vortez 5.0.0-dev.18 → 5.0.0

package/build/server/BodyParser.js

@@ -41,8 +41,9 @@ export class BodyParser {
             this.httpRequest.on('end', () => resolve(Buffer.concat(chunks)));
             this.httpRequest.on('error', (error) => reject(Error('fail parsing request body', { cause: error })));
             this.httpRequest.on('data', (chunk) => {
-                if (chunks.length > 1e+8)
-                    return void this.httpRequest.destroy();
+                const size = chunks.reduce((total, current) => total + current.length, 0) + chunk.length;
+                if (size > 1e+8)
+                    return void this.httpRequest.destroy(Error('Request body is too large'));
                 chunks.push(chunk);
             });
         });
@@ -90,7 +91,8 @@ export class BodyParser {
         const fragments = decoded.split('&');
         fragments.forEach((pair) => {
             const [key, value] = pair.split('=');
-            content[decodeURIComponent(key)] = decodeURIComponent(value);
+            const normalizedKey = this.safeDecodeURIComponent(key.replace(/\+/g, ' '));
+            content[normalizedKey] = this.safeDecodeURIComponent((value ?? '').replace(/\+/g, ' '));
         });
         return {
             mimeType: 'application/x-www-form-urlencoded',
@@ -157,6 +159,19 @@ export class BodyParser {
             return null;
         return result[1];
     }
+    /**
+     * Safely decodes a URI component, returning the original value if decoding fails.
+     * @param value - The value to decode.
+     * @returns The decoded value or the original if decoding fails.
+     */
+    safeDecodeURIComponent(value) {
+        try {
+            return decodeURIComponent(value);
+        }
+        catch {
+            return value;
+        }
+    }
 }
 export default BodyParser;
 //# sourceMappingURL=BodyParser.js.map

package/build/server/BodyParser.js.map

@@ -1 +1 @@
-{"version":3,"file":"BodyParser.js","sourceRoot":"","sources":["../../src/server/BodyParser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,OAAO,UAAU;IAGI;IACA;IAHf,MAAM,CAAC,uBAAuB,GAAG,oHAAoH,CAAC;IAC9J,YACuB,OAAiC,EACjC,WAAiC;QADjC,YAAO,GAAP,OAAO,CAA0B;QACjC,gBAAW,GAAX,WAAW,CAAsB;IACrD,CAAC;IACJ;;;;OAIA;IACO,KAAK,CAAC,KAAK;QACd,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,QAAO,MAAM,EAAE,CAAC;YACrB,KAAK,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvD,KAAK,mCAAmC,CAAC,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9E,KAAK,qBAAqB,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvE,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;IACC,CAAC;IACD;;;;OAIA;IACQ,KAAK,CAAC,WAAW;QACrB,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClC,IAAG,MAAM,CAAC,MAAM,GAAG,IAAI;oBAAE,OAAO,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;OAIA;IACQ,WAAW,CAAC,IAAY;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO;YACH,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IACD;;;;;OAKA;IACQ,WAAW,CAAC,IAAY;QAC5B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO;gBACH,QAAQ,EAAE,kBAAkB;gBAC5B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;IACtF,CAAC;IACD;;;;OAIA;IACQ,iBAAiB,CAAC,IAAY;QAClC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACG,OAAO;YACH,QAAQ,EAAE,mCAAmC;YAC7C,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI;SACd,CAAA;IACL,CAAC;IACD;;;;;;OAMA;IACQ,eAAe,CAAC,IAAY,EAAE,UAAoB,EAAE;QACxD,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,KAAK,GAA6B,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,IAAI,IAAI,IAAI;gBAAE,OAAO;YACzB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAClB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACpC,OAAO,EAAE,IAAI,CAAC,OAAO;aACxB,CAAA;QACL,CAAC,CAAC,CAAC;QACH,OAAO;YACH,QAAQ,EAAE,qBAAqB;YAC/B,OAAO,EAAE,KAAK;SACjB,CAAC;IACN,CAAC;IACD;;;;OAIA;IACQ,gBAAgB,CAAC,IAAY;QACjC,MAAM,IAAI,GAAG,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,CAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,GAAG,EAAE,CAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE;YACzD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC;YAC9C,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;YACtF,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SACzF,CAAC;IACN,CAAC;IACJ;;;OAGG;IACK,aAAa,CAAC,IAAY;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;;AAuEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"BodyParser.js","sourceRoot":"","sources":["../../src/server/BodyParser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,OAAO,UAAU;IAGI;IACA;IAHf,MAAM,CAAC,uBAAuB,GAAG,oHAAoH,CAAC;IAC9J,YACuB,OAAiC,EACjC,WAAiC;QADjC,YAAO,GAAP,OAAO,CAA0B;QACjC,gBAAW,GAAX,WAAW,CAAsB;IACrD,CAAC;IACJ;;;;OAIA;IACO,KAAK,CAAC,KAAK;QACd,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,QAAO,MAAM,EAAE,CAAC;YACrB,KAAK,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvD,KAAK,mCAAmC,CAAC,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9E,KAAK,qBAAqB,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvE,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;IACC,CAAC;IACD;;;;OAIA;IACQ,KAAK,CAAC,WAAW;QACrB,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;gBACzF,IAAI,IAAI,GAAG,IAAI;oBAAE,OAAO,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAC1F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;OAIA;IACQ,WAAW,CAAC,IAAY;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO;YACH,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IACD;;;;;OAKA;IACQ,WAAW,CAAC,IAAY;QAC5B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO;gBACH,QAAQ,EAAE,kBAAkB;gBAC5B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;IACtF,CAAC;IACD;;;;OAIA;IACQ,iBAAiB,CAAC,IAAY;QAClC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACG,OAAO;YACH,QAAQ,EAAE,mCAAmC;YAC7C,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI;SACd,CAAA;IACL,CAAC;IACD;;;;;;OAMA;IACQ,eAAe,CAAC,IAAY,EAAE,UAAoB,EAAE;QACxD,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,KAAK,GAA6B,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,IAAI,IAAI,IAAI;gBAAE,OAAO;YACzB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAClB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACpC,OAAO,EAAE,IAAI,CAAC,OAAO;aACxB,CAAA;QACL,CAAC,CAAC,CAAC;QACH,OAAO;YACH,QAAQ,EAAE,qBAAqB;YAC/B,OAAO,EAAE,KAAK;SACjB,CAAC;IACN,CAAC;IACD;;;;OAIA;IACQ,gBAAgB,CAAC,IAAY;QACjC,MAAM,IAAI,GAAG,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,CAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,GAAG,EAAE,CAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE;YACzD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC;YAC9C,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;YACtF,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SACzF,CAAC;IACN,CAAC;IACJ;;;OAGG;IACK,aAAa,CAAC,IAAY;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACE;;;;OAIA;IACQ,sBAAsB,CAAC,KAAa;QACxC,IAAI,CAAC;YAAC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACzC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;;AAuEL,eAAe,UAAU,CAAC"}

package/build/server/Request.d.ts

@@ -13,15 +13,15 @@ export declare class Request {
     headers: Request.Headers;
     /** Contains the request cookies. */
     cookies: Cookie;
-    /** Contains the POST data sent. */
+    /** Contains the query string parameters sent. */
     searchParams: Request.SearchParams;
     /** Contains the IP address of the requester. */
     ip?: string | string[];
     /** Contains the request method. */
     method: Request.Method;
-    /** Contains the POSTParser. */
-    session: Session;
     /** Contains the session of the device that made the request. */
+    session: Session;
+    /** Contains the request body parser. */
     private body;
     /** Contains the HTTP request received by the server. */
     private httpRequest;
@@ -45,6 +45,7 @@ export declare class Request {
      * @param Url - The URL received from the HTTP request.
      */
     private getSearchParams;
+    private normalizeUrl;
 }
 export declare namespace Request {
     export import BodyParser = _BodyParser;
@@ -58,6 +59,7 @@ export declare namespace Request {
     }
     interface SearchParams extends Document {
     }
-    type Method = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'ALL';
+    type KnownMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS' | 'ALL';
+    type Method = KnownMethod | (string & {});
 }
 export default Request;

package/build/server/Request.js

@@ -13,15 +13,15 @@ export class Request {
     headers;
     /** Contains the request cookies. */
     cookies;
-    /** Contains the POST data sent. */
+    /** Contains the query string parameters sent. */
     searchParams;
     /** Contains the IP address of the requester. */
     ip;
     /** Contains the request method. */
     method;
-    /** Contains the POSTParser. */
-    session;
     /** Contains the session of the device that made the request. */
+    session;
+    /** Contains the request body parser. */
     body;
     /** Contains the HTTP request received by the server. */
     httpRequest;
@@ -37,12 +37,12 @@ export class Request {
         const forwardedIP = httpRequest.headers['x-forwarded-for'];
         const remoteIP = httpRequest.socket.remoteAddress;
         const method = httpRequest.method ?? 'GET';
-        const url = httpRequest.url ?? '/';
+        let url = httpRequest.url ?? '/';
         this.httpRequest = httpRequest;
         this.ip = forwardedIP ? forwardedIP : remoteIP ? remoteIP : '0.0.0.0';
         this.method = this.getMethod(method);
         this.url = url.split('?')[0];
-        this.url = decodeURI(this.url.endsWith('/') ? this.url : this.url + '/');
+        this.url = this.normalizeUrl(this.url);
         this.headers = httpRequest.headers;
         this.cookies = new Cookie(this.headers.cookie);
         this.session = Session.get(this.cookies);
@@ -55,11 +55,9 @@ export class Request {
      * @param method - The method used for the request.
      */
     getMethod(method) {
-        return method == 'POST'
-            ? 'POST'
-            : method == 'PUT' ? 'PUT'
-                : method == 'DELETE' ? 'DELETE'
-                    : 'GET';
+        method = method.trim().toUpperCase();
+        method = method.length > 0 ? method : 'GET';
+        return method;
     }
     /**
      * Retrieves the data sent via URL QUERY.
@@ -71,6 +69,13 @@ export class Request {
         UrlObject.searchParams.forEach((value, name) => searchParams[name] = value);
         return searchParams;
     }
+    normalizeUrl(url) {
+        url = url.split('?')[0];
+        url = decodeURI(url.endsWith('/') ? url : url + '/');
+        url = url.length > 1 && url.endsWith('/') ? url.slice(0, -1) : url;
+        url = url.startsWith('/') ? url : '/' + url;
+        return url;
+    }
 }
 (function (Request) {
     Request.BodyParser = _BodyParser;

package/build/server/Request.js.map

@@ -1 +1 @@
-{"version":3,"file":"Request.js","sourceRoot":"","sources":["../../src/server/Request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,OAAO,OAAO;IACnB,oCAAoC;IAC7B,OAAO,CAAkB;IAChC,oCAAoC;IAC7B,OAAO,CAAS;IACvB,mCAAmC;IAC5B,YAAY,CAAuB;IAC1C,gDAAgD;IACzC,EAAE,CAAqB;IAC9B,mCAAmC;IAC5B,MAAM,CAAiB;IAC9B,+BAA+B;IACxB,OAAO,CAAU;IACxB,gEAAgE;IACxD,IAAI,CAAqB;IACjC,wDAAwD;IAChD,WAAW,CAAuB;IAC1C,gCAAgC;IACzB,GAAG,CAAS;IACnB,6BAA6B;IACtB,UAAU,GAAuB,EAAE,CAAC;IAC3C;;;OAGG;IACH,YAAmB,WAAiC;QAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC;QAClD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC;QAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,IAAU,GAAG,CAAA;QAC9C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IACD,IAAW,IAAI,KAAuC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF;;;OAGG;IACK,SAAS,CAAC,MAAc;QAC/B,OAAO,MAAM,IAAI,MAAM;YACvB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK;gBACxB,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBAC/B,CAAC,CAAC,KAAK,CAAC;IACV,CAAC;IACD;;;OAGG;IACK,eAAe,CAAC,GAAW;QAClC,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,YAAY,GAAyB,EAAE,CAAC;QAC9C,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC5E,OAAO,YAAY,CAAC;IACrB,CAAC;CACD;AAED,WAAiB,OAAO;IACT,kBAAU,GAAG,WAAW,CAAC;IAQa,CAAC;AAEtD,CAAC,EAXgB,OAAO,KAAP,OAAO,QAWvB;AAED,eAAe,OAAO,CAAC"}
+{"version":3,"file":"Request.js","sourceRoot":"","sources":["../../src/server/Request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,OAAO,OAAO;IACnB,oCAAoC;IAC7B,OAAO,CAAkB;IAChC,oCAAoC;IAC7B,OAAO,CAAS;IACvB,iDAAiD;IAC1C,YAAY,CAAuB;IAC1C,gDAAgD;IACzC,EAAE,CAAqB;IAC9B,mCAAmC;IAC5B,MAAM,CAAiB;IAC9B,gEAAgE;IACzD,OAAO,CAAU;IACxB,wCAAwC;IAChC,IAAI,CAAqB;IACjC,wDAAwD;IAChD,WAAW,CAAuB;IAC1C,gCAAgC;IACzB,GAAG,CAAS;IACnB,6BAA6B;IACtB,UAAU,GAAuB,EAAE,CAAC;IAC3C;;;OAGG;IACH,YAAmB,WAAiC;QAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC;QAClD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC;QAC3C,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,IAAU,GAAG,CAAA;QAC5C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IACD,IAAW,IAAI,KAAuC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF;;;OAGG;IACK,SAAS,CAAC,MAAc;QAC/B,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5C,OAAO,MAAM,CAAC;IACf,CAAC;IACD;;;OAGG;IACK,eAAe,CAAC,GAAW;QAClC,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,YAAY,GAAyB,EAAE,CAAC;QAC9C,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC5E,OAAO,YAAY,CAAC;IACrB,CAAC;IACO,YAAY,CAAC,GAAW;QAC/B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACrD,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACnE,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QAC5C,OAAO,GAAG,CAAC;IACZ,CAAC;CACD;AAED,WAAiB,OAAO;IACT,kBAAU,GAAG,WAAW,CAAC;IAQa,CAAC;AAGtD,CAAC,EAZgB,OAAO,KAAP,OAAO,QAYvB;AAED,eAAe,OAAO,CAAC"}

package/build/server/Response.d.ts

@@ -5,9 +5,13 @@
  */
 import HTTP from 'http';
 import FS from 'fs';
+import { Readable } from 'stream';
 import Request from './Request.js';
 import Config from './config/Config.js';
 export declare class Response {
+    static readonly contentTypeMap: Response.contentTypeMap;
+    static readonly acceptRangeFormats: string[];
+    private static readonly version;
     /** Contains the request received by the server. */
     request: Request;
     /** Contains the list of server response templates. */
@@ -21,7 +25,7 @@ export declare class Response {
      * @param httpResponse - The response to be sent by the server.
      * @param templates - The list of server response templates.
      */
-    constructor(request: Request, httpResponse: HTTP.ServerResponse, templates?: Config.Templates);
+    constructor(request: Request, httpResponse: HTTP.ServerResponse, templates: Config['data']['templates']);
     /** Checks if the response has been sent. */
     get isSended(): boolean;
     /**
@@ -29,7 +33,7 @@ export declare class Response {
      * More types will be supported over time.
      * @param extension - The file extension.
      */
-    generateHeaders(extension: string): Request.Headers;
+    generateHeaders(extension: string): HTTP.OutgoingHttpHeaders;
     /**
      * Sends response headers.
      * @param code - The HTTP status code.
@@ -41,7 +45,17 @@ export declare class Response {
      * @param data - The data to be sent.
      * @param encode - The encoding used for the response.
      */
-    send(data: Response.data, options?: Response.options): void;
+    send(data: Response.data, options?: Response.options): Promise<void>;
+    /**
+     * Sends a readable stream as a response.
+     * @param data - The readable stream to be sent.
+     * @param options - The response options.
+     * @throws If an error occurs while sending the stream.
+     * @returns A promise that resolves when the stream has been sent.
+     * @remarks This method is used for sending large data, such as files or templates, without loading them entirely into memory.
+     * It handles backpressure and ensures efficient streaming of data to the client.
+     */
+    private sendReadable;
     /**
      * Sends a file as a response.
      * @param path - The file path to send.
@@ -51,11 +65,11 @@ export declare class Response {
     sendFile(path: string, options?: Response.options): Promise<void>;
     /**
      * Sends the listing of a folder as a response.
-     * @param basePath - The routing rule base path.
-     * @param relativePath - The relative path received in the request.
+     * @param base - The routing rule base path.
+     * @param plus - The relative path received in the request.
      * @throws If the folder does not exist or is invalid.
      */
-    sendFolder(basePath: string, relativePath: string): Promise<void>;
+    sendFolder(base: string, plus?: string): Promise<void>;
     /**
      * Sends a `.vhtml` template as a response.
      * @param path - The template file path.
@@ -69,25 +83,26 @@ export declare class Response {
      * @param data - The data to send.
      * @param options - The response options.
      */
-    sendJson(data: any, options?: Response.options): void;
+    sendJson(data: any, options?: Response.options): Promise<void>;
     /**
      * Sends an error as a response.
      * @param status - The HTTP status code of the error.
      * @param message - The error message.
      */
     sendError(status: number, message: string): Promise<void>;
-    private fileExist;
+    private getFsErrorStatus;
+    private static loadVersion;
 }
 export declare namespace Response {
     interface options {
         status?: number;
-        headers?: Request.Headers;
+        headers?: HTTP.OutgoingHttpHeaders;
         encode?: BufferEncoding;
     }
     interface contentTypeMap {
         [key: string]: string | undefined;
     }
-    type data = string | Buffer | FS.ReadStream;
+    type data = string | Buffer | Readable | FS.ReadStream;
     type Extensions = ('HTML' | 'JS' | 'CSS' | 'JSON' | 'XML' | 'TXT' | 'SVG' | 'PNG' | 'JPG' | 'JPEG' | 'MP3' | 'WAV' | 'MP4');
 }
 export default Response;

package/build/server/Response.js

@@ -5,11 +5,33 @@
  */
 import FS from 'fs';
 import PATH from 'path';
+import { Readable } from 'stream';
+import { pipeline } from 'stream/promises';
 import Logger from '../logger/Logger.js';
 import Utilities from '../utilities/Utilities.js';
-import Template from '../Template.js';
+import Template from '../Template/Template.js';
+import PathSecurity from './security/PathSecurity.js';
 const logger = new Logger({ prefix: 'Response' });
 export class Response {
+    static contentTypeMap = {
+        'html': 'text/html',
+        'js': 'text/javascript',
+        'css': 'text/css',
+        'json': 'application/json',
+        'xml': 'application/xml',
+        'txt': 'text/plain',
+        'svg': 'image/svg+xml',
+        'png': 'image/png',
+        'jpg': 'image/jpeg',
+        'jpeg': 'image/jpeg',
+        'mp3': 'audio/mpeg',
+        'wav': 'audio/x-wav',
+        'mp4': 'video/mp4',
+    };
+    static acceptRangeFormats = [
+        'svg', 'png', 'jpg', 'jpeg', 'mp3', 'wav', 'mp4'
+    ];
+    static version = Response.loadVersion();
     /** Contains the request received by the server. */
     request;
     /** Contains the list of server response templates. */
@@ -23,12 +45,12 @@ export class Response {
      * @param httpResponse - The response to be sent by the server.
      * @param templates - The list of server response templates.
      */
-    constructor(request, httpResponse, templates = {}) {
+    constructor(request, httpResponse, templates) {
         this.request = request;
         this.templates = templates;
         this.httpResponse = httpResponse;
         this.httpResponse.setHeader('X-Powered-By', 'MyNetFeez-Labs Vortez');
-        this.httpResponse.setHeader('X-Version', '3.7.0-dev.18');
+        this.httpResponse.setHeader('X-Version', Response.version);
     }
     /** Checks if the response has been sent. */
     get isSended() { return this._isSended || this.httpResponse.writableEnded || this.httpResponse.headersSent; }
@@ -41,28 +63,10 @@ export class Response {
         extension = extension.startsWith('.') ? extension.slice(1) : extension;
         extension = extension.toLowerCase();
         const headers = {};
-        const contentTypeMap = {
-            'html': 'text/html',
-            'js': 'text/javascript',
-            'css': 'text/css',
-            'json': 'application/json',
-            'xml': 'application/xml',
-            'txt': 'text/plain',
-            'svg': 'image/svg+xml',
-            'png': 'image/png',
-            'jpg': 'image/jpeg',
-            'jpeg': 'image/jpeg',
-            'mp3': 'audio/mpeg',
-            'wav': 'audio/x-wav',
-            'mp4': 'video/mp4',
-        };
-        const acceptRangeFormats = [
-            'svg', 'png', 'jpg', 'jpeg', 'mp3', 'wav', 'mp4'
-        ];
-        const type = contentTypeMap[extension];
+        const type = Response.contentTypeMap[extension];
         if (type)
-            headers['Content-Type'] = type;
-        if (acceptRangeFormats.includes(extension)) {
+            headers['Content-Type'] = type ?? 'application/octet-stream';
+        if (Response.acceptRangeFormats.includes(extension)) {
             headers['Accept-Ranges'] = 'bytes';
         }
         return headers;
@@ -83,16 +87,32 @@ export class Response {
      * @param data - The data to be sent.
      * @param encode - The encoding used for the response.
      */
-    send(data, options = {}) {
+    async send(data, options = {}) {
+        if (data instanceof Readable)
+            return await this.sendReadable(data, options);
         this._isSended = true;
         const status = options.status ?? 200;
         const encode = options.encode || 'utf-8';
         const headers = options.headers || this.generateHeaders('txt');
         this.sendHeaders(status, headers);
-        if (data instanceof FS.ReadStream)
-            return void data.pipe(this.httpResponse);
         this.httpResponse.end(data, encode);
     }
+    /**
+     * Sends a readable stream as a response.
+     * @param data - The readable stream to be sent.
+     * @param options - The response options.
+     * @throws If an error occurs while sending the stream.
+     * @returns A promise that resolves when the stream has been sent.
+     * @remarks This method is used for sending large data, such as files or templates, without loading them entirely into memory.
+     * It handles backpressure and ensures efficient streaming of data to the client.
+     */
+    async sendReadable(data, options) {
+        this._isSended = true;
+        const status = options.status ?? 200;
+        const headers = options.headers || this.generateHeaders('txt');
+        await this.sendHeaders(status, headers);
+        await pipeline(data, this.httpResponse);
+    }
     /**
      * Sends a file as a response.
      * @param path - The file path to send.
@@ -104,76 +124,118 @@ export class Response {
         try {
             const details = await FS.promises.stat(path);
             if (!details.isFile())
-                return this.sendError(500, '[Response Error] - Provided path is not a file.');
+                return await this.sendError(500, '[Response Error] - Provided path is not a file.');
             if (!this.request.headers.range) {
                 const stream = FS.createReadStream(path);
                 const headers = this.generateHeaders(PATH.extname(path));
                 headers['content-length'] = details.size.toString();
-                this.send(stream, { status: 200, headers });
+                await this.send(stream, { status: 200, headers });
             }
             else {
-                const info = /bytes=(\d*)?-?(\d*)?/i.exec(this.request.headers.range);
+                const rangeHeader = this.request.headers.range;
+                const info = /^bytes=(\d*)-(\d*)$/i.exec(rangeHeader);
                 if (!info)
-                    return this.sendError(416, 'Requested range exceeds file size');
-                const [startString, endString] = info.slice(1);
-                if (!startString)
-                    return this.sendError(416, 'Requested range exceeds file size');
-                const start = Number(startString);
-                const maxSize = start + 1024 * 1000;
-                const end = endString
-                    ? Number(endString)
-                    : maxSize >= details.size
-                        ? details.size - 1
-                        : maxSize;
-                if (start > details.size || end > details.size)
-                    return this.sendError(416, 'Requested range exceeds file size');
+                    return await this.sendError(416, 'Requested range exceeds file size');
+                const [, startString, endString] = info;
+                let start;
+                let end;
+                if (startString && endString) {
+                    start = Number(startString);
+                    end = Number(endString);
+                }
+                else if (startString) {
+                    start = Number(startString);
+                    const maxSize = start + 1024 * 1000;
+                    end = maxSize >= details.size ? details.size - 1 : maxSize;
+                }
+                else if (endString) {
+                    const suffixSize = Number(endString);
+                    if (!Number.isInteger(suffixSize) || suffixSize <= 0) {
+                        return await this.sendError(416, 'Requested range exceeds file size');
+                    }
+                    start = Math.max(details.size - suffixSize, 0);
+                    end = details.size - 1;
+                }
+                else
+                    return await this.sendError(416, 'Requested range exceeds file size');
+                if (!Number.isInteger(start) ||
+                    !Number.isInteger(end) ||
+                    start < 0 ||
+                    end < start ||
+                    start >= details.size ||
+                    end >= details.size)
+                    return await this.sendError(416, 'Requested range exceeds file size');
                 const size = end - start + 1;
                 const stream = FS.createReadStream(path, { start, end });
                 const headers = this.generateHeaders(PATH.extname(path));
                 headers['content-length'] = size.toString();
                 headers['content-range'] = `bytes ${start}-${end}/${details.size}`;
-                this.send(stream, { status: 206, headers });
+                await this.send(stream, { status: 206, headers });
             }
         }
         catch (error) {
-            this.sendError(500, error instanceof Error ? error.message : '[Response Error] - File does not exist.');
+            const status = this.getFsErrorStatus(error);
+            const message = status === 404
+                ? 'The requested URL was not found'
+                : status === 403
+                    ? 'Access denied to requested resource'
+                    : error instanceof Error
+                        ? error.message
+                        : '[Response Error] - File does not exist.';
+            await this.sendError(status, message);
             logger.error(`error sending file ${this.request.session.id}`, error);
         }
     }
     /**
      * Sends the listing of a folder as a response.
-     * @param basePath - The routing rule base path.
-     * @param relativePath - The relative path received in the request.
+     * @param base - The routing rule base path.
+     * @param plus - The relative path received in the request.
      * @throws If the folder does not exist or is invalid.
      */
-    async sendFolder(basePath, relativePath) {
-        basePath = basePath.endsWith('/') ? basePath : basePath + '/';
-        relativePath = relativePath.endsWith('/') ? relativePath.slice(0, -1) : relativePath;
-        const path = Utilities.Path.normalize(basePath + relativePath);
+    async sendFolder(base, plus = '') {
+        const basePath = Utilities.Path.resolve(base || Utilities.Path.rootDir);
+        const path = await PathSecurity.resolveInsideBase(basePath, plus);
+        if (!path) {
+            logger.warn(`&C2[Vortez Security] &C3Intento de Path Traversal bloqueado:`);
+            logger.warn(` &C3- IP: &C6${this.request.ip}`);
+            logger.warn(` &C3- Session ID: &C6${this.request.session.id}`);
+            logger.warn(` &C3- URL: &C6${this.request.url}`);
+            logger.warn(` &C3- Base: &C6${basePath}`);
+            logger.warn(` &C3- Intento: &C6${plus}`);
+            return void await this.sendError(403, 'Forbidden: Outside of sandbox');
+        }
         try {
-            if (!await this.fileExist(path))
-                return void this.sendError(404, 'The requested URL was not fount');
+            if (!await Utilities.File.exists(path))
+                return void await this.sendError(404, 'The requested URL was not found');
             const details = await FS.promises.stat(path);
             if (details.isFile())
-                return this.sendFile(path);
+                return await this.sendFile(path);
             if (!details.isDirectory())
-                return this.sendError(404, 'The requested URL was not fount');
+                return await this.sendError(404, 'The requested URL was not found');
             const folder = await FS.promises.readdir(path);
             if (this.templates.folder) {
-                this.sendTemplate(this.templates.folder, {
+                await this.sendTemplate(this.templates.folder, {
                     Url: this.request.url,
                     folder
                 });
             }
             else {
-                this.sendTemplate(Utilities.Path.relative('./global/Template/Folder.vhtml'), {
+                await this.sendTemplate(Utilities.Path.module('global/template/folder.vhtml'), {
                     Url: this.request.url,
                     folder
                 });
             }
         }
         catch (error) {
-            this.sendError(500, error instanceof Error ? error.message : '[Response Error] - File/Directory does not exist.');
+            const status = this.getFsErrorStatus(error);
+            const message = status === 404
+                ? 'The requested URL was not found'
+                : status === 403
+                    ? 'Access denied to requested resource'
+                    : error instanceof Error
+                        ? error.message
+                        : '[Response Error] - File/Directory does not exist.';
+            await this.sendError(status, message);
             logger.error(`error sending folder ${this.request.session.id}`, error);
         }
     }
@@ -187,13 +249,23 @@ export class Response {
     async sendTemplate(path, data, options = {}) {
         path = Utilities.Path.normalize(path);
         try {
-            const template = await Template.load(path, data);
+            const template = await Template.stream(path, data);
             const status = options.status ?? 200;
             const headers = options.headers || this.generateHeaders('html');
-            this.send(template, { status, headers });
+            await this.send(template, { status, headers, encode: options.encode });
         }
         catch (error) {
-            this.sendError(500, error instanceof Error ? error.message : '[Response Error] - Template does not exist.');
+            const status = this.getFsErrorStatus(error);
+            const message = status === 404
+                ? 'Template not found'
+                : status === 403
+                    ? 'Access denied to template resource'
+                    : error instanceof Error
+                        ? error.message
+                        : '[Response Error] - Template does not exist.';
+            if (!this.httpResponse.headersSent && !this.httpResponse.writableEnded) {
+                await this.sendError(status, message);
+            }
             logger.error(`error sending template ${this.request.session.id}`, error);
         }
     }
@@ -202,15 +274,15 @@ export class Response {
      * @param data - The data to send.
      * @param options - The response options.
      */
-    sendJson(data, options = {}) {
+    async sendJson(data, options = {}) {
         try {
             const json = JSON.stringify(data);
             const status = options.status ?? 200;
             const headers = options.headers || this.generateHeaders('json');
-            this.send(json, { status, headers });
+            await this.send(json, { status, headers });
         }
         catch (error) {
-            this.sendError(500, error instanceof Error ? error.message : '[Response Error] - Data cannot be converted to JSON.');
+            await this.sendError(500, error instanceof Error ? error.message : '[Response Error] - Data cannot be converted to JSON.');
             logger.error(`error sending json ${this.request.session.id}`, error);
         }
     }
@@ -226,31 +298,45 @@ export class Response {
                     status, message
                 });
                 const headers = this.generateHeaders('html');
-                this.send(template, { status: status, headers });
+                await this.send(template, { status: status, headers });
             }
             else {
-                const template = await Template.load(Utilities.Path.relative('./global/Template/Error.vhtml'), {
+                const template = await Template.load(Utilities.Path.module('global/template/error.vhtml'), {
                     status, message
                 });
                 const headers = this.generateHeaders('html');
-                this.send(template, { status: status, headers });
+                await this.send(template, { status: status, headers });
             }
         }
         catch (error) {
-            console.error(error);
             const headers = this.generateHeaders('txt');
-            this.send(`Error: ${status} -> ${message}`, { status: status, headers });
+            await this.send(`Error: ${status} -> ${message}`, { status: status, headers });
             logger.error(`error sending error: ${this.request.session.id}`, error);
         }
     }
-    async fileExist(path) {
+    getFsErrorStatus(error) {
+        if (!(error instanceof Error))
+            return 500;
+        const withCode = error;
+        if (withCode.code === 'ENOENT' || withCode.code === 'ENOTDIR')
+            return 404;
+        if (withCode.code === 'EACCES' || withCode.code === 'EPERM')
+            return 403;
+        return 500;
+    }
+    static loadVersion() {
+        const envVersion = process.env.npm_package_version;
+        if (envVersion)
+            return envVersion;
         try {
-            await FS.promises.stat(path);
-            return true;
-        }
-        catch (error) {
-            return false;
+            const packagePath = Utilities.Path.module('package.json');
+            const raw = FS.readFileSync(packagePath, 'utf8');
+            const data = JSON.parse(raw);
+            if (typeof data.version === 'string' && data.version.length > 0)
+                return data.version;
         }
+        catch { }
+        return 'unknown';
     }
 }
 export default Response;