyTrustworthy(referrerURL) && !isUrlPotentiallyTrustworthy(currentURL)) {
|
|
253
|
+
return 'no-referrer';
|
|
254
|
+
}
|
|
255
|
+
// 2. Return referrerURL.
|
|
256
|
+
return referrerURL;
|
|
257
|
+
default:
|
|
258
|
+
throw new TypeError(`Invalid referrerPolicy: ${policy}`);
|
|
259
|
+
}
|
|
260
|
+
}
|
|
261
|
+
/**
|
|
262
|
+
* @see {@link https://w3c.github.io/webappsec-referrer-policy/#parse-referrer-policy-from-header|Referrer Policy §8.1. Parse a referrer policy from a Referrer-Policy header}
|
|
263
|
+
* @param {Headers} headers Response headers
|
|
264
|
+
* @returns {string} policy
|
|
265
|
+
*/
|
|
266
|
+
function parseReferrerPolicyFromHeader(headers) {
|
|
267
|
+
// 1. Let policy-tokens be the result of extracting header list values given `Referrer-Policy`
|
|
268
|
+
// and response’s header list.
|
|
269
|
+
const policyTokens = (headers.get('referrer-policy') || '').split(/[,\s]+/);
|
|
270
|
+
// 2. Let policy be the empty string.
|
|
271
|
+
let policy = '';
|
|
272
|
+
// 3. For each token in policy-tokens, if token is a referrer policy and token is not the empty
|
|
273
|
+
// string, then set policy to token.
|
|
274
|
+
// Note: This algorithm loops over multiple policy values to allow deployment of new policy
|
|
275
|
+
// values with fallbacks for older user agents, as described in § 11.1 Unknown Policy Values.
|
|
276
|
+
for (const token of policyTokens) {
|
|
277
|
+
if (token && ReferrerPolicy.has(token)) {
|
|
278
|
+
policy = token;
|
|
279
|
+
}
|
|
280
|
+
}
|
|
281
|
+
// 4. Return policy.
|
|
282
|
+
return policy;
|
|
283
|
+
}
|
|
284
|
+
|
|
285
|
+
exports.DEFAULT_REFERRER_POLICY = DEFAULT_REFERRER_POLICY;
|
|
286
|
+
exports.ReferrerPolicy = ReferrerPolicy;
|
|
287
|
+
exports.determineRequestsReferrer = determineRequestsReferrer;
|
|
288
|
+
exports.isOriginPotentiallyTrustworthy = isOriginPotentiallyTrustworthy;
|
|
289
|
+
exports.isUrlPotentiallyTrustworthy = isUrlPotentiallyTrustworthy;
|
|
290
|
+
exports.parseReferrerPolicyFromHeader = parseReferrerPolicyFromHeader;
|
|
291
|
+
exports.stripURLForUseAsAReferrer = stripURLForUseAsAReferrer;
|
|
292
|
+
exports.validateReferrerPolicy = validateReferrerPolicy;
|
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
+
|
|
5
|
+
var http = require('http');
|
|
6
|
+
require('https');
|
|
7
|
+
|
|
8
|
+
function _interopNamespace(e) {
|
|
9
|
+
if (e && e.__esModule) return e;
|
|
10
|
+
var n = Object.create(null);
|
|
11
|
+
if (e) {
|
|
12
|
+
Object.keys(e).forEach(function (k) {
|
|
13
|
+
if (k !== 'default') {
|
|
14
|
+
var d = Object.getOwnPropertyDescriptor(e, k);
|
|
15
|
+
Object.defineProperty(n, k, d.get ? d : {
|
|
16
|
+
enumerable: true,
|
|
17
|
+
get: function () { return e[k]; }
|
|
18
|
+
});
|
|
19
|
+
}
|
|
20
|
+
});
|
|
21
|
+
}
|
|
22
|
+
n["default"] = e;
|
|
23
|
+
return Object.freeze(n);
|
|
24
|
+
}
|
|
25
|
+
|
|
26
|
+
var http__namespace = /*#__PURE__*/_interopNamespace(http);
|
|
27
|
+
|
|
28
|
+
function isSecureEndpoint() {
|
|
29
|
+
const { stack } = new Error();
|
|
30
|
+
if (typeof stack !== 'string')
|
|
31
|
+
return false;
|
|
32
|
+
return stack
|
|
33
|
+
.split('\n')
|
|
34
|
+
.some((l) => l.indexOf('(https.js:') !== -1 ||
|
|
35
|
+
l.indexOf('node:https:') !== -1);
|
|
36
|
+
}
|
|
37
|
+
const INTERNAL = Symbol('AgentBaseInternalState');
|
|
38
|
+
class Agent extends http__namespace.Agent {
|
|
39
|
+
constructor(opts) {
|
|
40
|
+
super(opts);
|
|
41
|
+
this[INTERNAL] = {};
|
|
42
|
+
}
|
|
43
|
+
createSocket(req, options, cb) {
|
|
44
|
+
// Need to determine whether this is an `http` or `https` request.
|
|
45
|
+
// First check the `secureEndpoint` property explicitly, since this
|
|
46
|
+
// means that a parent `Agent` is "passing through" to this instance.
|
|
47
|
+
let secureEndpoint = typeof options.secureEndpoint === 'boolean'
|
|
48
|
+
? options.secureEndpoint
|
|
49
|
+
: undefined;
|
|
50
|
+
// If no explicit `secure` endpoint, check if `protocol` property is
|
|
51
|
+
// set. This will usually be the case since using a full string URL
|
|
52
|
+
// or `URL` instance should be the most common case.
|
|
53
|
+
if (typeof secureEndpoint === 'undefined' &&
|
|
54
|
+
typeof options.protocol === 'string') {
|
|
55
|
+
secureEndpoint = options.protocol === 'https:';
|
|
56
|
+
}
|
|
57
|
+
// Finally, if no `protocol` property was set, then fall back to
|
|
58
|
+
// checking the stack trace of the current call stack, and try to
|
|
59
|
+
// detect the "https" module.
|
|
60
|
+
if (typeof secureEndpoint === 'undefined') {
|
|
61
|
+
secureEndpoint = isSecureEndpoint();
|
|
62
|
+
}
|
|
63
|
+
const connectOpts = { ...options, secureEndpoint };
|
|
64
|
+
Promise.resolve()
|
|
65
|
+
.then(() => this.connect(req, connectOpts))
|
|
66
|
+
.then((socket) => {
|
|
67
|
+
if (socket instanceof http__namespace.Agent) {
|
|
68
|
+
// @ts-expect-error `addRequest()` isn't defined in `@types/node`
|
|
69
|
+
return socket.addRequest(req, connectOpts);
|
|
70
|
+
}
|
|
71
|
+
this[INTERNAL].currentSocket = socket;
|
|
72
|
+
// @ts-expect-error `createSocket()` isn't defined in `@types/node`
|
|
73
|
+
super.createSocket(req, options, cb);
|
|
74
|
+
}, cb);
|
|
75
|
+
}
|
|
76
|
+
createConnection() {
|
|
77
|
+
const socket = this[INTERNAL].currentSocket;
|
|
78
|
+
this[INTERNAL].currentSocket = undefined;
|
|
79
|
+
if (!socket) {
|
|
80
|
+
throw new Error('No socket was returned in the `connect()` function');
|
|
81
|
+
}
|
|
82
|
+
return socket;
|
|
83
|
+
}
|
|
84
|
+
get defaultPort() {
|
|
85
|
+
return (this[INTERNAL].defaultPort ??
|
|
86
|
+
(this.protocol === 'https:' ? 443 : 80));
|
|
87
|
+
}
|
|
88
|
+
set defaultPort(v) {
|
|
89
|
+
if (this[INTERNAL]) {
|
|
90
|
+
this[INTERNAL].defaultPort = v;
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
get protocol() {
|
|
94
|
+
return (this[INTERNAL].protocol ?? (isSecureEndpoint() ? 'https:' : 'http:'));
|
|
95
|
+
}
|
|
96
|
+
set protocol(v) {
|
|
97
|
+
if (this[INTERNAL]) {
|
|
98
|
+
this[INTERNAL].protocol = v;
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
|
|
103
|
+
exports.Agent = Agent;
|