happy-dom 8.9.0 → 9.0.0

package/lib/fetch/types/IResponseBody.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IResponseBody.js.map

package/lib/fetch/types/IResponseBody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IResponseBody.js","sourceRoot":"","sources":["../../../src/fetch/types/IResponseBody.ts"],"names":[],"mappings":""}

package/lib/fetch/types/IResponseInit.d.ts

@@ -0,0 +1,9 @@
+import IHeadersInit from './IHeadersInit';
+/**
+ * Response init.
+ */
+export default interface IResponseInit {
+    headers?: IHeadersInit | undefined;
+    status?: number | undefined;
+    statusText?: string | undefined;
+}

package/lib/fetch/types/IResponseInit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IResponseInit.js","sourceRoot":"","sources":["../../../src/fetch/types/IResponseInit.ts"],"names":[],"mappings":""}

package/lib/fetch/utilities/FetchBodyUtility.d.ts

@@ -0,0 +1,44 @@
+/// <reference types="node" />
+/// <reference types="node" />
+import Stream from 'stream';
+import IRequestBody from '../types/IRequestBody';
+import IResponseBody from '../types/IResponseBody';
+import Request from '../Request';
+/**
+ * Fetch body utility.
+ */
+export default class FetchBodyUtility {
+    /**
+     * Parses body and returns stream and type.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/body.js (MIT)
+     *
+     * @param body Body.
+     * @returns Stream and type.
+     */
+    static getBodyStream(body: IRequestBody | IResponseBody): {
+        contentType: string;
+        contentLength: number | null;
+        stream: Stream.Readable;
+        buffer: Buffer | null;
+    };
+    /**
+     * Clones a request body stream.
+     *
+     * @param request Request.
+     * @returns Stream.
+     */
+    static cloneRequestBodyStream(request: Request): Stream.Readable;
+    /**
+     * Consume and convert an entire Body to a Buffer.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/body.js (MIT)
+     *
+     * @see https://fetch.spec.whatwg.org/#concept-body-consume-body
+     * @param body Body stream.
+     * @returns Promise.
+     */
+    static consumeBodyStream(body: Stream.Readable | null): Promise<Buffer>;
+}

package/lib/fetch/utilities/FetchBodyUtility.js

@@ -0,0 +1,156 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const MultipartFormDataParser_1 = __importDefault(require("../multipart/MultipartFormDataParser"));
+const stream_1 = __importDefault(require("stream"));
+const url_1 = require("url");
+const FormData_1 = __importDefault(require("../../form-data/FormData"));
+const Blob_1 = __importDefault(require("../../file/Blob"));
+const DOMException_1 = __importDefault(require("../../exception/DOMException"));
+const DOMExceptionNameEnum_1 = __importDefault(require("../../exception/DOMExceptionNameEnum"));
+/**
+ * Fetch body utility.
+ */
+class FetchBodyUtility {
+    /**
+     * Parses body and returns stream and type.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/body.js (MIT)
+     *
+     * @param body Body.
+     * @returns Stream and type.
+     */
+    static getBodyStream(body) {
+        if (body === null || body === undefined) {
+            return { stream: null, buffer: null, contentType: null, contentLength: null };
+        }
+        else if (body instanceof url_1.URLSearchParams) {
+            const buffer = Buffer.from(body.toString());
+            return {
+                buffer,
+                stream: stream_1.default.Readable.from(Buffer.from(buffer)),
+                contentType: 'application/x-www-form-urlencoded;charset=UTF-8',
+                contentLength: buffer.length
+            };
+        }
+        else if (body instanceof Blob_1.default) {
+            const buffer = body._buffer;
+            return {
+                buffer,
+                stream: stream_1.default.Readable.from(buffer),
+                contentType: body.type,
+                contentLength: body.size
+            };
+        }
+        else if (Buffer.isBuffer(body)) {
+            return {
+                buffer: body,
+                stream: stream_1.default.Readable.from(body),
+                contentType: null,
+                contentLength: body.length
+            };
+        }
+        else if (body instanceof ArrayBuffer) {
+            const buffer = Buffer.from(body);
+            return {
+                buffer,
+                stream: stream_1.default.Readable.from(buffer),
+                contentType: null,
+                contentLength: body.byteLength
+            };
+        }
+        else if (ArrayBuffer.isView(body)) {
+            const buffer = Buffer.from(body.buffer, body.byteOffset, body.byteLength);
+            return {
+                buffer,
+                stream: stream_1.default.Readable.from(buffer),
+                contentType: null,
+                contentLength: body.byteLength
+            };
+        }
+        else if (body instanceof stream_1.default.Stream) {
+            return {
+                buffer: null,
+                stream: body,
+                contentType: null,
+                contentLength: null
+            };
+        }
+        else if (body instanceof FormData_1.default) {
+            return MultipartFormDataParser_1.default.formDataToStream(body);
+        }
+        const buffer = Buffer.from(String(body));
+        return {
+            buffer,
+            stream: stream_1.default.Readable.from(buffer),
+            contentType: 'text/plain;charset=UTF-8',
+            contentLength: buffer.length
+        };
+    }
+    /**
+     * Clones a request body stream.
+     *
+     * @param request Request.
+     * @returns Stream.
+     */
+    static cloneRequestBodyStream(request) {
+        if (request.bodyUsed) {
+            throw new DOMException_1.default(`Failed to clone body stream of request: Request body is already used.`, DOMExceptionNameEnum_1.default.invalidStateError);
+        }
+        const p1 = new stream_1.default.PassThrough();
+        const p2 = new stream_1.default.PassThrough();
+        request.body.pipe(p1);
+        request.body.pipe(p2);
+        // Sets the body of the cloned request to the first pass through stream.
+        request.body = p1;
+        // Returns the clone.
+        return p2;
+    }
+    /**
+     * Consume and convert an entire Body to a Buffer.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/body.js (MIT)
+     *
+     * @see https://fetch.spec.whatwg.org/#concept-body-consume-body
+     * @param body Body stream.
+     * @returns Promise.
+     */
+    static async consumeBodyStream(body) {
+        if (body === null || !(body instanceof stream_1.default.Stream)) {
+            return Buffer.alloc(0);
+        }
+        const chunks = [];
+        let bytes = 0;
+        try {
+            for await (const chunk of body) {
+                bytes += chunk.length;
+                chunks.push(chunk);
+            }
+        }
+        catch (error) {
+            if (error instanceof DOMException_1.default) {
+                throw error;
+            }
+            throw new DOMException_1.default(`Failed to read response body. Error: ${error.message}.`, DOMExceptionNameEnum_1.default.encodingError);
+        }
+        if (body.readableEnded === false ||
+            body['_readableState']?.ended === false) {
+            throw new DOMException_1.default(`Premature close of server response.`, DOMExceptionNameEnum_1.default.invalidStateError);
+        }
+        try {
+            if (typeof chunks[0] === 'string') {
+                return Buffer.from(chunks.join(''));
+            }
+            return Buffer.concat(chunks, bytes);
+        }
+        catch (error) {
+            throw new DOMException_1.default(`Could not create Buffer from response body. Error: ${error.message}.`, DOMExceptionNameEnum_1.default.invalidStateError);
+        }
+    }
+}
+exports.default = FetchBodyUtility;
+//# sourceMappingURL=FetchBodyUtility.js.map

package/lib/fetch/utilities/FetchBodyUtility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchBodyUtility.js","sourceRoot":"","sources":["../../../src/fetch/utilities/FetchBodyUtility.ts"],"names":[],"mappings":";;;;;AAAA,mGAA2E;AAC3E,oDAA4B;AAC5B,6BAAsC;AACtC,wEAAgD;AAChD,2DAAmC;AACnC,gFAAwD;AACxD,gGAAwE;AAKxE;;GAEG;AACH,MAAqB,gBAAgB;IACpC;;;;;;;;OAQG;IACI,MAAM,CAAC,aAAa,CAAC,IAAkC;QAM7D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE;YACxC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC9E;aAAM,IAAI,IAAI,YAAY,qBAAe,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5C,OAAO;gBACN,MAAM;gBACN,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjD,WAAW,EAAE,iDAAiD;gBAC9D,aAAa,EAAE,MAAM,CAAC,MAAM;aAC5B,CAAC;SACF;aAAM,IAAI,IAAI,YAAY,cAAI,EAAE;YAChC,MAAM,MAAM,GAAU,IAAK,CAAC,OAAO,CAAC;YACpC,OAAO;gBACN,MAAM;gBACN,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpC,WAAW,EAAS,IAAK,CAAC,IAAI;gBAC9B,aAAa,EAAE,IAAI,CAAC,IAAI;aACxB,CAAC;SACF;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;YACjC,OAAO;gBACN,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI,CAAC,MAAM;aAC1B,CAAC;SACF;aAAM,IAAI,IAAI,YAAY,WAAW,EAAE;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO;gBACN,MAAM;gBACN,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI,CAAC,UAAU;aAC9B,CAAC;SACF;aAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1E,OAAO;gBACN,MAAM;gBACN,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI,CAAC,UAAU;aAC9B,CAAC;SACF;aAAM,IAAI,IAAI,YAAY,gBAAM,CAAC,MAAM,EAAE;YACzC,OAAO;gBACN,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAmB,IAAI;gBAC7B,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI;aACnB,CAAC;SACF;aAAM,IAAI,IAAI,YAAY,kBAAQ,EAAE;YACpC,OAAO,iCAAuB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO;YACN,MAAM;YACN,MAAM,EAAE,gBAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,WAAW,EAAE,0BAA0B;YACvC,aAAa,EAAE,MAAM,CAAC,MAAM;SAC5B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,sBAAsB,CAAC,OAAgB;QACpD,IAAI,OAAO,CAAC,QAAQ,EAAE;YACrB,MAAM,IAAI,sBAAY,CACrB,uEAAuE,EACvE,8BAAoB,CAAC,iBAAiB,CACtC,CAAC;SACF;QAED,MAAM,EAAE,GAAG,IAAI,gBAAM,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,gBAAM,CAAC,WAAW,EAAE,CAAC;QAEpC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtB,wEAAwE;QACtD,OAAO,CAAC,IAAK,GAAG,EAAE,CAAC;QAErC,qBAAqB;QACrB,OAAO,EAAE,CAAC;IACX,CAAC;IAED;;;;;;;;;OASG;IACI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAA4B;QACjE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,YAAY,gBAAM,CAAC,MAAM,CAAC,EAAE;YACtD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACvB;QAED,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,IAAI;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE;gBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACnB;SACD;QAAC,OAAO,KAAK,EAAE;YACf,IAAI,KAAK,YAAY,sBAAY,EAAE;gBAClC,MAAM,KAAK,CAAC;aACZ;YACD,MAAM,IAAI,sBAAY,CACrB,wCAAwC,KAAK,CAAC,OAAO,GAAG,EACxD,8BAAoB,CAAC,aAAa,CAClC,CAAC;SACF;QAED,IACmB,IAAK,CAAC,aAAa,KAAK,KAAK;YAC7B,IAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,KAAK,KAAK,EACzD;YACD,MAAM,IAAI,sBAAY,CACrB,qCAAqC,EACrC,8BAAoB,CAAC,iBAAiB,CACtC,CAAC;SACF;QAED,IAAI;YACH,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE;gBAClC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACpC;YAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SACpC;QAAC,OAAO,KAAK,EAAE;YACf,MAAM,IAAI,sBAAY,CACrB,sDAAsD,KAAK,CAAC,OAAO,GAAG,EACtE,8BAAoB,CAAC,iBAAiB,CACtC,CAAC;SACF;IACF,CAAC;CACD;AAhKD,mCAgKC"}

package/lib/fetch/utilities/FetchCORSUtility.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Fetch CORS utility.
+ */
+export default class FetchCORSUtility {
+    /**
+     * Validates request headers.
+     *
+     * @param originURL Origin URL.
+     * @param targetURL Target URL.
+     */
+    static isCORS(originURL: any, targetURL: any): boolean;
+}

package/lib/fetch/utilities/FetchCORSUtility.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Fetch CORS utility.
+ */
+class FetchCORSUtility {
+    /**
+     * Validates request headers.
+     *
+     * @param originURL Origin URL.
+     * @param targetURL Target URL.
+     */
+    static isCORS(originURL, targetURL) {
+        return ((originURL.hostname !== targetURL.hostname &&
+            !originURL.hostname.endsWith(targetURL.hostname)) ||
+            originURL.protocol !== targetURL.protocol);
+    }
+}
+exports.default = FetchCORSUtility;
+//# sourceMappingURL=FetchCORSUtility.js.map

package/lib/fetch/utilities/FetchCORSUtility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchCORSUtility.js","sourceRoot":"","sources":["../../../src/fetch/utilities/FetchCORSUtility.ts"],"names":[],"mappings":";;AAAA;;GAEG;AACH,MAAqB,gBAAgB;IACpC;;;;;OAKG;IACI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS;QACxC,OAAO,CACN,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;YACzC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClD,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CACzC,CAAC;IACH,CAAC;CACD;AAdD,mCAcC"}

package/lib/fetch/utilities/FetchRequestHeaderUtility.d.ts

@@ -0,0 +1,12 @@
+import IHeaders from '../types/IHeaders';
+/**
+ * Fetch request header utility.
+ */
+export default class FetchRequestHeaderUtility {
+    /**
+     * Validates request headers.
+     *
+     * @param headers Headers.
+     */
+    static removeForbiddenHeaders(headers: IHeaders): void;
+}

package/lib/fetch/utilities/FetchRequestHeaderUtility.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const FORBIDDEN_HEADER_NAMES = [
+    'accept-charset',
+    'accept-encoding',
+    'access-control-request-headers',
+    'access-control-request-method',
+    'connection',
+    'content-length',
+    'cookie',
+    'cookie2',
+    'date',
+    'dnt',
+    'expect',
+    'host',
+    'keep-alive',
+    'origin',
+    'referer',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+    'via'
+];
+/**
+ * Fetch request header utility.
+ */
+class FetchRequestHeaderUtility {
+    /**
+     * Validates request headers.
+     *
+     * @param headers Headers.
+     */
+    static removeForbiddenHeaders(headers) {
+        for (const key of Object.keys(headers._entries)) {
+            if (FORBIDDEN_HEADER_NAMES.includes(key) ||
+                key.startsWith('proxy-') ||
+                key.startsWith('sec-')) {
+                delete headers._entries[key];
+            }
+        }
+    }
+}
+exports.default = FetchRequestHeaderUtility;
+//# sourceMappingURL=FetchRequestHeaderUtility.js.map

package/lib/fetch/utilities/FetchRequestHeaderUtility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchRequestHeaderUtility.js","sourceRoot":"","sources":["../../../src/fetch/utilities/FetchRequestHeaderUtility.ts"],"names":[],"mappings":";;AAGA,MAAM,sBAAsB,GAAG;IAC9B,gBAAgB;IAChB,iBAAiB;IACjB,gCAAgC;IAChC,+BAA+B;IAC/B,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;IACT,KAAK;CACL,CAAC;AAEF;;GAEG;AACH,MAAqB,yBAAyB;IAC7C;;;;OAIG;IACI,MAAM,CAAC,sBAAsB,CAAC,OAAiB;QACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAW,OAAQ,CAAC,QAAQ,CAAC,EAAE;YAC3D,IACC,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACpC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EACrB;gBACD,OAAiB,OAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACxC;SACD;IACF,CAAC;CACD;AAjBD,4CAiBC"}

package/lib/fetch/utilities/FetchRequestReferrerUtility.d.ts

@@ -0,0 +1,55 @@
+/// <reference types="node" />
+import { URL } from 'url';
+import IRequest from '../types/IRequest';
+import IDocument from '../../nodes/document/IDocument';
+import Headers from '../Headers';
+import IRequestReferrerPolicy from '../types/IRequestReferrerPolicy';
+/**
+ * Fetch referrer utility.
+ */
+export default class FetchRequestReferrerUtility {
+    /**
+     * Returns the request referrer to be used as the value for the "Referer" header.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/utils/referrer.js (MIT)
+     *
+     * @see https://w3c.github.io/webappsec-referrer-policy/#determine-requests-referrer
+     * @param document Document.
+     * @param request Request.
+     * @returns Request referrer.
+     */
+    static getSentReferrer(document: IDocument, request: IRequest): '' | 'no-referrer' | 'client' | URL;
+    /**
+     * Returns initial referrer.
+     *
+     * @param document Document.
+     * @param referrer Referrer.
+     * @returns Initial referrer.
+     */
+    static getInitialReferrer(document: IDocument, referrer: '' | 'no-referrer' | 'client' | string | URL): '' | 'no-referrer' | 'client' | URL;
+    /**
+     * Returns referrer policy from header.
+     *
+     * @see https://w3c.github.io/webappsec-referrer-policy/#parse-referrer-policy-from-header
+     * @param headers Response headers
+     * @returns Policy.
+     */
+    static getReferrerPolicyFromHeader(headers: Headers): IRequestReferrerPolicy;
+    /**
+     * Returns "true" if the request's referrer is potentially trustworthy.
+     *
+     * @see https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy
+     * @param url URL.
+     * @returns "true" if the request's referrer is potentially trustworthy.
+     */
+    private static isURLPotentiallyTrustWorthy;
+    /**
+     * Returns "true" if the request's referrer origin is potentially trustworthy.
+     *
+     * @see https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy
+     * @param url URL.
+     * @returns "true" if the request's referrer origin is potentially trustworthy.
+     */
+    private static isOriginPotentiallyTrustWorthy;
+}

package/lib/fetch/utilities/FetchRequestReferrerUtility.js

@@ -0,0 +1,194 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const url_1 = require("url");
+const net_1 = require("net");
+const REQUEST_REFERRER_UNSUPPORTED_PROTOCOL_REGEXP = /^(about|blob|data):$/;
+const REFERRER_POLICIES = [
+    '',
+    'no-referrer',
+    'no-referrer-when-downgrade',
+    'same-origin',
+    'origin',
+    'strict-origin',
+    'origin-when-cross-origin',
+    'strict-origin-when-cross-origin',
+    'unsafe-url'
+];
+/**
+ * Fetch referrer utility.
+ */
+class FetchRequestReferrerUtility {
+    /**
+     * Returns the request referrer to be used as the value for the "Referer" header.
+     *
+     * Based on:
+     * https://github.com/node-fetch/node-fetch/blob/main/src/utils/referrer.js (MIT)
+     *
+     * @see https://w3c.github.io/webappsec-referrer-policy/#determine-requests-referrer
+     * @param document Document.
+     * @param request Request.
+     * @returns Request referrer.
+     */
+    static getSentReferrer(document, request) {
+        if (request.referrer === 'about:client' && document.defaultView.location.origin === 'null') {
+            return 'no-referrer';
+        }
+        const requestURL = new url_1.URL(request.url);
+        const referrerURL = request.referrer === 'about:client'
+            ? new url_1.URL(document.defaultView.location.href)
+            : new url_1.URL(request.referrer);
+        if (REQUEST_REFERRER_UNSUPPORTED_PROTOCOL_REGEXP.test(referrerURL.protocol)) {
+            return 'no-referrer';
+        }
+        referrerURL.username = '';
+        referrerURL.password = '';
+        referrerURL.hash = '';
+        switch (request.referrerPolicy) {
+            case 'no-referrer':
+                return 'no-referrer';
+            case 'origin':
+                return new url_1.URL(referrerURL.origin);
+            case 'unsafe-url':
+                return referrerURL;
+            case 'strict-origin':
+                if (this.isURLPotentiallyTrustWorthy(referrerURL) &&
+                    !this.isURLPotentiallyTrustWorthy(requestURL)) {
+                    return 'no-referrer';
+                }
+                return new url_1.URL(referrerURL.origin);
+            case 'strict-origin-when-cross-origin':
+                if (referrerURL.origin === requestURL.origin) {
+                    return referrerURL;
+                }
+                if (this.isURLPotentiallyTrustWorthy(referrerURL) &&
+                    !this.isURLPotentiallyTrustWorthy(requestURL)) {
+                    return 'no-referrer';
+                }
+                return new url_1.URL(referrerURL.origin);
+            case 'same-origin':
+                if (referrerURL.origin === requestURL.origin) {
+                    return referrerURL;
+                }
+                return 'no-referrer';
+            case 'origin-when-cross-origin':
+                if (referrerURL.origin === requestURL.origin) {
+                    return referrerURL;
+                }
+                return new url_1.URL(referrerURL.origin);
+            case 'no-referrer-when-downgrade':
+                if (this.isURLPotentiallyTrustWorthy(referrerURL) &&
+                    !this.isURLPotentiallyTrustWorthy(requestURL)) {
+                    return 'no-referrer';
+                }
+                return referrerURL;
+        }
+        return 'no-referrer';
+    }
+    /**
+     * Returns initial referrer.
+     *
+     * @param document Document.
+     * @param referrer Referrer.
+     * @returns Initial referrer.
+     */
+    static getInitialReferrer(document, referrer) {
+        if (referrer === '' || referrer === 'no-referrer' || referrer === 'client') {
+            return referrer;
+        }
+        else if (referrer) {
+            const referrerURL = referrer instanceof url_1.URL ? referrer : new url_1.URL(referrer, document.location);
+            return referrerURL.origin === document.location.origin ? referrerURL : 'client';
+        }
+        return 'client';
+    }
+    /**
+     * Returns referrer policy from header.
+     *
+     * @see https://w3c.github.io/webappsec-referrer-policy/#parse-referrer-policy-from-header
+     * @param headers Response headers
+     * @returns Policy.
+     */
+    static getReferrerPolicyFromHeader(headers) {
+        const referrerPolicyHeader = headers.get('Referrer-Policy');
+        if (!referrerPolicyHeader) {
+            return '';
+        }
+        const policyTokens = referrerPolicyHeader.split(/[,\s]+/);
+        let policy = '';
+        for (const token of policyTokens) {
+            if (token && REFERRER_POLICIES.includes(token)) {
+                policy = token;
+            }
+        }
+        return policy;
+    }
+    /**
+     * Returns "true" if the request's referrer is potentially trustworthy.
+     *
+     * @see https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy
+     * @param url URL.
+     * @returns "true" if the request's referrer is potentially trustworthy.
+     */
+    static isURLPotentiallyTrustWorthy(url) {
+        // 1. If url is "about:blank" or "about:srcdoc", return "Potentially Trustworthy".
+        if (/^about:(blank|srcdoc)$/.test(url.href)) {
+            return true;
+        }
+        // 2. If url's scheme is "data", return "Potentially Trustworthy".
+        if (url.protocol === 'data:') {
+            return true;
+        }
+        // Note: The origin of blob: and filesystem: URLs is the origin of the context in which they were
+        // Created. Therefore, blobs created in a trustworthy origin will themselves be potentially
+        // Trustworthy.
+        if (/^(blob|filesystem):$/.test(url.protocol)) {
+            return true;
+        }
+        // 3. Return the result of executing §3.2 Is origin potentially trustworthy? on url's origin.
+        return this.isOriginPotentiallyTrustWorthy(url);
+    }
+    /**
+     * Returns "true" if the request's referrer origin is potentially trustworthy.
+     *
+     * @see https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy
+     * @param url URL.
+     * @returns "true" if the request's referrer origin is potentially trustworthy.
+     */
+    static isOriginPotentiallyTrustWorthy(url) {
+        // 1. If origin is an opaque origin, return "Not Trustworthy".
+        // Not applicable
+        // 2. Assert: origin is a tuple origin.
+        // Not for implementations
+        // 3. If origin's scheme is either "https" or "wss", return "Potentially Trustworthy".
+        if (/^(http|ws)s:$/.test(url.protocol)) {
+            return true;
+        }
+        // 4. If origin's host component matches one of the CIDR notations 127.0.0.0/8 or ::1/128 [RFC4632], return "Potentially Trustworthy".
+        const hostIp = url.host.replace(/(^\[)|(]$)/g, '');
+        const hostIPVersion = (0, net_1.isIP)(hostIp);
+        if (hostIPVersion === 4 && /^127\./.test(hostIp)) {
+            return true;
+        }
+        if (hostIPVersion === 6 && /^(((0+:){7})|(::(0+:){0,6}))0*1$/.test(hostIp)) {
+            return true;
+        }
+        // 5. If origin's host component is "localhost" or falls within ".localhost", and the user agent conforms to the name resolution rules in [let-localhost-be-localhost], return "Potentially Trustworthy".
+        // We are returning FALSE here because we cannot ensure conformance to
+        // Let-localhost-be-loalhost (https://tools.ietf.org/html/draft-west-let-localhost-be-localhost)
+        if (url.host === 'localhost' || url.host.endsWith('.localhost')) {
+            return false;
+        }
+        // 6. If origin's scheme component is file, return "Potentially Trustworthy".
+        if (url.protocol === 'file:') {
+            return true;
+        }
+        // 7. If origin's scheme component is one which the user agent considers to be authenticated, return "Potentially Trustworthy".
+        // Not supported
+        // 8. If origin has been configured as a trustworthy origin, return "Potentially Trustworthy".
+        // Not supported
+        // 9. Return "Not Trustworthy".
+        return false;
+    }
+}
+exports.default = FetchRequestReferrerUtility;
+//# sourceMappingURL=FetchRequestReferrerUtility.js.map

package/lib/fetch/utilities/FetchRequestReferrerUtility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchRequestReferrerUtility.js","sourceRoot":"","sources":["../../../src/fetch/utilities/FetchRequestReferrerUtility.ts"],"names":[],"mappings":";;AAAA,6BAA0B;AAG1B,6BAA2B;AAI3B,MAAM,4CAA4C,GAAG,sBAAsB,CAAC;AAC5E,MAAM,iBAAiB,GAA6B;IACnD,EAAE;IACF,aAAa;IACb,4BAA4B;IAC5B,aAAa;IACb,QAAQ;IACR,eAAe;IACf,0BAA0B;IAC1B,iCAAiC;IACjC,YAAY;CACZ,CAAC;AAEF;;GAEG;AACH,MAAqB,2BAA2B;IAC/C;;;;;;;;;;OAUG;IACI,MAAM,CAAC,eAAe,CAC5B,QAAmB,EACnB,OAAiB;QAEjB,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,IAAI,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE;YAC3F,OAAO,aAAa,CAAC;SACrB;QAED,MAAM,UAAU,GAAG,IAAI,SAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,WAAW,GAChB,OAAO,CAAC,QAAQ,KAAK,cAAc;YAClC,CAAC,CAAC,IAAI,SAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7C,CAAC,CAAC,IAAI,SAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE9B,IAAI,4CAA4C,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE;YAC5E,OAAO,aAAa,CAAC;SACrB;QAED,WAAW,CAAC,QAAQ,GAAG,EAAE,CAAC;QAC1B,WAAW,CAAC,QAAQ,GAAG,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,GAAG,EAAE,CAAC;QAEtB,QAAQ,OAAO,CAAC,cAAc,EAAE;YAC/B,KAAK,aAAa;gBACjB,OAAO,aAAa,CAAC;YACtB,KAAK,QAAQ;gBACZ,OAAO,IAAI,SAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,YAAY;gBAChB,OAAO,WAAW,CAAC;YACpB,KAAK,eAAe;gBACnB,IACC,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC;oBAC7C,CAAC,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAC5C;oBACD,OAAO,aAAa,CAAC;iBACrB;gBAED,OAAO,IAAI,SAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,iCAAiC;gBACrC,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE;oBAC7C,OAAO,WAAW,CAAC;iBACnB;gBAED,IACC,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC;oBAC7C,CAAC,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAC5C;oBACD,OAAO,aAAa,CAAC;iBACrB;gBAED,OAAO,IAAI,SAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,aAAa;gBACjB,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE;oBAC7C,OAAO,WAAW,CAAC;iBACnB;gBAED,OAAO,aAAa,CAAC;YACtB,KAAK,0BAA0B;gBAC9B,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE;oBAC7C,OAAO,WAAW,CAAC;iBACnB;gBAED,OAAO,IAAI,SAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,4BAA4B;gBAChC,IACC,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC;oBAC7C,CAAC,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAC5C;oBACD,OAAO,aAAa,CAAC;iBACrB;gBAED,OAAO,WAAW,CAAC;SACpB;QAED,OAAO,aAAa,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,kBAAkB,CAC/B,QAAmB,EACnB,QAAsD;QAEtD,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,QAAQ,EAAE;YAC3E,OAAO,QAAQ,CAAC;SAChB;aAAM,IAAI,QAAQ,EAAE;YACpB,MAAM,WAAW,GAAG,QAAQ,YAAY,SAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9F,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;SAChF;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,2BAA2B,CAAC,OAAgB;QACzD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE5D,IAAI,CAAC,oBAAoB,EAAE;YAC1B,OAAO,EAAE,CAAC;SACV;QAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,MAAM,GAA2B,EAAE,CAAC;QAExC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE;YACjC,IAAI,KAAK,IAAI,iBAAiB,CAAC,QAAQ,CAAyB,KAAK,CAAC,EAAE;gBACvE,MAAM,GAA2B,KAAK,CAAC;aACvC;SACD;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,2BAA2B,CAAC,GAAQ;QAClD,kFAAkF;QAClF,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC5C,OAAO,IAAI,CAAC;SACZ;QAED,kEAAkE;QAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE;YAC7B,OAAO,IAAI,CAAC;SACZ;QAED,iGAAiG;QACjG,2FAA2F;QAC3F,eAAe;QACf,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YAC9C,OAAO,IAAI,CAAC;SACZ;QAED,6FAA6F;QAC7F,OAAO,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,8BAA8B,CAAC,GAAQ;QACrD,8DAA8D;QAC9D,iBAAiB;QAEjB,uCAAuC;QACvC,0BAA0B;QAE1B,sFAAsF;QACtF,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACvC,OAAO,IAAI,CAAC;SACZ;QAED,sIAAsI;QACtI,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAA,UAAI,EAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YACjD,OAAO,IAAI,CAAC;SACZ;QAED,IAAI,aAAa,KAAK,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC3E,OAAO,IAAI,CAAC;SACZ;QAED,yMAAyM;QACzM,sEAAsE;QACtE,gGAAgG;QAChG,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;YAChE,OAAO,KAAK,CAAC;SACb;QAED,6EAA6E;QAC7E,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE;YAC7B,OAAO,IAAI,CAAC;SACZ;QAED,+HAA+H;QAC/H,gBAAgB;QAEhB,8FAA8F;QAC9F,gBAAgB;QAEhB,+BAA+B;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;CACD;AAzND,8CAyNC"}

package/lib/fetch/utilities/FetchRequestValidationUtility.d.ts

@@ -0,0 +1,38 @@
+/// <reference types="node" />
+import IRequestReferrerPolicy from '../types/IRequestReferrerPolicy';
+import IRequestRedirect from '../types/IRequestRedirect';
+import { URL } from 'url';
+import IRequest from '../types/IRequest';
+/**
+ * Fetch request validation utility.
+ */
+export default class FetchRequestValidationUtility {
+    /**
+     * Validates request body.
+     *
+     * @throws DOMException
+     * @param request Request.
+     */
+    static validateBody(request: IRequest): void;
+    /**
+     * Validates request URL.
+     *
+     * @throws DOMException
+     * @param url URL.
+     */
+    static validateURL(url: URL): void;
+    /**
+     * Validates request referrer policy.
+     *
+     * @throws DOMException
+     * @param referrerPolicy Referrer policy.
+     */
+    static validateReferrerPolicy(referrerPolicy: IRequestReferrerPolicy): void;
+    /**
+     * Validates request redirect.
+     *
+     * @throws DOMException
+     * @param redirect Redirect.
+     */
+    static validateRedirect(redirect: IRequestRedirect): void;
+}