nstarter-http-request 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (263) hide show
  1. package/CHANGELOG.md +5 -0
  2. package/README.md +160 -0
  3. package/dist/cjs/adapter/axios.adapter.js +224 -0
  4. package/dist/cjs/adapter/axios.adapter.js.map +1 -0
  5. package/dist/cjs/adapter/base.js +134 -0
  6. package/dist/cjs/adapter/base.js.map +1 -0
  7. package/dist/cjs/adapter/index.js +20 -0
  8. package/dist/cjs/adapter/index.js.map +1 -0
  9. package/dist/cjs/adapter/undici.adapter.js +272 -0
  10. package/dist/cjs/adapter/undici.adapter.js.map +1 -0
  11. package/dist/cjs/client.js +409 -0
  12. package/dist/cjs/client.js.map +1 -0
  13. package/dist/cjs/config.js +69 -0
  14. package/dist/cjs/config.js.map +1 -0
  15. package/dist/cjs/const/config.const.js +53 -0
  16. package/dist/cjs/const/config.const.js.map +1 -0
  17. package/dist/cjs/const/dns.const.js +16 -0
  18. package/dist/cjs/const/dns.const.js.map +1 -0
  19. package/dist/cjs/const/enum.const.js +22 -0
  20. package/dist/cjs/const/enum.const.js.map +1 -0
  21. package/dist/cjs/const/index.js +21 -0
  22. package/dist/cjs/const/index.js.map +1 -0
  23. package/dist/cjs/const/ip.const.js +110 -0
  24. package/dist/cjs/const/ip.const.js.map +1 -0
  25. package/dist/cjs/index.js +25 -0
  26. package/dist/cjs/index.js.map +1 -0
  27. package/dist/cjs/logger/base.js +60 -0
  28. package/dist/cjs/logger/base.js.map +1 -0
  29. package/dist/cjs/logger/http_client.logger.js +209 -0
  30. package/dist/cjs/logger/http_client.logger.js.map +1 -0
  31. package/dist/cjs/logger/index.js +20 -0
  32. package/dist/cjs/logger/index.js.map +1 -0
  33. package/dist/cjs/logger/log.filter.js +126 -0
  34. package/dist/cjs/logger/log.filter.js.map +1 -0
  35. package/dist/cjs/security/dns.validator.js +137 -0
  36. package/dist/cjs/security/dns.validator.js.map +1 -0
  37. package/dist/cjs/security/index.js +21 -0
  38. package/dist/cjs/security/index.js.map +1 -0
  39. package/dist/cjs/security/ip.validator.js +107 -0
  40. package/dist/cjs/security/ip.validator.js.map +1 -0
  41. package/dist/cjs/security/ssrf.guard.js +180 -0
  42. package/dist/cjs/security/ssrf.guard.js.map +1 -0
  43. package/dist/cjs/security/url.validator.js +170 -0
  44. package/dist/cjs/security/url.validator.js.map +1 -0
  45. package/dist/cjs/tsconfig.tsbuildinfo +1 -0
  46. package/dist/cjs/types/adapter.js +6 -0
  47. package/dist/cjs/types/adapter.js.map +1 -0
  48. package/dist/cjs/types/client.js +6 -0
  49. package/dist/cjs/types/client.js.map +1 -0
  50. package/dist/cjs/types/config.js +6 -0
  51. package/dist/cjs/types/config.js.map +1 -0
  52. package/dist/cjs/types/errors.js +35 -0
  53. package/dist/cjs/types/errors.js.map +1 -0
  54. package/dist/cjs/types/index.js +35 -0
  55. package/dist/cjs/types/index.js.map +1 -0
  56. package/dist/cjs/types/ip.js +6 -0
  57. package/dist/cjs/types/ip.js.map +1 -0
  58. package/dist/cjs/types/logger.js +6 -0
  59. package/dist/cjs/types/logger.js.map +1 -0
  60. package/dist/cjs/types/request_response.js +6 -0
  61. package/dist/cjs/types/request_response.js.map +1 -0
  62. package/dist/cjs/types/security.js +6 -0
  63. package/dist/cjs/types/security.js.map +1 -0
  64. package/dist/cjs/types/trace.js +14 -0
  65. package/dist/cjs/types/trace.js.map +1 -0
  66. package/dist/cjs/utils/common.js +31 -0
  67. package/dist/cjs/utils/common.js.map +1 -0
  68. package/dist/cjs/utils/domain.js +79 -0
  69. package/dist/cjs/utils/domain.js.map +1 -0
  70. package/dist/cjs/utils/index.js +44 -0
  71. package/dist/cjs/utils/index.js.map +1 -0
  72. package/dist/cjs/utils/ip.range.js +200 -0
  73. package/dist/cjs/utils/ip.range.js.map +1 -0
  74. package/dist/cjs/utils/trace.context.js +213 -0
  75. package/dist/cjs/utils/trace.context.js.map +1 -0
  76. package/dist/esm/adapter/axios.adapter.js +184 -0
  77. package/dist/esm/adapter/axios.adapter.js.map +1 -0
  78. package/dist/esm/adapter/base.js +130 -0
  79. package/dist/esm/adapter/base.js.map +1 -0
  80. package/dist/esm/adapter/index.js +4 -0
  81. package/dist/esm/adapter/index.js.map +1 -0
  82. package/dist/esm/adapter/undici.adapter.js +235 -0
  83. package/dist/esm/adapter/undici.adapter.js.map +1 -0
  84. package/dist/esm/client.js +405 -0
  85. package/dist/esm/client.js.map +1 -0
  86. package/dist/esm/config.js +65 -0
  87. package/dist/esm/config.js.map +1 -0
  88. package/dist/esm/const/config.const.js +50 -0
  89. package/dist/esm/const/config.const.js.map +1 -0
  90. package/dist/esm/const/dns.const.js +13 -0
  91. package/dist/esm/const/dns.const.js.map +1 -0
  92. package/dist/esm/const/enum.const.js +19 -0
  93. package/dist/esm/const/enum.const.js.map +1 -0
  94. package/dist/esm/const/index.js +5 -0
  95. package/dist/esm/const/index.js.map +1 -0
  96. package/dist/esm/const/ip.const.js +107 -0
  97. package/dist/esm/const/ip.const.js.map +1 -0
  98. package/dist/esm/index.js +9 -0
  99. package/dist/esm/index.js.map +1 -0
  100. package/dist/esm/logger/base.js +55 -0
  101. package/dist/esm/logger/base.js.map +1 -0
  102. package/dist/esm/logger/http_client.logger.js +205 -0
  103. package/dist/esm/logger/http_client.logger.js.map +1 -0
  104. package/dist/esm/logger/index.js +4 -0
  105. package/dist/esm/logger/index.js.map +1 -0
  106. package/dist/esm/logger/log.filter.js +122 -0
  107. package/dist/esm/logger/log.filter.js.map +1 -0
  108. package/dist/esm/security/dns.validator.js +133 -0
  109. package/dist/esm/security/dns.validator.js.map +1 -0
  110. package/dist/esm/security/index.js +5 -0
  111. package/dist/esm/security/index.js.map +1 -0
  112. package/dist/esm/security/ip.validator.js +103 -0
  113. package/dist/esm/security/ip.validator.js.map +1 -0
  114. package/dist/esm/security/ssrf.guard.js +176 -0
  115. package/dist/esm/security/ssrf.guard.js.map +1 -0
  116. package/dist/esm/security/url.validator.js +166 -0
  117. package/dist/esm/security/url.validator.js.map +1 -0
  118. package/dist/esm/tsconfig.esm.tsbuildinfo +1 -0
  119. package/dist/esm/types/adapter.js +5 -0
  120. package/dist/esm/types/adapter.js.map +1 -0
  121. package/dist/esm/types/client.js +5 -0
  122. package/dist/esm/types/client.js.map +1 -0
  123. package/dist/esm/types/config.js +5 -0
  124. package/dist/esm/types/config.js.map +1 -0
  125. package/dist/esm/types/errors.js +30 -0
  126. package/dist/esm/types/errors.js.map +1 -0
  127. package/dist/esm/types/index.js +19 -0
  128. package/dist/esm/types/index.js.map +1 -0
  129. package/dist/esm/types/ip.js +5 -0
  130. package/dist/esm/types/ip.js.map +1 -0
  131. package/dist/esm/types/logger.js +5 -0
  132. package/dist/esm/types/logger.js.map +1 -0
  133. package/dist/esm/types/request_response.js +5 -0
  134. package/dist/esm/types/request_response.js.map +1 -0
  135. package/dist/esm/types/security.js +5 -0
  136. package/dist/esm/types/security.js.map +1 -0
  137. package/dist/esm/types/trace.js +11 -0
  138. package/dist/esm/types/trace.js.map +1 -0
  139. package/dist/esm/utils/common.js +27 -0
  140. package/dist/esm/utils/common.js.map +1 -0
  141. package/dist/esm/utils/domain.js +71 -0
  142. package/dist/esm/utils/domain.js.map +1 -0
  143. package/dist/esm/utils/index.js +7 -0
  144. package/dist/esm/utils/index.js.map +1 -0
  145. package/dist/esm/utils/ip.range.js +187 -0
  146. package/dist/esm/utils/ip.range.js.map +1 -0
  147. package/dist/esm/utils/trace.context.js +199 -0
  148. package/dist/esm/utils/trace.context.js.map +1 -0
  149. package/dist/types/adapter/axios.adapter.d.ts +51 -0
  150. package/dist/types/adapter/axios.adapter.d.ts.map +1 -0
  151. package/dist/types/adapter/base.d.ts +56 -0
  152. package/dist/types/adapter/base.d.ts.map +1 -0
  153. package/dist/types/adapter/index.d.ts +4 -0
  154. package/dist/types/adapter/index.d.ts.map +1 -0
  155. package/dist/types/adapter/undici.adapter.d.ts +68 -0
  156. package/dist/types/adapter/undici.adapter.d.ts.map +1 -0
  157. package/dist/types/client.d.ts +105 -0
  158. package/dist/types/client.d.ts.map +1 -0
  159. package/dist/types/config.d.ts +14 -0
  160. package/dist/types/config.d.ts.map +1 -0
  161. package/dist/types/const/config.const.d.ts +23 -0
  162. package/dist/types/const/config.const.d.ts.map +1 -0
  163. package/dist/types/const/dns.const.d.ts +13 -0
  164. package/dist/types/const/dns.const.d.ts.map +1 -0
  165. package/dist/types/const/enum.const.d.ts +17 -0
  166. package/dist/types/const/enum.const.d.ts.map +1 -0
  167. package/dist/types/const/index.d.ts +5 -0
  168. package/dist/types/const/index.d.ts.map +1 -0
  169. package/dist/types/const/ip.const.d.ts +42 -0
  170. package/dist/types/const/ip.const.d.ts.map +1 -0
  171. package/dist/types/index.d.ts +9 -0
  172. package/dist/types/index.d.ts.map +1 -0
  173. package/dist/types/logger/base.d.ts +42 -0
  174. package/dist/types/logger/base.d.ts.map +1 -0
  175. package/dist/types/logger/http_client.logger.d.ts +49 -0
  176. package/dist/types/logger/http_client.logger.d.ts.map +1 -0
  177. package/dist/types/logger/index.d.ts +4 -0
  178. package/dist/types/logger/index.d.ts.map +1 -0
  179. package/dist/types/logger/log.filter.d.ts +56 -0
  180. package/dist/types/logger/log.filter.d.ts.map +1 -0
  181. package/dist/types/security/dns.validator.d.ts +61 -0
  182. package/dist/types/security/dns.validator.d.ts.map +1 -0
  183. package/dist/types/security/index.d.ts +5 -0
  184. package/dist/types/security/index.d.ts.map +1 -0
  185. package/dist/types/security/ip.validator.d.ts +31 -0
  186. package/dist/types/security/ip.validator.d.ts.map +1 -0
  187. package/dist/types/security/ssrf.guard.d.ts +54 -0
  188. package/dist/types/security/ssrf.guard.d.ts.map +1 -0
  189. package/dist/types/security/url.validator.d.ts +76 -0
  190. package/dist/types/security/url.validator.d.ts.map +1 -0
  191. package/dist/types/types/adapter.d.ts +30 -0
  192. package/dist/types/types/adapter.d.ts.map +1 -0
  193. package/dist/types/types/client.d.ts +85 -0
  194. package/dist/types/types/client.d.ts.map +1 -0
  195. package/dist/types/types/config.d.ts +99 -0
  196. package/dist/types/types/config.d.ts.map +1 -0
  197. package/dist/types/types/errors.d.ts +23 -0
  198. package/dist/types/types/errors.d.ts.map +1 -0
  199. package/dist/types/types/index.d.ts +10 -0
  200. package/dist/types/types/index.d.ts.map +1 -0
  201. package/dist/types/types/ip.d.ts +32 -0
  202. package/dist/types/types/ip.d.ts.map +1 -0
  203. package/dist/types/types/logger.d.ts +136 -0
  204. package/dist/types/types/logger.d.ts.map +1 -0
  205. package/dist/types/types/request_response.d.ts +54 -0
  206. package/dist/types/types/request_response.d.ts.map +1 -0
  207. package/dist/types/types/security.d.ts +115 -0
  208. package/dist/types/types/security.d.ts.map +1 -0
  209. package/dist/types/types/trace.d.ts +34 -0
  210. package/dist/types/types/trace.d.ts.map +1 -0
  211. package/dist/types/utils/common.d.ts +14 -0
  212. package/dist/types/utils/common.d.ts.map +1 -0
  213. package/dist/types/utils/domain.d.ts +39 -0
  214. package/dist/types/utils/domain.d.ts.map +1 -0
  215. package/dist/types/utils/index.d.ts +6 -0
  216. package/dist/types/utils/index.d.ts.map +1 -0
  217. package/dist/types/utils/ip.range.d.ts +61 -0
  218. package/dist/types/utils/ip.range.d.ts.map +1 -0
  219. package/dist/types/utils/trace.context.d.ts +106 -0
  220. package/dist/types/utils/trace.context.d.ts.map +1 -0
  221. package/docs/adapters.md +53 -0
  222. package/docs/configuration.md +149 -0
  223. package/docs/logging.md +70 -0
  224. package/docs/proxy.md +44 -0
  225. package/docs/security.md +56 -0
  226. package/docs/trace-context.md +436 -0
  227. package/package.json +50 -0
  228. package/src/adapter/axios.adapter.ts +228 -0
  229. package/src/adapter/base.ts +180 -0
  230. package/src/adapter/index.ts +3 -0
  231. package/src/adapter/undici.adapter.ts +282 -0
  232. package/src/client.ts +552 -0
  233. package/src/config.ts +86 -0
  234. package/src/const/config.const.ts +60 -0
  235. package/src/const/dns.const.ts +15 -0
  236. package/src/const/enum.const.ts +17 -0
  237. package/src/const/index.ts +4 -0
  238. package/src/const/ip.const.ts +139 -0
  239. package/src/index.ts +8 -0
  240. package/src/logger/base.ts +75 -0
  241. package/src/logger/http_client.logger.ts +272 -0
  242. package/src/logger/index.ts +3 -0
  243. package/src/logger/log.filter.ts +149 -0
  244. package/src/security/dns.validator.ts +170 -0
  245. package/src/security/index.ts +4 -0
  246. package/src/security/ip.validator.ts +124 -0
  247. package/src/security/ssrf.guard.ts +224 -0
  248. package/src/security/url.validator.ts +192 -0
  249. package/src/types/adapter.ts +38 -0
  250. package/src/types/client.ts +119 -0
  251. package/src/types/config.ts +110 -0
  252. package/src/types/errors.ts +38 -0
  253. package/src/types/index.ts +27 -0
  254. package/src/types/ip.ts +34 -0
  255. package/src/types/logger.ts +150 -0
  256. package/src/types/request_response.ts +65 -0
  257. package/src/types/security.ts +126 -0
  258. package/src/types/trace.ts +35 -0
  259. package/src/utils/common.ts +28 -0
  260. package/src/utils/domain.ts +78 -0
  261. package/src/utils/index.ts +7 -0
  262. package/src/utils/ip.range.ts +218 -0
  263. package/src/utils/trace.context.ts +240 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dns.validator.js","sourceRoot":"","sources":["../../../src/security/dns.validator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EACH,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC7B,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C;;GAEG;AACH,MAAM,OAAO,YAAY;IAKrB,YACI,QAAQ,GAAG,qBAAqB,EAChC,cAAc,GAAG,2BAA2B,EAC5C,YAAY,GAAG,0BAA0B;QAEzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAoB;YACzC,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,QAAQ;YACb,cAAc;YACd,YAAY,EAAE,IAAI;YAClB,mBAAmB;YACnB,cAAc,EAAE,IAAI;YACpB,sBAAsB;YACtB,cAAc,EAAE,IAAI;SACvB,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,OAAO,CAAC,QAAgB;QACjC,OAAO;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACD,mBAAmB;YACnB,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,IAAI,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC7H,SAAS,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACL,sBAAsB;YAC1B,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC7H,SAAS,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACL,YAAY;YAChB,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,+BAAgC,QAAS,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,MAAM,GAAc;gBACtB,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,IAAI,CAAC,QAAQ;aACrB,CAAC;YAEF,gCAAgC;YAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEjC,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACX,6BAA8B,QAAS,KAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAE,EAAE,CACzG,CAAC;QACN,CAAC;IACL,CAAC;IAGD;;;;;OAKG;IACI,KAAK,CAAC,kBAAkB,CAC3B,QAAgB,EAChB,cAAc,GAAG,KAAK;QAEtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,iBAAiB;aAC/B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9B,OAAO;YACH,SAAS;YACT,QAAQ,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YACjC,UAAU;SACb,CAAC;IACN,CAAC;IAED;;OAEG;IACI,UAAU;QACb,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,QAAgB;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACI,YAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACI,iBAAiB;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACI,eAAe;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;CACJ"}
@@ -0,0 +1,5 @@
1
+ export * from './dns.validator';
2
+ export * from './ip.validator';
3
+ export * from './url.validator';
4
+ export * from './ssrf.guard';
5
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}
@@ -0,0 +1,103 @@
1
+ /**
2
+ * IP 地址验证器
3
+ */
4
+ import { isIPv4, isIPv6 } from 'node:net';
5
+ import { IpRangeUtils } from '../utils';
6
+ import { COMPILED_IPV4_RANGES, COMPILED_IPV6_RANGES } from '../const';
7
+ /**
8
+ * IP 地址验证器类
9
+ */
10
+ export class IpValidator {
11
+ /**
12
+ * 验证 IP 地址是否安全
13
+ * @param ip IP 地址
14
+ * @param allowPrivateIp 是否允许私有 IP
15
+ * @returns 验证结果
16
+ */
17
+ static validate(ip, allowPrivateIp = false) {
18
+ // 检查是否为有效的 IP 地址
19
+ const isV4 = isIPv4(ip);
20
+ const isV6 = isIPv6(ip);
21
+ if (!isV4 && !isV6) {
22
+ return {
23
+ valid: false,
24
+ ip,
25
+ isPrivate: false,
26
+ isLoopback: false,
27
+ isLinkLocal: false,
28
+ isMulticast: false,
29
+ isReserved: false,
30
+ reason: 'Invalid IP address format'
31
+ };
32
+ }
33
+ // 使用预编译的范围进行高性能检查
34
+ let isPrivate;
35
+ let isLoopback;
36
+ let isLinkLocal;
37
+ let isMulticast;
38
+ let isReserved;
39
+ if (isV4) {
40
+ isPrivate = IpRangeUtils.isIpv4InAnyCompiledRange(ip, COMPILED_IPV4_RANGES.private);
41
+ isLoopback = IpRangeUtils.isIpv4InAnyCompiledRange(ip, COMPILED_IPV4_RANGES.loopback);
42
+ isLinkLocal = IpRangeUtils.isIpv4InAnyCompiledRange(ip, COMPILED_IPV4_RANGES.linkLocal);
43
+ isMulticast = IpRangeUtils.isIpv4InAnyCompiledRange(ip, COMPILED_IPV4_RANGES.multicast);
44
+ isReserved = IpRangeUtils.isIpv4InAnyCompiledRange(ip, COMPILED_IPV4_RANGES.reserved);
45
+ }
46
+ else {
47
+ isPrivate = IpRangeUtils.isIpv6InAnyCompiledRange(ip, COMPILED_IPV6_RANGES.private);
48
+ isLoopback = IpRangeUtils.isIpv6InAnyCompiledRange(ip, COMPILED_IPV6_RANGES.loopback);
49
+ isLinkLocal = IpRangeUtils.isIpv6InAnyCompiledRange(ip, COMPILED_IPV6_RANGES.linkLocal);
50
+ isMulticast = IpRangeUtils.isIpv6InAnyCompiledRange(ip, COMPILED_IPV6_RANGES.multicast);
51
+ isReserved = IpRangeUtils.isIpv6InAnyCompiledRange(ip, COMPILED_IPV6_RANGES.reserved);
52
+ }
53
+ // 基础验证信息
54
+ const baseResult = {
55
+ ip,
56
+ isPrivate,
57
+ isLoopback,
58
+ isLinkLocal,
59
+ isMulticast,
60
+ isReserved
61
+ };
62
+ // 检查是否为受限 IP - 按优先级顺序检查
63
+ const restrictions = [
64
+ { condition: isLoopback, reason: 'Loopback address is not allowed' },
65
+ { condition: isLinkLocal, reason: 'Link-local address is not allowed' },
66
+ { condition: isMulticast, reason: 'Multicast address is not allowed' },
67
+ { condition: isReserved, reason: 'Reserved address is not allowed' },
68
+ { condition: isPrivate && !allowPrivateIp, reason: 'Private IP address is not allowed' }
69
+ ];
70
+ for (const { condition, reason } of restrictions) {
71
+ if (condition) {
72
+ return {
73
+ valid: false,
74
+ ...baseResult,
75
+ reason
76
+ };
77
+ }
78
+ }
79
+ return {
80
+ valid: true,
81
+ ...baseResult
82
+ };
83
+ }
84
+ /**
85
+ * 批量验证 IP 地址
86
+ * @param ips IP 地址列表
87
+ * @param allowPrivateIp 是否允许私有 IP
88
+ * @returns 验证结果列表
89
+ */
90
+ static validateMany(ips, allowPrivateIp = false) {
91
+ return ips.map(ip => this.validate(ip, allowPrivateIp));
92
+ }
93
+ /**
94
+ * 检查是否所有 IP 地址都有效
95
+ * @param ips IP 地址列表
96
+ * @param allowPrivateIp 是否允许私有 IP
97
+ * @returns 是否所有 IP 都有效
98
+ */
99
+ static validateAll(ips, allowPrivateIp = false) {
100
+ return this.validateMany(ips, allowPrivateIp).every(result => result.valid);
101
+ }
102
+ }
103
+ //# sourceMappingURL=ip.validator.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ip.validator.js","sourceRoot":"","sources":["../../../src/security/ip.validator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACH,MAAM,EACN,MAAM,EACT,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EACH,oBAAoB,EACpB,oBAAoB,EACvB,MAAM,UAAU,CAAC;AAGlB;;GAEG;AACH,MAAM,OAAO,WAAW;IACpB;;;;;OAKG;IACI,MAAM,CAAC,QAAQ,CAAC,EAAU,EAAE,cAAc,GAAG,KAAK;QACrD,iBAAiB;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,EAAE;gBACF,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,KAAK;gBAClB,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,2BAA2B;aACtC,CAAC;QACN,CAAC;QAED,kBAAkB;QAClB,IAAI,SAAkB,CAAC;QACvB,IAAI,UAAmB,CAAC;QACxB,IAAI,WAAoB,CAAC;QACzB,IAAI,WAAoB,CAAC;QACzB,IAAI,UAAmB,CAAC;QAExB,IAAI,IAAI,EAAE,CAAC;YACP,SAAS,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACpF,UAAU,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtF,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxF,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxF,UAAU,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACJ,SAAS,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACpF,UAAU,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtF,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxF,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxF,UAAU,GAAG,YAAY,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1F,CAAC;QAED,SAAS;QACT,MAAM,UAAU,GAAG;YACf,EAAE;YACF,SAAS;YACT,UAAU;YACV,WAAW;YACX,WAAW;YACX,UAAU;SACb,CAAC;QAEF,wBAAwB;QACxB,MAAM,YAAY,GAAG;YACjB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,iCAAiC,EAAE;YACpE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,mCAAmC,EAAE;YACvE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,kCAAkC,EAAE;YACtE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,iCAAiC,EAAE;YACpE,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,mCAAmC,EAAE;SAC3F,CAAC;QAEF,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC/C,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO;oBACH,KAAK,EAAE,KAAK;oBACZ,GAAG,UAAU;oBACb,MAAM;iBACT,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI;YACX,GAAG,UAAU;SAChB,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,YAAY,CACtB,GAAa,EACb,cAAc,GAAG,KAAK;QAEtB,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,WAAW,CAAC,GAAa,EAAE,cAAc,GAAG,KAAK;QAC3D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;CACJ"}
@@ -0,0 +1,176 @@
1
+ /**
2
+ * SSRF 防护
3
+ * 整合 IP、DNS 和 URL 验证,防止服务器端请求伪造攻击
4
+ */
5
+ import { URL } from 'node:url';
6
+ import { isIP } from 'node:net';
7
+ import { SecurityError } from '../types';
8
+ import { DnsValidator } from './dns.validator';
9
+ import { IpValidator } from './ip.validator';
10
+ import { UrlValidator } from './url.validator';
11
+ /**
12
+ * SSRF 防护类
13
+ */
14
+ export class SsrfGuard {
15
+ constructor(config) {
16
+ this.config = config;
17
+ this.dnsValidator = new DnsValidator(config.dnsCacheTtl, undefined, // 使用默认的 DNS 解析超时
18
+ config.dnsCacheMaxSize);
19
+ this.urlValidator = new UrlValidator(config.whitelist, config.blacklist);
20
+ }
21
+ /**
22
+ * 验证 URL 是否安全
23
+ * @param url 要验证的 URL
24
+ * @returns 验证结果
25
+ */
26
+ async validate(url) {
27
+ let parsedUrl;
28
+ try {
29
+ parsedUrl = new URL(url);
30
+ }
31
+ catch (error) {
32
+ return {
33
+ passed: false,
34
+ originalUrl: url,
35
+ hostname: '',
36
+ reason: 'Invalid URL format'
37
+ };
38
+ }
39
+ const hostname = parsedUrl.hostname;
40
+ // 第一步:URL 验证(黑白名单)
41
+ const urlValidation = this.urlValidator.validate(url);
42
+ if (!urlValidation.valid) {
43
+ return {
44
+ passed: false,
45
+ originalUrl: url,
46
+ hostname,
47
+ reason: urlValidation.reason
48
+ };
49
+ }
50
+ // 第二步:检查是否为 IP 地址
51
+ const ipVersion = isIP(hostname);
52
+ if (ipVersion !== 0) {
53
+ // 直接使用 IP 地址,需要验证 IP 安全性
54
+ if (!this.config.enableIpValidation) {
55
+ return {
56
+ passed: true,
57
+ originalUrl: url,
58
+ hostname,
59
+ resolvedIps: [hostname],
60
+ safeIp: hostname
61
+ };
62
+ }
63
+ const ipValidation = IpValidator.validate(hostname, this.config.allowPrivateIp);
64
+ if (!ipValidation.valid) {
65
+ return {
66
+ passed: false,
67
+ originalUrl: url,
68
+ hostname,
69
+ resolvedIps: [hostname],
70
+ reason: ipValidation.reason
71
+ };
72
+ }
73
+ return {
74
+ passed: true,
75
+ originalUrl: url,
76
+ hostname,
77
+ resolvedIps: [hostname],
78
+ safeIp: hostname
79
+ };
80
+ }
81
+ // 第三步:DNS 解析和验证
82
+ if (!this.config.enableDnsValidation) {
83
+ return {
84
+ passed: true,
85
+ originalUrl: url,
86
+ hostname
87
+ };
88
+ }
89
+ try {
90
+ const { dnsResult, allValid, invalidIps } = await this.dnsValidator.resolveAndValidate(hostname, this.config.allowPrivateIp);
91
+ if (!allValid) {
92
+ return {
93
+ passed: false,
94
+ originalUrl: url,
95
+ hostname,
96
+ resolvedIps: dnsResult.addresses,
97
+ reason: `DNS resolved to unsafe IP addresses: ${invalidIps.join(', ')}`
98
+ };
99
+ }
100
+ // 选择第一个有效的 IP 地址
101
+ const safeIp = dnsResult.addresses[0];
102
+ return {
103
+ passed: true,
104
+ originalUrl: url,
105
+ hostname,
106
+ resolvedIps: dnsResult.addresses,
107
+ safeIp
108
+ };
109
+ }
110
+ catch (error) {
111
+ return {
112
+ passed: false,
113
+ originalUrl: url,
114
+ hostname,
115
+ reason: error instanceof Error ? error.message : String(error)
116
+ };
117
+ }
118
+ }
119
+ /**
120
+ * 验证并返回安全的 URL
121
+ * @param url 要验证的 URL
122
+ * @returns 安全的 URL 和验证结果
123
+ * @throws {SecurityError} 验证失败时抛出错误
124
+ */
125
+ async validateAndGetSafeUrl(url) {
126
+ const result = await this.validate(url);
127
+ if (!result.passed) {
128
+ throw new SecurityError(result.reason || 'URL validation failed', 'SSRF_VALIDATION_FAILED', url);
129
+ }
130
+ return {
131
+ safeUrl: url,
132
+ result
133
+ };
134
+ }
135
+ /**
136
+ * 更新配置
137
+ * @param config 新的安全配置
138
+ */
139
+ updateConfig(config) {
140
+ this.config = { ...this.config, ...config };
141
+ // 如果 DNS 缓存配置变更,需要重新创建 DNS 验证器
142
+ if (config.dnsCacheTtl !== undefined || config.dnsCacheMaxSize !== undefined) {
143
+ this.dnsValidator = new DnsValidator(this.config.dnsCacheTtl, undefined, this.config.dnsCacheMaxSize);
144
+ }
145
+ if (config.whitelist !== undefined || config.blacklist !== undefined) {
146
+ this.urlValidator = new UrlValidator(config.whitelist ?? this.config.whitelist, config.blacklist ?? this.config.blacklist);
147
+ }
148
+ }
149
+ /**
150
+ * 清空 DNS 缓存
151
+ */
152
+ clearDnsCache() {
153
+ this.dnsValidator.clearCache();
154
+ }
155
+ /**
156
+ * 获取 DNS 缓存大小
157
+ * @returns 缓存条目数量
158
+ */
159
+ getDnsCacheSize() {
160
+ return this.dnsValidator.getCacheSize();
161
+ }
162
+ /**
163
+ * 清理过期的 DNS 缓存
164
+ */
165
+ cleanExpiredDnsCache() {
166
+ this.dnsValidator.cleanExpiredCache();
167
+ }
168
+ /**
169
+ * 获取当前配置
170
+ * @returns 安全配置副本
171
+ */
172
+ getConfig() {
173
+ return { ...this.config };
174
+ }
175
+ }
176
+ //# sourceMappingURL=ssrf.guard.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ssrf.guard.js","sourceRoot":"","sources":["../../../src/security/ssrf.guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAMhC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;GAEG;AACH,MAAM,OAAO,SAAS;IAKlB,YAAY,MAAsB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAChC,MAAM,CAAC,WAAW,EAClB,SAAS,EAAG,iBAAiB;QAC7B,MAAM,CAAC,eAAe,CACzB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,QAAQ,CAAC,GAAW;QAC7B,IAAI,SAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO;gBACH,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,GAAG;gBAChB,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,oBAAoB;aAC/B,CAAC;QACN,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAEpC,mBAAmB;QACnB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO;gBACH,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,GAAG;gBAChB,QAAQ;gBACR,MAAM,EAAE,aAAa,CAAC,MAAM;aAC/B,CAAC;QACN,CAAC;QAED,kBAAkB;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YAClB,yBAAyB;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAClC,OAAO;oBACH,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,GAAG;oBAChB,QAAQ;oBACR,WAAW,EAAE,CAAC,QAAQ,CAAC;oBACvB,MAAM,EAAE,QAAQ;iBACnB,CAAC;YACN,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAChF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO;oBACH,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,GAAG;oBAChB,QAAQ;oBACR,WAAW,EAAE,CAAC,QAAQ,CAAC;oBACvB,MAAM,EAAE,YAAY,CAAC,MAAM;iBAC9B,CAAC;YACN,CAAC;YAED,OAAO;gBACH,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,GAAG;gBAChB,QAAQ;gBACR,WAAW,EAAE,CAAC,QAAQ,CAAC;gBACvB,MAAM,EAAE,QAAQ;aACnB,CAAC;QACN,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnC,OAAO;gBACH,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,GAAG;gBAChB,QAAQ;aACX,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAClF,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,cAAc,CAC7B,CAAC;YAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,OAAO;oBACH,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,GAAG;oBAChB,QAAQ;oBACR,WAAW,EAAE,SAAS,CAAC,SAAS;oBAChC,MAAM,EAAE,wCAAyC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAE,EAAE;iBAC5E,CAAC;YACN,CAAC;YAED,iBAAiB;YACjB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtC,OAAO;gBACH,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,GAAG;gBAChB,QAAQ;gBACR,WAAW,EAAE,SAAS,CAAC,SAAS;gBAChC,MAAM;aACT,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO;gBACH,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,GAAG;gBAChB,QAAQ;gBACR,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACjE,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,qBAAqB,CAAC,GAAW;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CACnB,MAAM,CAAC,MAAM,IAAI,uBAAuB,EACxC,wBAAwB,EACxB,GAAG,CACN,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,GAAG;YACZ,MAAM;SACT,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,YAAY,CAAC,MAA+B;QAC/C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAE5C,+BAA+B;QAC/B,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC3E,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAChC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,eAAe,CAC9B,CAAC;QACN,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnE,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAChC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EACzC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAC5C,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACnC,CAAC;IAED;;;OAGG;IACI,eAAe;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACI,oBAAoB;QACvB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACI,SAAS;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;CACJ"}
@@ -0,0 +1,166 @@
1
+ /**
2
+ * URL 验证器
3
+ */
4
+ import { URL } from 'node:url';
5
+ import { DomainUtils } from '../utils';
6
+ /**
7
+ * URL 验证器类
8
+ */
9
+ export class UrlValidator {
10
+ constructor(whitelist = [], blacklist = []) {
11
+ this.whitelist = whitelist;
12
+ this.blacklist = blacklist;
13
+ // 预生成正则表达式,提高匹配性能和安全性
14
+ this.whitelistRegexps = DomainUtils.createDomainMatchers(whitelist);
15
+ this.blacklistRegexps = DomainUtils.createDomainMatchers(blacklist);
16
+ }
17
+ /**
18
+ * 验证 URL
19
+ * @param url URL 字符串
20
+ * @returns 验证结果
21
+ */
22
+ validate(url) {
23
+ let parsedUrl;
24
+ try {
25
+ parsedUrl = new URL(url);
26
+ }
27
+ catch {
28
+ return {
29
+ valid: false,
30
+ url,
31
+ inWhitelist: false,
32
+ inBlacklist: false,
33
+ reason: 'Invalid URL format'
34
+ };
35
+ }
36
+ // 只允许 http 和 https 协议
37
+ if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
38
+ return {
39
+ valid: false,
40
+ url,
41
+ inWhitelist: false,
42
+ inBlacklist: false,
43
+ reason: `Protocol ${parsedUrl.protocol} is not allowed. Only http and https are supported.`
44
+ };
45
+ }
46
+ const hostname = parsedUrl.hostname;
47
+ // 检查白名单(使用预生成的正则表达式)
48
+ const inWhitelist = this.matchesAny(hostname, this.whitelistRegexps);
49
+ // 检查黑名单(使用预生成的正则表达式)
50
+ const inBlacklist = this.matchesAny(hostname, this.blacklistRegexps);
51
+ // 配了白名单, 优先使用白名单模式, 在名单内的域名通过, 其余拒绝.
52
+ // 同时配有黑名单, 黑名单辅助拒绝其余通过的域名.
53
+ if (this.whitelist.length > 0 && !inWhitelist) {
54
+ return {
55
+ valid: false,
56
+ url,
57
+ inWhitelist,
58
+ inBlacklist,
59
+ reason: 'Domain is not in whitelist'
60
+ };
61
+ }
62
+ // 配了黑名单, 使用黑名单模式, 在黑名单内的域名拒绝, 其余通过.
63
+ if (this.blacklist.length > 0 && inBlacklist) {
64
+ return {
65
+ valid: false,
66
+ url,
67
+ inWhitelist,
68
+ inBlacklist,
69
+ reason: 'Domain is in blacklist'
70
+ };
71
+ }
72
+ // 黑白名单没配的, 默认通过.
73
+ return {
74
+ valid: true,
75
+ url,
76
+ inWhitelist,
77
+ inBlacklist
78
+ };
79
+ }
80
+ /**
81
+ * 检查域名是否匹配任一模式(使用预生成的正则表达式)
82
+ * @param hostname 域名
83
+ * @param regexps 正则表达式列表
84
+ * @returns 是否匹配
85
+ */
86
+ matchesAny(hostname, regexps) {
87
+ return regexps.some(regex => regex.test(hostname));
88
+ }
89
+ /**
90
+ * 更新白名单
91
+ * @param whitelist 新的白名单
92
+ */
93
+ setWhitelist(whitelist) {
94
+ this.whitelist = whitelist;
95
+ this.whitelistRegexps = DomainUtils.createDomainMatchers(whitelist);
96
+ }
97
+ /**
98
+ * 更新黑名单
99
+ * @param blacklist 新的黑名单
100
+ */
101
+ setBlacklist(blacklist) {
102
+ this.blacklist = blacklist;
103
+ this.blacklistRegexps = DomainUtils.createDomainMatchers(blacklist);
104
+ }
105
+ /**
106
+ * 添加到白名单
107
+ * @param patterns 要添加的模式
108
+ */
109
+ addToWhitelist(...patterns) {
110
+ this.whitelist.push(...patterns);
111
+ this.whitelistRegexps = DomainUtils.createDomainMatchers(this.whitelist);
112
+ }
113
+ /**
114
+ * 添加到黑名单
115
+ * @param patterns 要添加的模式
116
+ */
117
+ addToBlacklist(...patterns) {
118
+ this.blacklist.push(...patterns);
119
+ this.blacklistRegexps = DomainUtils.createDomainMatchers(this.blacklist);
120
+ }
121
+ /**
122
+ * 从白名单移除
123
+ * @param patterns 要移除的模式
124
+ */
125
+ removeFromWhitelist(...patterns) {
126
+ this.whitelist = this.whitelist.filter(p => !patterns.includes(p));
127
+ this.whitelistRegexps = DomainUtils.createDomainMatchers(this.whitelist);
128
+ }
129
+ /**
130
+ * 从黑名单移除
131
+ * @param patterns 要移除的模式
132
+ */
133
+ removeFromBlacklist(...patterns) {
134
+ this.blacklist = this.blacklist.filter(p => !patterns.includes(p));
135
+ this.blacklistRegexps = DomainUtils.createDomainMatchers(this.blacklist);
136
+ }
137
+ /**
138
+ * 获取白名单
139
+ * @returns 白名单副本
140
+ */
141
+ getWhitelist() {
142
+ return [...this.whitelist];
143
+ }
144
+ /**
145
+ * 获取黑名单
146
+ * @returns 黑名单副本
147
+ */
148
+ getBlacklist() {
149
+ return [...this.blacklist];
150
+ }
151
+ /**
152
+ * 清空白名单
153
+ */
154
+ clearWhitelist() {
155
+ this.whitelist = [];
156
+ this.whitelistRegexps = [];
157
+ }
158
+ /**
159
+ * 清空黑名单
160
+ */
161
+ clearBlacklist() {
162
+ this.blacklist = [];
163
+ this.blacklistRegexps = [];
164
+ }
165
+ }
166
+ //# sourceMappingURL=url.validator.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"url.validator.js","sourceRoot":"","sources":["../../../src/security/url.validator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC;;GAEG;AACH,MAAM,OAAO,YAAY;IAMrB,YAAY,YAAsB,EAAE,EAAE,YAAsB,EAAE;QAC1D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,GAAW;QACvB,IAAI,SAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,GAAG;gBACH,WAAW,EAAE,KAAK;gBAClB,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,oBAAoB;aAC/B,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,GAAG;gBACH,WAAW,EAAE,KAAK;gBAClB,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,YAAa,SAAS,CAAC,QAAS,qDAAqD;aAChG,CAAC;QACN,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAEpC,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrE,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAErE,qCAAqC;QACrC,2BAA2B;QAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,GAAG;gBACH,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,4BAA4B;aACvC,CAAC;QACN,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;YAC3C,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,GAAG;gBACH,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,wBAAwB;aACnC,CAAC;QACN,CAAC;QAED,iBAAiB;QACjB,OAAO;YACH,KAAK,EAAE,IAAI;YACX,GAAG;YACH,WAAW;YACX,WAAW;SACd,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACK,UAAU,CAAC,QAAgB,EAAE,OAAiB;QAClD,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACI,YAAY,CAAC,SAAmB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,YAAY,CAAC,SAAmB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,cAAc,CAAC,GAAG,QAAkB;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACI,cAAc,CAAC,GAAG,QAAkB;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACI,mBAAmB,CAAC,GAAG,QAAkB;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACI,mBAAmB,CAAC,GAAG,QAAkB;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACI,YAAY;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACI,YAAY;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,cAAc;QACjB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,cAAc;QACjB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC/B,CAAC;CACJ"}
@@ -0,0 +1 @@
1
+ {"root":["../../src/client.ts","../../src/config.ts","../../src/index.ts","../../src/adapter/axios.adapter.ts","../../src/adapter/base.ts","../../src/adapter/index.ts","../../src/adapter/undici.adapter.ts","../../src/const/config.const.ts","../../src/const/dns.const.ts","../../src/const/enum.const.ts","../../src/const/index.ts","../../src/const/ip.const.ts","../../src/logger/base.ts","../../src/logger/http_client.logger.ts","../../src/logger/index.ts","../../src/logger/log.filter.ts","../../src/security/dns.validator.ts","../../src/security/index.ts","../../src/security/ip.validator.ts","../../src/security/ssrf.guard.ts","../../src/security/url.validator.ts","../../src/types/adapter.ts","../../src/types/client.ts","../../src/types/config.ts","../../src/types/errors.ts","../../src/types/index.ts","../../src/types/ip.ts","../../src/types/logger.ts","../../src/types/request_response.ts","../../src/types/security.ts","../../src/types/trace.ts","../../src/utils/common.ts","../../src/utils/domain.ts","../../src/utils/index.ts","../../src/utils/ip.range.ts","../../src/utils/trace.context.ts"],"version":"5.9.3"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 适配器相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=adapter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/types/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 客户端相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=client.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/types/client.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 配置相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=config.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,30 @@
1
+ /**
2
+ * 错误类型定义
3
+ */
4
+ /**
5
+ * HTTP 错误
6
+ */
7
+ export class HttpError extends Error {
8
+ constructor(message, code, status, response, request) {
9
+ super(message);
10
+ this.code = code;
11
+ this.status = status;
12
+ this.response = response;
13
+ this.request = request;
14
+ this.name = 'HttpError';
15
+ Error.captureStackTrace(this, this.constructor);
16
+ }
17
+ }
18
+ /**
19
+ * 安全验证错误
20
+ */
21
+ export class SecurityError extends Error {
22
+ constructor(message, code, url) {
23
+ super(message);
24
+ this.code = code;
25
+ this.url = url;
26
+ this.name = 'SecurityError';
27
+ Error.captureStackTrace(this, this.constructor);
28
+ }
29
+ }
30
+ //# sourceMappingURL=errors.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAChC,YACI,OAAe,EACC,IAAY,EACZ,MAAe,EACf,QAAuB,EACvB,OAA4B;QAE5C,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAS;QACf,aAAQ,GAAR,QAAQ,CAAe;QACvB,YAAO,GAAP,OAAO,CAAqB;QAG5C,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpC,YACI,OAAe,EACC,IAAY,EACZ,GAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAS;QAG5B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;CACJ"}
@@ -0,0 +1,19 @@
1
+ // 请求和响应
2
+ export * from './request_response';
3
+ // 配置相关
4
+ export * from './config';
5
+ // 错误类
6
+ export * from './errors';
7
+ // 安全和验证
8
+ export * from './security';
9
+ // IP 相关
10
+ export * from './ip';
11
+ // 日志相关
12
+ export * from './logger';
13
+ // 适配器相关
14
+ export * from './adapter';
15
+ // 客户端相关
16
+ export * from './client';
17
+ // trace 相关
18
+ export * from './trace';
19
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,oBAAoB,CAAC;AAEnC,OAAO;AACP,cAAc,UAAU,CAAC;AAEzB,MAAM;AACN,cAAc,UAAU,CAAC;AAEzB,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,QAAQ;AACR,cAAc,MAAM,CAAC;AAErB,OAAO;AACP,cAAc,UAAU,CAAC;AAEzB,QAAQ;AACR,cAAc,WAAW,CAAC;AAE1B,QAAQ;AACR,cAAc,UAAU,CAAC;AAEzB,WAAW;AACX,cAAc,SAAS,CAAC"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * IP 相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=ip.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ip.js","sourceRoot":"","sources":["../../../src/types/ip.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 日志相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=logger.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/types/logger.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 请求和响应类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=request_response.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"request_response.js","sourceRoot":"","sources":["../../../src/types/request_response.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * 安全和验证相关类型定义
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=security.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/types/security.ts"],"names":[],"mappings":"AAAA;;GAEG"}
@@ -0,0 +1,11 @@
1
+ /**
2
+ * Trace 标志位
3
+ */
4
+ export var TraceFlags;
5
+ (function (TraceFlags) {
6
+ /** 未采样 */
7
+ TraceFlags[TraceFlags["NONE"] = 0] = "NONE";
8
+ /** 已采样 */
9
+ TraceFlags[TraceFlags["SAMPLED"] = 1] = "SAMPLED";
10
+ })(TraceFlags || (TraceFlags = {}));
11
+ //# sourceMappingURL=trace.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"trace.js","sourceRoot":"","sources":["../../../src/types/trace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IAClB,UAAU;IACV,2CAAW,CAAA;IACX,UAAU;IACV,iDAAc,CAAA;AAClB,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB"}