next-csrf
Version:
CSRF mitigation library for Next.js
1 lines • 8.93 kB
JSON
{"ast":null,"code":"\"use strict\";\n\nexports.__esModule = true;\nexports.formatUrl = formatUrl;\n\nvar querystring = _interopRequireWildcard(require(\"./querystring\"));\n\nfunction _getRequireWildcardCache() {\n if (typeof WeakMap !== \"function\") return null;\n var cache = new WeakMap();\n\n _getRequireWildcardCache = function () {\n return cache;\n };\n\n return cache;\n}\n\nfunction _interopRequireWildcard(obj) {\n if (obj && obj.__esModule) {\n return obj;\n }\n\n if (obj === null || typeof obj !== \"object\" && typeof obj !== \"function\") {\n return {\n default: obj\n };\n }\n\n var cache = _getRequireWildcardCache();\n\n if (cache && cache.has(obj)) {\n return cache.get(obj);\n }\n\n var newObj = {};\n var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;\n\n for (var key in obj) {\n if (Object.prototype.hasOwnProperty.call(obj, key)) {\n var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;\n\n if (desc && (desc.get || desc.set)) {\n Object.defineProperty(newObj, key, desc);\n } else {\n newObj[key] = obj[key];\n }\n }\n }\n\n newObj.default = obj;\n\n if (cache) {\n cache.set(obj, newObj);\n }\n\n return newObj;\n} // Format function modified from nodejs\n// Copyright Joyent, Inc. and other Node contributors.\n//\n// Permission is hereby granted, free of charge, to any person obtaining a\n// copy of this software and associated documentation files (the\n// \"Software\"), to deal in the Software without restriction, including\n// without limitation the rights to use, copy, modify, merge, publish,\n// distribute, sublicense, and/or sell copies of the Software, and to permit\n// persons to whom the Software is furnished to do so, subject to the\n// following conditions:\n//\n// The above copyright notice and this permission notice shall be included\n// in all copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN\n// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,\n// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR\n// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE\n// USE OR OTHER DEALINGS IN THE SOFTWARE.\n\n\nconst slashedProtocols = /https?|ftp|gopher|file/;\n\nfunction formatUrl(urlObj) {\n let {\n auth,\n hostname\n } = urlObj;\n let protocol = urlObj.protocol || '';\n let pathname = urlObj.pathname || '';\n let hash = urlObj.hash || '';\n let query = urlObj.query || '';\n let host = false;\n auth = auth ? encodeURIComponent(auth).replace(/%3A/i, ':') + '@' : '';\n\n if (urlObj.host) {\n host = auth + urlObj.host;\n } else if (hostname) {\n host = auth + (~hostname.indexOf(':') ? `[${hostname}]` : hostname);\n\n if (urlObj.port) {\n host += ':' + urlObj.port;\n }\n }\n\n if (query && typeof query === 'object') {\n query = String(querystring.urlQueryToSearchParams(query));\n }\n\n let search = urlObj.search || query && `?${query}` || '';\n if (protocol && protocol.substr(-1) !== ':') protocol += ':';\n\n if (urlObj.slashes || (!protocol || slashedProtocols.test(protocol)) && host !== false) {\n host = '//' + (host || '');\n if (pathname && pathname[0] !== '/') pathname = '/' + pathname;\n } else if (!host) {\n host = '';\n }\n\n if (hash && hash[0] !== '#') hash = '#' + hash;\n if (search && search[0] !== '?') search = '?' + search;\n pathname = pathname.replace(/[?#]/g, encodeURIComponent);\n search = search.replace('#', '%23');\n return `${protocol}${host}${pathname}${search}${hash}`;\n}","map":{"version":3,"sources":["../../../../../next-server/lib/router/utils/format-url.ts"],"names":["slashedProtocols","protocol","urlObj","pathname","hash","query","host","auth","encodeURIComponent","hostname","String","querystring","search"],"mappings":";;;;;AAwBA,IAAA,WAAA,GAAA,uBAAA,CAAA,OAAA,CAAA,eAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAxBA,C,CAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAMA,MAAMA,gBAAgB,GAAtB,wBAAA;;AAEO,SAAA,SAAA,CAAA,MAAA,EAAsC;AAC3C,MAAI;AAAA,IAAA,IAAA;AAAA,IAAA;AAAA,MAAJ,MAAA;AACA,MAAIC,QAAQ,GAAGC,MAAM,CAANA,QAAAA,IAAf,EAAA;AACA,MAAIC,QAAQ,GAAGD,MAAM,CAANA,QAAAA,IAAf,EAAA;AACA,MAAIE,IAAI,GAAGF,MAAM,CAANA,IAAAA,IAAX,EAAA;AACA,MAAIG,KAAK,GAAGH,MAAM,CAANA,KAAAA,IAAZ,EAAA;AACA,MAAII,IAAoB,GAAxB,KAAA;AAEAC,EAAAA,IAAI,GAAGA,IAAI,GAAGC,kBAAkB,CAAlBA,IAAkB,CAAlBA,CAAAA,OAAAA,CAAAA,MAAAA,EAAAA,GAAAA,IAAH,GAAA,GAAXD,EAAAA;;AAEA,MAAIL,MAAM,CAAV,IAAA,EAAiB;AACfI,IAAAA,IAAI,GAAGC,IAAI,GAAGL,MAAM,CAApBI,IAAAA;AADF,GAAA,MAEO,IAAA,QAAA,EAAc;AACnBA,IAAAA,IAAI,GAAGC,IAAI,IAAI,CAACE,QAAQ,CAARA,OAAAA,CAAD,GAACA,CAAD,GAA0B,IAAGA,QAA7B,GAAA,GAAfH,QAAW,CAAXA;;AACA,QAAIJ,MAAM,CAAV,IAAA,EAAiB;AACfI,MAAAA,IAAI,IAAI,MAAMJ,MAAM,CAApBI,IAAAA;AAEH;AAED;;AAAA,MAAID,KAAK,IAAI,OAAA,KAAA,KAAb,QAAA,EAAwC;AACtCA,IAAAA,KAAK,GAAGK,MAAM,CAACC,WAAW,CAAXA,sBAAAA,CAAfN,KAAeM,CAAD,CAAdN;AAGF;;AAAA,MAAIO,MAAM,GAAGV,MAAM,CAANA,MAAAA,IAAkBG,KAAK,IAAK,IAAGA,KAA/BH,EAAAA,IAAb,EAAA;AAEA,MAAID,QAAQ,IAAIA,QAAQ,CAARA,MAAAA,CAAgB,CAAhBA,CAAAA,MAAhB,GAAA,EAA6CA,QAAQ,IAARA,GAAAA;;AAE7C,MACEC,MAAM,CAANA,OAAAA,IACC,CAAC,CAAA,QAAA,IAAaF,gBAAgB,CAAhBA,IAAAA,CAAd,QAAcA,CAAd,KAAkDM,IAAI,KAFzD,KAAA,EAGE;AACAA,IAAAA,IAAI,GAAG,QAAQA,IAAI,IAAnBA,EAAO,CAAPA;AACA,QAAIH,QAAQ,IAAIA,QAAQ,CAARA,CAAQ,CAARA,KAAhB,GAAA,EAAqCA,QAAQ,GAAG,MAAXA,QAAAA;AALvC,GAAA,MAMO,IAAI,CAAJ,IAAA,EAAW;AAChBG,IAAAA,IAAI,GAAJA,EAAAA;AAGF;;AAAA,MAAIF,IAAI,IAAIA,IAAI,CAAJA,CAAI,CAAJA,KAAZ,GAAA,EAA6BA,IAAI,GAAG,MAAPA,IAAAA;AAC7B,MAAIQ,MAAM,IAAIA,MAAM,CAANA,CAAM,CAANA,KAAd,GAAA,EAAiCA,MAAM,GAAG,MAATA,MAAAA;AAEjCT,EAAAA,QAAQ,GAAGA,QAAQ,CAARA,OAAAA,CAAAA,OAAAA,EAAXA,kBAAWA,CAAXA;AACAS,EAAAA,MAAM,GAAGA,MAAM,CAANA,OAAAA,CAAAA,GAAAA,EAATA,KAASA,CAATA;AAEA,SAAQ,GAAEX,QAAS,GAAEK,IAAK,GAAEH,QAAS,GAAES,MAAO,GAAER,IAAhD,EAAA;AACD","sourcesContent":["// Format function modified from nodejs\n// Copyright Joyent, Inc. and other Node contributors.\n//\n// Permission is hereby granted, free of charge, to any person obtaining a\n// copy of this software and associated documentation files (the\n// \"Software\"), to deal in the Software without restriction, including\n// without limitation the rights to use, copy, modify, merge, publish,\n// distribute, sublicense, and/or sell copies of the Software, and to permit\n// persons to whom the Software is furnished to do so, subject to the\n// following conditions:\n//\n// The above copyright notice and this permission notice shall be included\n// in all copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN\n// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,\n// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR\n// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE\n// USE OR OTHER DEALINGS IN THE SOFTWARE.\n\nimport { UrlObject } from 'url'\nimport { ParsedUrlQuery } from 'querystring'\nimport * as querystring from './querystring'\n\nconst slashedProtocols = /https?|ftp|gopher|file/\n\nexport function formatUrl(urlObj: UrlObject) {\n let { auth, hostname } = urlObj\n let protocol = urlObj.protocol || ''\n let pathname = urlObj.pathname || ''\n let hash = urlObj.hash || ''\n let query = urlObj.query || ''\n let host: string | false = false\n\n auth = auth ? encodeURIComponent(auth).replace(/%3A/i, ':') + '@' : ''\n\n if (urlObj.host) {\n host = auth + urlObj.host\n } else if (hostname) {\n host = auth + (~hostname.indexOf(':') ? `[${hostname}]` : hostname)\n if (urlObj.port) {\n host += ':' + urlObj.port\n }\n }\n\n if (query && typeof query === 'object') {\n query = String(querystring.urlQueryToSearchParams(query as ParsedUrlQuery))\n }\n\n let search = urlObj.search || (query && `?${query}`) || ''\n\n if (protocol && protocol.substr(-1) !== ':') protocol += ':'\n\n if (\n urlObj.slashes ||\n ((!protocol || slashedProtocols.test(protocol)) && host !== false)\n ) {\n host = '//' + (host || '')\n if (pathname && pathname[0] !== '/') pathname = '/' + pathname\n } else if (!host) {\n host = ''\n }\n\n if (hash && hash[0] !== '#') hash = '#' + hash\n if (search && search[0] !== '?') search = '?' + search\n\n pathname = pathname.replace(/[?#]/g, encodeURIComponent)\n search = search.replace('#', '%23')\n\n return `${protocol}${host}${pathname}${search}${hash}`\n}\n"]},"metadata":{},"sourceType":"script"}