next-csrf
Version:
CSRF mitigation library for Next.js
1 lines • 6.47 kB
JSON
{"ast":null,"code":"\"use strict\";\n\nfunction _createForOfIteratorHelper(o, allowArrayLike) { var it; if (typeof Symbol === \"undefined\" || o[Symbol.iterator] == null) { if (Array.isArray(o) || (it = _unsupportedIterableToArray(o)) || allowArrayLike && o && typeof o.length === \"number\") { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if (i >= o.length) return { done: true }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError(\"Invalid attempt to iterate non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\"); } var normalCompletion = true, didErr = false, err; return { s: function s() { it = o[Symbol.iterator](); }, n: function n() { var step = it.next(); normalCompletion = step.done; return step; }, e: function e(_e2) { didErr = true; err = _e2; }, f: function f() { try { if (!normalCompletion && it[\"return\"] != null) it[\"return\"](); } finally { if (didErr) throw err; } } }; }\n\nfunction _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === \"string\") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === \"Object\" && o.constructor) n = o.constructor.name; if (n === \"Map\" || n === \"Set\") return Array.from(o); if (n === \"Arguments\" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _arrayLikeToArray(o, minLen); }\n\nfunction _arrayLikeToArray(arr, len) { if (len == null || len > arr.length) len = arr.length; for (var i = 0, arr2 = new Array(len); i < len; i++) { arr2[i] = arr[i]; } return arr2; }\n\nexports.__esModule = true;\nexports[\"default\"] = resolveRewrites;\n\nvar _pathMatch = _interopRequireDefault(require(\"./path-match\"));\n\nvar _prepareDestination = _interopRequireDefault(require(\"./prepare-destination\"));\n\nfunction _interopRequireDefault(obj) {\n return obj && obj.__esModule ? obj : {\n \"default\": obj\n };\n}\n\nvar customRouteMatcher = (0, _pathMatch[\"default\"])(true);\n\nfunction resolveRewrites(asPath, pages, basePath, rewrites, query, resolveHref) {\n if (!pages.includes(asPath)) {\n var _iterator = _createForOfIteratorHelper(rewrites),\n _step;\n\n try {\n for (_iterator.s(); !(_step = _iterator.n()).done;) {\n var rewrite = _step.value;\n var matcher = customRouteMatcher(rewrite.source);\n var params = matcher(asPath);\n\n if (params) {\n if (!rewrite.destination) {\n // this is a proxied rewrite which isn't handled on the client\n break;\n }\n\n var destRes = (0, _prepareDestination[\"default\"])(rewrite.destination, params, query, true, rewrite.basePath === false ? '' : basePath);\n asPath = destRes.parsedDestination.pathname;\n Object.assign(query, destRes.parsedDestination.query);\n\n if (pages.includes(asPath)) {\n // check if we now match a page as this means we are done\n // resolving the rewrites\n break;\n } // check if we match a dynamic-route, if so we break the rewrites chain\n\n\n var resolvedHref = resolveHref(asPath);\n\n if (resolvedHref !== asPath && pages.includes(resolvedHref)) {\n break;\n }\n }\n }\n } catch (err) {\n _iterator.e(err);\n } finally {\n _iterator.f();\n }\n }\n\n return asPath;\n}","map":{"version":3,"sources":["../../../../../next-server/lib/router/utils/resolve-rewrites.ts"],"names":["customRouteMatcher","pages","matcher","rewrite","params","destRes","asPath","Object","resolvedHref","resolveHref"],"mappings":";;;;;;;;;;;AACA,IAAA,UAAA,GAAA,sBAAA,CAAA,OAAA,CAAA,cAAA,CAAA,CAAA;;AACA,IAAA,mBAAA,GAAA,sBAAA,CAAA,OAAA,CAAA,uBAAA,CAAA,CAAA;;;;;;AAGA;;AAAA,IAAMA,kBAAkB,GAAG,CAAA,GAAA,UAAA,WAAA,EAA3B,IAA2B,CAA3B;;AAEe,SAAA,eAAA,CAAA,MAAA,EAAA,KAAA,EAAA,QAAA,EAAA,QAAA,EAAA,KAAA,EAAA,WAAA,EAOb;AACA,MAAI,CAACC,KAAK,CAALA,QAAAA,CAAL,MAAKA,CAAL,EAA6B;AAAA,+CAC3B,QAD2B;AAAA;;AAAA;AAC3B,0DAAgC;AAAA,YAAhC,OAAgC;AAC9B,YAAMC,OAAO,GAAGF,kBAAkB,CAACG,OAAO,CAA1C,MAAkC,CAAlC;AACA,YAAMC,MAAM,GAAGF,OAAO,CAAtB,MAAsB,CAAtB;;AAEA,YAAA,MAAA,EAAY;AACV,cAAI,CAACC,OAAO,CAAZ,WAAA,EAA0B;AACxB;AACA;AAEF;;AAAA,cAAME,OAAO,GAAG,CAAA,GAAA,mBAAA,WAAA,EACdF,OAAO,CADO,WAAA,EAAA,MAAA,EAAA,KAAA,EAAA,IAAA,EAKdA,OAAO,CAAPA,QAAAA,KAAAA,KAAAA,GAAAA,EAAAA,GALF,QAAgB,CAAhB;AAOAG,UAAAA,MAAM,GAAGD,OAAO,CAAPA,iBAAAA,CAATC,QAAAA;AACAC,UAAAA,MAAM,CAANA,MAAAA,CAAAA,KAAAA,EAAqBF,OAAO,CAAPA,iBAAAA,CAArBE,KAAAA;;AAEA,cAAIN,KAAK,CAALA,QAAAA,CAAJ,MAAIA,CAAJ,EAA4B;AAC1B;AACA;AACA;AAGF,WArBU,CAqBV;;;AACA,cAAMO,YAAY,GAAGC,WAAW,CAAhC,MAAgC,CAAhC;;AAEA,cAAID,YAAY,KAAZA,MAAAA,IAA2BP,KAAK,CAALA,QAAAA,CAA/B,YAA+BA,CAA/B,EAA6D;AAC3D;AAEH;AACF;AACF;AAlC4B;AAAA;AAAA;AAAA;AAAA;AAmC7B;;AAAA,SAAA,MAAA;AACD","sourcesContent":["import { ParsedUrlQuery } from 'querystring'\nimport pathMatch from './path-match'\nimport prepareDestination from './prepare-destination'\nimport { Rewrite } from '../../../../lib/load-custom-routes'\n\nconst customRouteMatcher = pathMatch(true)\n\nexport default function resolveRewrites(\n asPath: string,\n pages: string[],\n basePath: string,\n rewrites: Rewrite[],\n query: ParsedUrlQuery,\n resolveHref: (path: string) => string\n) {\n if (!pages.includes(asPath)) {\n for (const rewrite of rewrites) {\n const matcher = customRouteMatcher(rewrite.source)\n const params = matcher(asPath)\n\n if (params) {\n if (!rewrite.destination) {\n // this is a proxied rewrite which isn't handled on the client\n break\n }\n const destRes = prepareDestination(\n rewrite.destination,\n params,\n query,\n true,\n rewrite.basePath === false ? '' : basePath\n )\n asPath = destRes.parsedDestination.pathname!\n Object.assign(query, destRes.parsedDestination.query)\n\n if (pages.includes(asPath)) {\n // check if we now match a page as this means we are done\n // resolving the rewrites\n break\n }\n\n // check if we match a dynamic-route, if so we break the rewrites chain\n const resolvedHref = resolveHref(asPath)\n\n if (resolvedHref !== asPath && pages.includes(resolvedHref)) {\n break\n }\n }\n }\n }\n return asPath\n}\n"]},"metadata":{},"sourceType":"script"}