+ -
+
- Prevented DoS attacks performed with forward proxy HTTP requests with malformed URLs.
- Tests
- Licenses
- SVR.JS status page
- More Information -
-
+
+ Tests
+ Licenses
+ SVR.JS status page
+ SVR.JS documentation
+
diff --git a/licenses/index.html b/licenses/index.html
index 2417b43..b89106e 100644
--- a/licenses/index.html
+++ b/licenses/index.html
@@ -1,357 +1,349 @@
-
-
-
- SVR.JS 3.4.42 Licenses
-SVR.JS 3.4.42
-
- MIT License
-
- Copyright (c) 2018-2024 SVR.JS
-
- Permission is hereby granted, free of charge, to any person obtaining a copy
- of this software and associated documentation files (the "Software"), to deal
- in the Software without restriction, including without limitation the rights
- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- copies of the Software, and to permit persons to whom the Software is
- furnished to do so, subject to the following conditions:
-
- The above copyright notice and this permission notice shall be included in all
- copies or substantial portions of the Software.
-
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- SOFTWARE.
-
- -
- Copyright (c) 2018-2024 SVR.JS
-
- Permission is hereby granted, free of charge, to any person obtaining a copy
- of this software and associated documentation files (the "Software"), to deal
- in the Software without restriction, including without limitation the rights
- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- copies of the Software, and to permit persons to whom the Software is
- furnished to do so, subject to the following conditions:
-
- The above copyright notice and this permission notice shall be included in all
- copies or substantial portions of the Software.
-
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- SOFTWARE.
-
Packages used by SVR.JS 3.4.42 and utilities
- - - -
-
- License: MIT
-
- asn1.js-rfc5280 (by Felix Hanley)
-
-
- RFC5280 extension structures for asn1.js
-
-
-
-
-
-
- License: MIT
-
- async (by Caolan McMahon)
-
-
- Higher-order functions and common patterns for asynchronous code
-
-
-
- License: ISC
-
- dezalgo (by Isaac Z. Schlueter)
-
-
- Contain async insanity so that the dark pony lord doesn't eat souls
-
-
-
- License: MIT
-
- formidable
-
-
- A node.js module for parsing form data, especially file uploads.
- Required by SVR.JS. Patched to work with Node.JS 8.x -
- - Required by SVR.JS. Patched to work with Node.JS 8.x -
-
-
- License: ISC
-
- fs-minipass (by Isaac Z. Schlueter)
-
-
- fs read and write streams based on minipass
- Patched to work with Bun -
- - Patched to work with Bun -
-
- License: MIT
-
- get-intrinsic (by Jordan Harband)
-
-
- Get and robustly cache all JS language-level intrinsics at first require time
-
-
-
- License: ISC
-
- graceful-fs
-
-
- A drop-in replacement for fs, making various improvements.
- Required by SVR.JS. -
- - Required by SVR.JS. -
-
- License: MIT
-
- has (by Thiago de Arruda)
-
-
- Object.prototype.hasOwnProperty.call shortcut
-
-
-
- License: MIT
-
- has-symbols (by Jordan Harband)
-
-
- Determine if the JS environment has Symbol support. Supports spec, or shams.
-
-
-
- License: MIT
-
- hexoid (by Luke Edwards)
-
-
- A tiny (190B) and extremely fast utility to generate random IDs of fixed length
-
-
-
-
- License: ISC
-
- inherits
-
-
- Browser-friendly inheritance fully compatible with standard node.js inherits()
-
-
-
-
- License: MIT
-
- mime-types
-
-
- The ultimate javascript content-type utility.
- Required by SVR.JS. -
- - Required by SVR.JS. -
-
- License: ISC
-
- minipass (by Isaac Z. Schlueter)
-
-
- minimal implementation of a PassThrough stream
-
-
-
-
- License: MIT
-
- minizlib (by Isaac Z. Schlueter)
-
-
- A small fast zlib stream built on minipass and Node.js's zlib binding.
-
-
-
- License: MIT
-
- object-inspect (by James Halliday)
-
-
- string representations of objects in node and the browser
-
-
-
-
- License: MIT
-
- ocsp (by Fedor Indutny)
-
-
- OCSP Stapling implementation
- Required by SVR.JS. -
- - Required by SVR.JS. -
-
- License: MIT
-
- pretty-bytes (by Sindre Sorhus)
-
-
- Convert bytes to a human readable string: 1337 → 1.34 kB
- Required by SVR.JS. -
- - Required by SVR.JS. -
-
- License: BSD-3
-
- qs
-
-
- A querystring parser that supports nesting and arrays, with a depth limit
-
-
-
- License: MIT
-
- side-channel (by Jordan Harband)
-
-
- Store information about any JS value in a side channel. Uses WeakMap if available.
-
-
-
-
-
-
- License: MIT
-
- simple-lru-cache (by Gabriel Eisbruch)
-
-
- node-simple-lru-cache =====================
-
- -
-
-
+
+
+
+ SVR.JS 3.14.16 Licenses
+SVR.JS 3.14.16
+
+ MIT License
+
+ Copyright (c) 2018-2024 SVR.JS
+
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to deal
+ in the Software without restriction, including without limitation the rights
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+ The above copyright notice and this permission notice shall be included in all
+ copies or substantial portions of the Software.
+
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ SOFTWARE.
+
+ +
+ Copyright (c) 2018-2024 SVR.JS
+
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to deal
+ in the Software without restriction, including without limitation the rights
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+ The above copyright notice and this permission notice shall be included in all
+ copies or substantial portions of the Software.
+
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ SOFTWARE.
+
Packages used by SVR.JS 3.14.16
+
+
+
+
+
+
+
+ License: MIT
+
+ asn1.js-rfc5280 (by Felix Hanley)
+
+
+ RFC5280 extension structures for asn1.js
+
+
+
+
+
+
+ License: MIT
+
+ async (by Caolan McMahon)
+
+
+ Higher-order functions and common patterns for asynchronous code
+
+
+
+ License: ISC
+
+ dezalgo (by Isaac Z. Schlueter)
+
+
+ Contain async insanity so that the dark pony lord doesn't eat souls
+
+
+
+ License: MIT
+
+ formidable
+
+
+ A node.js module for parsing form data, especially file uploads.
+ Required by SVR.JS +
+ + Required by SVR.JS +
+
+
+ License: ISC
+
+ fs-minipass (by Isaac Z. Schlueter)
+
+
+ fs read and write streams based on minipass
+ Patched to work with Bun +
+ + Patched to work with Bun +
+
+ License: MIT
+
+ get-intrinsic (by Jordan Harband)
+
+
+ Get and robustly cache all JS language-level intrinsics at first require time
+
+
+
+ License: ISC
+
+ graceful-fs
+
+
+ A drop-in replacement for fs, making various improvements.
+ Required by SVR.JS. +
+ + Required by SVR.JS. +
+
+ License: MIT
+
+ has (by Thiago de Arruda)
+
+
+ Object.prototype.hasOwnProperty.call shortcut
+
+
+
+ License: MIT
+
+ has-symbols (by Jordan Harband)
+
+
+ Determine if the JS environment has Symbol support. Supports spec, or shams.
+
+
+
+ License: MIT
+
+ hexoid (by Luke Edwards)
+
+
+ A tiny (190B) and extremely fast utility to generate random IDs of fixed length
+
+
+
+
+ License: ISC
+
+ inherits
+
+
+ Browser-friendly inheritance fully compatible with standard node.js inherits()
+
+
+
+
+ License: MIT
+
+ mime-types
+
+
+ The ultimate javascript content-type utility.
+ Required by SVR.JS. +
+ + Required by SVR.JS. +
+
+ License: ISC
+
+ minipass (by Isaac Z. Schlueter)
+
+
+ minimal implementation of a PassThrough stream
+
+
+
+
+ License: MIT
+
+ minizlib (by Isaac Z. Schlueter)
+
+
+ A small fast zlib stream built on minipass and Node.js's zlib binding.
+
+
+
+ License: MIT
+
+ object-inspect (by James Halliday)
+
+
+ string representations of objects in node and the browser
+
+
+
+
+ License: MIT
+
+ ocsp (by Fedor Indutny)
+
+
+ OCSP Stapling implementation
+ Required by SVR.JS. +
+ + Required by SVR.JS. +
+
+ License: BSD-3
+
+ qs
+
+
+ A querystring parser that supports nesting and arrays, with a depth limit
+
+
+
+ License: MIT
+
+ side-channel (by Jordan Harband)
+
+
+ Store information about any JS value in a side channel. Uses WeakMap if available.
+
+
+
+
+
+
+ License: MIT
+
+ simple-lru-cache (by Gabriel Eisbruch)
+
+
+ node-simple-lru-cache =====================
+
+ +
+
+
diff --git a/loghighlight.js b/loghighlight.js
index a934a27..b4a97f3 100644
--- a/loghighlight.js
+++ b/loghighlight.js
@@ -34,17 +34,19 @@ function viewLog(log) {
if(log[log.length-1] == "") log.pop();
if(log[0] == "") log.shift();
for(var i=0;i-Default: `false` - -Include plus sign for positive numbers. If the difference is exactly zero a space character will be prepended instead for better alignment. - -##### bits - -Type: `boolean`
-Default: `false` - -Format the number as [bits](https://en.wikipedia.org/wiki/Bit) instead of [bytes](https://en.wikipedia.org/wiki/Byte). This can be useful when, for example, referring to [bit rate](https://en.wikipedia.org/wiki/Bit_rate). - -##### locale - -Type: `boolean` `string`
-Default: `false` *(No localization)* - -- If `true`: Localize the output using the system/browser locale. -- If `string`: Expects a [BCP 47 language tag](https://en.wikipedia.org/wiki/IETF_language_tag) (For example: `en`, `de`, …) - -**Note:** Localization should generally work in browsers. Node.js needs to be [built](https://github.com/nodejs/node/wiki/Intl) with `full-icu` or `system-icu`. Alternatively, the [`full-icu`](https://github.com/unicode-org/full-icu-npm) module can be used to provide support at runtime. - - -## Related - -- [pretty-bytes-cli](https://github.com/sindresorhus/pretty-bytes-cli) - CLI for this module - - -## License - -MIT © [Sindre Sorhus](https://sindresorhus.com) diff --git a/node_modules/svrmodpack/index.js b/node_modules/svrmodpack/index.js deleted file mode 100755 index d7cbb2a..0000000 --- a/node_modules/svrmodpack/index.js +++ /dev/null @@ -1,88 +0,0 @@ -var fs = require("fs"); -var zlib = require("zlib"); - - -const path = require('path'); - -function mkDirByPathSync(targetDir, { isRelativeToScript = false } = {}) { - const sep = path.sep; - const initDir = path.isAbsolute(targetDir) ? sep : ''; - const baseDir = isRelativeToScript ? __dirname : '.'; - - return targetDir.split(sep).reduce((parentDir, childDir) => { - const curDir = path.resolve(baseDir, parentDir, childDir); - try { - fs.mkdirSync(curDir); - } catch (err) { - if (err.code === 'EEXIST') { // curDir already exists! - return curDir; - } - - // To avoid `EISDIR` error on Mac and `EACCES`-->`ENOENT` and `EPERM` on Windows. - if (err.code === 'ENOENT') { // Throw the original parentDir error on curDir `ENOENT` failure. - throw new Error(`EACCES: permission denied, mkdir '${parentDir}'`); - } - - const caughtErr = ['EACCES', 'EPERM', 'EISDIR'].indexOf(err.code) > -1; - if (!caughtErr || caughtErr && curDir === path.resolve(targetDir)) { - throw err; // Throw if it's just the last created dir. - } - } - - return curDir; - }, initDir); -} - -function pack(ins, out, modinfof) { - if (typeof modinfof === 'undefined') { - modinfof = 'mod.info'; - } - var modinfo = JSON.parse(fs.readFileSync(modinfof)); - var file = "SVR\0"; - var modinfo2 = ""; - modinfo2 += modinfo.name; - modinfo2 += "\0"; - modinfo2 += modinfo.version; - modinfo2 += "\0"; - file += modinfo2 - for (var i = 0; i < ins.length; i++) { - var script = fs.readFileSync(ins[i]); - file += ins[i]; - file += "\0"; - file += script.toString(); - file += "\0"; - } - fs.writeFileSync(out, zlib.gzipSync(file)); -} - -function unpack(inputf, outf, modinfof) { - if (typeof outf === 'undefined') { - outf = ''; - } - if (typeof modinfof === 'undefined') { - modinfof = 'mod.info'; - } - try { - mkDirByPathSync(outf); - } catch (ex) {} - var script = ""; - var modinfo = {}; - var file = zlib.gunzipSync(fs.readFileSync(inputf)).toString(); - var tokens = file.split("\0"); - var files = []; - if (tokens[0] != "SVR") throw new Error("wrong signature"); - modinfo.name = tokens[1]; - modinfo.version = tokens[2]; - for (var i = 3; i < tokens.length - 1; i += 2) { - files.push({ - name: tokens[i], - content: tokens[i + 1] - }); - } - fs.writeFileSync((outf + "/" + modinfof).replace(/\/\//g, "/"), JSON.stringify(modinfo, null, 2)); - for (var i = 0; i < files.length; i++) { - fs.writeFileSync((outf + "/" + files[i].name).replace(/\/\//g, "/"), files[i].content); - } -} - -module.exports = {pack: pack, unpack: unpack} \ No newline at end of file diff --git a/node_modules/svrmodpack/package.json b/node_modules/svrmodpack/package.json deleted file mode 100755 index aabf582..0000000 --- a/node_modules/svrmodpack/package.json +++ /dev/null @@ -1,48 +0,0 @@ -{ - "_from": "svrmodpack", - "_id": "svrmodpack@1.0.0", - "_inBundle": false, - "_integrity": "sha512-17SjkfDtZL3KOGjzLTT/nEZzCuvD4rz07y4UFVXfo/Xo0qTMwgICnDSIEOonaAs1GdzZe0hiJxkPYvdTKQifwg==", - "_location": "/svrmodpack", - "_phantomChildren": {}, - "_requested": { - "type": "tag", - "registry": true, - "raw": "svrmodpack", - "name": "svrmodpack", - "escapedName": "svrmodpack", - "rawSpec": "", - "saveSpec": null, - "fetchSpec": "latest" - }, - "_requiredBy": [ - "#USER", - "/" - ], - "_resolved": "https://registry.npmjs.org/svrmodpack/-/svrmodpack-1.0.0.tgz", - "_shasum": "412def1c6ff93a7a15849519411a30b3281ee822", - "_spec": "svrmodpack", - "_where": "/media/serveradmin/Server/developement", - "author": { - "name": "Dorian Niemiec", - "email": "niemiecdorian2008@gmail.com" - }, - "bugs": { - "url": "https://github.com/dorian-tech/svrmodpack/issues" - }, - "bundleDependencies": false, - "deprecated": false, - "description": "DorianTech SVR.JS Mods packer/unpacker library ", - "homepage": "https://github.com/dorian-tech/svrmodpack#readme", - "license": "GPL-3.0-or-later", - "main": "index.js", - "name": "svrmodpack", - "repository": { - "type": "git", - "url": "git+https://github.com/dorian-tech/svrmodpack.git" - }, - "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" - }, - "version": "1.0.0" -} diff --git a/node_modules/tar/CHANGELOG.md b/node_modules/tar/CHANGELOG.md deleted file mode 100644 index 9373401..0000000 --- a/node_modules/tar/CHANGELOG.md +++ /dev/null @@ -1,68 +0,0 @@ -# Changelog - -## 6.0 - -- Drop support for node 6 and 8 -- fix symlinks and hardlinks on windows being packed with `\`-style path - targets - -## 5.0 - -- Address unpack race conditions using path reservations -- Change large-numbers errors from TypeError to Error -- Add `TAR_*` error codes -- Raise `TAR_BAD_ARCHIVE` warning/error when there are no valid entries - found in an archive -- do not treat ignored entries as an invalid archive -- drop support for node v4 -- unpack: conditionally use a file mapping to write files on Windows -- Set more portable 'mode' value in portable mode -- Set `portable` gzip option in portable mode - -## 4.4 - -- Add 'mtime' option to tar creation to force mtime -- unpack: only reuse file fs entries if nlink = 1 -- unpack: rename before unlinking files on Windows -- Fix encoding/decoding of base-256 numbers -- Use `stat` instead of `lstat` when checking CWD -- Always provide a callback to fs.close() - -## 4.3 - -- Add 'transform' unpack option - -## 4.2 - -- Fail when zlib fails - -## 4.1 - -- Add noMtime flag for tar creation - -## 4.0 - -- unpack: raise error if cwd is missing or not a dir -- pack: don't drop dots from dotfiles when prefixing - -## 3.1 - -- Support `@file.tar` as an entry argument to copy entries from one tar - file to another. -- Add `noPax` option -- `noResume` option for tar.t -- win32: convert `>| super.write(chunk)) this.zip.on('end', _ => super.end()) this.zip.on('drain', _ => this[ONDRAIN]()) diff --git a/node_modules/tar/lib/parse.js b/node_modules/tar/lib/parse.js index 4b85915..94e5304 100644 --- a/node_modules/tar/lib/parse.js +++ b/node_modules/tar/lib/parse.js @@ -97,6 +97,16 @@ module.exports = warner(class Parser extends EE { this.strict = !!opt.strict this.maxMetaEntrySize = opt.maxMetaEntrySize || maxMetaEntrySize this.filter = typeof opt.filter === 'function' ? opt.filter : noop + // Unlike gzip, brotli doesn't have any magic bytes to identify it + // Users need to explicitly tell us they're extracting a brotli file + // Or we infer from the file extension + const isTBR = (opt.file && ( + opt.file.endsWith('.tar.br') || opt.file.endsWith('.tbr'))) + // if it's a tbr file it MIGHT be brotli, but we don't know until + // we look at it and verify it's not a valid tar file. + this.brotli = !opt.gzip && opt.brotli !== undefined ? opt.brotli + : isTBR ? undefined + : false // have to set this so that streams are ok piping into it this.writable = true @@ -347,7 +357,9 @@ module.exports = warner(class Parser extends EE { } // first write, might be gzipped - if (this[UNZIP] === null && chunk) { + const needSniff = this[UNZIP] === null || + this.brotli === undefined && this[UNZIP] === false + if (needSniff && chunk) { if (this[BUFFER]) { chunk = Buffer.concat([this[BUFFER], chunk]) this[BUFFER] = null @@ -356,15 +368,45 @@ module.exports = warner(class Parser extends EE { this[BUFFER] = chunk return true } + + // look for gzip header for (let i = 0; this[UNZIP] === null && i < gzipHeader.length; i++) { if (chunk[i] !== gzipHeader[i]) { this[UNZIP] = false } } - if (this[UNZIP] === null) { + + const maybeBrotli = this.brotli === undefined + if (this[UNZIP] === false && maybeBrotli) { + // read the first header to see if it's a valid tar file. If so, + // we can safely assume that it's not actually brotli, despite the + // .tbr or .tar.br file extension. + // if we ended before getting a full chunk, yes, def brotli + if (chunk.length < 512) { + if (this[ENDED]) { + this.brotli = true + } else { + this[BUFFER] = chunk + return true + } + } else { + // if it's tar, it's pretty reliably not brotli, chances of + // that happening are astronomical. + try { + new Header(chunk.slice(0, 512)) + this.brotli = false + } catch (_) { + this.brotli = true + } + } + } + + if (this[UNZIP] === null || (this[UNZIP] === false && this.brotli)) { const ended = this[ENDED] this[ENDED] = false - this[UNZIP] = new zlib.Unzip() + this[UNZIP] = this[UNZIP] === null + ? new zlib.Unzip() + : new zlib.BrotliDecompress() this[UNZIP].on('data', chunk => this[CONSUMECHUNK](chunk)) this[UNZIP].on('error', er => this.abort(er)) this[UNZIP].on('end', _ => { @@ -502,6 +544,7 @@ module.exports = warner(class Parser extends EE { this[UNZIP].end(chunk) } else { this[ENDED] = true + if (this.brotli === undefined) chunk = chunk || Buffer.alloc(0) this.write(chunk) } } diff --git a/node_modules/tar/lib/replace.js b/node_modules/tar/lib/replace.js index c6e619b..8db6800 100644 --- a/node_modules/tar/lib/replace.js +++ b/node_modules/tar/lib/replace.js @@ -23,7 +23,7 @@ module.exports = (opt_, files, cb) => { throw new TypeError('file is required') } - if (opt.gzip) { + if (opt.gzip || opt.brotli || opt.file.endsWith('.br') || opt.file.endsWith('.tbr')) { throw new TypeError('cannot append to compressed archives') } diff --git a/node_modules/tar/lib/update.js b/node_modules/tar/lib/update.js index ded977d..4d32854 100644 --- a/node_modules/tar/lib/update.js +++ b/node_modules/tar/lib/update.js @@ -13,7 +13,7 @@ module.exports = (opt_, files, cb) => { throw new TypeError('file is required') } - if (opt.gzip) { + if (opt.gzip || opt.brotli || opt.file.endsWith('.br') || opt.file.endsWith('.tbr')) { throw new TypeError('cannot append to compressed archives') } diff --git a/node_modules/tar/package.json b/node_modules/tar/package.json index d8dc955..46d91ee 100644 --- a/node_modules/tar/package.json +++ b/node_modules/tar/package.json @@ -1,35 +1,17 @@ { - "_from": "tar", - "_id": "tar@6.1.15", - "_inBundle": false, - "_integrity": "sha512-/zKt9UyngnxIT/EAGYuxaMYgOIJiP81ab9ZfkILq4oNLPFX50qyYmu7jRj9qeXoxmJHjGlbH0+cm2uy1WCs10A==", - "_location": "/tar", - "_phantomChildren": {}, - "_requested": { - "type": "tag", - "registry": true, - "raw": "tar", - "name": "tar", - "escapedName": "tar", - "rawSpec": "", - "saveSpec": null, - "fetchSpec": "latest" + "author": "GitHub Inc.", + "name": "tar", + "description": "tar for node", + "version": "6.2.0", + "repository": { + "type": "git", + "url": "https://github.com/isaacs/node-tar.git" }, - "_requiredBy": [ - "#USER", - "/" - ], - "_resolved": "https://registry.npmjs.org/tar/-/tar-6.1.15.tgz", - "_shasum": "c9738b0b98845a3b344d334b8fa3041aaba53a69", - "_spec": "tar", - "_where": "/home/ubuntu/fix", - "author": { - "name": "GitHub Inc." + "scripts": { + "genparse": "node scripts/generate-parse-fixtures.js", + "snap": "tap", + "test": "tap" }, - "bugs": { - "url": "https://github.com/isaacs/node-tar/issues" - }, - "bundleDependencies": false, "dependencies": { "chownr": "^2.0.0", "fs-minipass": "^2.0.0", @@ -38,8 +20,6 @@ "mkdirp": "^1.0.3", "yallist": "^4.0.0" }, - "deprecated": false, - "description": "tar for node", "devDependencies": { "@npmcli/eslint-config": "^4.0.0", "@npmcli/template-oss": "4.11.0", @@ -51,6 +31,7 @@ "rimraf": "^3.0.2", "tap": "^16.0.1" }, + "license": "ISC", "engines": { "node": ">=10" }, @@ -59,23 +40,6 @@ "lib/", "index.js" ], - "homepage": "https://github.com/isaacs/node-tar#readme", - "license": "ISC", - "name": "tar", - "repository": { - "type": "git", - "url": "git+https://github.com/isaacs/node-tar.git" - }, - "scripts": { - "genparse": "node scripts/generate-parse-fixtures.js", - "lint": "eslint \"**/*.js\"", - "lintfix": "npm run lint -- --fix", - "postlint": "template-oss-check", - "posttest": "npm run lint", - "snap": "tap", - "template-oss-apply": "template-oss-apply --force", - "test": "tap" - }, "tap": { "coverage-map": "map.js", "timeout": 0, @@ -102,6 +66,5 @@ "16.x", "18.x" ] - }, - "version": "6.1.15" + } } diff --git a/serverSideScript.js b/serverSideScript.js index a362f05..730e4b1 100644 --- a/serverSideScript.js +++ b/serverSideScript.js @@ -21,6 +21,7 @@ // origHref - Original request URL without query (before URL rewriting) // redirect - Method to redirect. // parsePostData - Method to parse POST data. +// authUser - Authenticated HTTP user. //Along with elements added by this implementation: // disableEndElseCallbackExecute - Determines execution of elseCallback on end // filterHeaders - Removes invalid HTTP/1.0 headers diff --git a/svr.js b/svr.js index 5a6b9c3..93311cf 100644 --- a/svr.js +++ b/svr.js @@ -12,24 +12,31 @@ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ +// Check if SVR.JS is running on Node.JS-compatible runtime. If not, just error it out. if (typeof require === "undefined") { if (typeof ActiveXObject !== "undefined" && typeof WScript !== "undefined") { + // If it runs on Windows Script Host, display an error message. var shell = new ActiveXObject("WScript.Shell"); shell.Popup("SVR.JS doesn't work on Windows Script Host. SVR.JS requires use of Node.JS (or compatible JS runtime).", undefined, "Can't start SVR.JS", 16); WScript.quit(); } else { if (typeof alert !== "undefined" && typeof document !== "undefined") { - alert("SVR.JS doesn't work on web browser. SVR.JS requires use of Node.JS (or compatible JS runtime)."); + // If it runs on web browser, display an alert. + alert("SVR.JS doesn't work on a web browser. SVR.JS requires use of Node.JS (or compatible JS runtime)."); } + // If it's not, throw an error. if (typeof document !== "undefined") { - throw new Error("SVR.JS doesn't work on web browser. SVR.JS requires use of Node.JS (or compatible JS runtime)."); + throw new Error("SVR.JS doesn't work on a web browser. SVR.JS requires use of Node.JS (or compatible JS runtime)."); } else { throw new Error("SVR.JS doesn't work on Deno/QuickJS. SVR.JS requires use of Node.JS (or compatible JS runtime)."); } } } + var secure = false; var disableMods = false; + +// ASCII art SVR.JS logo ;) var logo = ["", "", "", " \x1b[38;5;002m&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " &&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&\x1b[38;5;243m((((((\x1b[38;5;241m###########\x1b[38;5;243m(((((((((((((((((((((((\x1b[38;5;011m***\x1b[38;5;243m(\x1b[38;5;011m***\x1b[38;5;243m(\x1b[38;5;011m***\x1b[38;5;243m((\x1b[38;5;002m&&", " \x1b[38;5;002m&&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&\x1b[38;5;243m((((((\x1b[38;5;241m###########\x1b[38;5;243m(((((((((((((((((((((((\x1b[38;5;011m***\x1b[38;5;243m(\x1b[38;5;015m \x1b[38;5;243m(\x1b[38;5;011m***\x1b[38;5;243m((\x1b[38;5;002m&&", " \x1b[38;5;002m&&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&\x1b[38;5;243m((((((\x1b[38;5;241m###########\x1b[38;5;243m(((((((((((((((((((((((\x1b[38;5;015m \x1b[38;5;243m(\x1b[38;5;015m \x1b[38;5;243m(\x1b[38;5;015m \x1b[38;5;243m((\x1b[38;5;002m&&", " \x1b[38;5;002m&&&\x1b[38;5;243m(((((((((((((((((((((((((((((((((((((((((((((((((((\x1b[38;5;002m&&&", " \x1b[38;5;002m&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " \x1b[38;5;002m&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " \x1b[38;5;002m&&&&&&&&\x1b[38;5;010m#########################################\x1b[38;5;002m&&&&&&&&", " \x1b[38;5;002m&&&&&\x1b[38;5;010m###############################################\x1b[38;5;002m&&&&&", " \x1b[38;5;002m&&&\x1b[38;5;010m###################################################\x1b[38;5;002m&&&", " \x1b[38;5;002m&&\x1b[38;5;010m####\x1b[38;5;016m@@@@@@\x1b[38;5;010m#\x1b[38;5;016m@@@\x1b[38;5;010m###\x1b[38;5;016m@@@\x1b[38;5;010m#\x1b[38;5;016m@@@@@@@\x1b[38;5;010m###########\x1b[38;5;016m@@\x1b[38;5;010m##\x1b[38;5;016m@@@@@@\x1b[38;5;010m####\x1b[38;5;002m&&", " \x1b[38;5;002m&&\x1b[38;5;010m###\x1b[38;5;016m@@\x1b[38;5;010m#######\x1b[38;5;016m@@\x1b[38;5;010m###\x1b[38;5;016m@@\x1b[38;5;010m##\x1b[38;5;016m@@\x1b[38;5;010m####\x1b[38;5;016m@@\x1b[38;5;010m##########\x1b[38;5;016m@@\x1b[38;5;010m#\x1b[38;5;016m@@\x1b[38;5;010m#########\x1b[38;5;002m&&", " \x1b[38;5;002m&&\x1b[38;5;010m######\x1b[38;5;040m#\x1b[38;5;016m@@@@\x1b[38;5;010m##\x1b[38;5;016m@@\x1b[38;5;010m#\x1b[38;5;016m@@\x1b[38;5;010m###\x1b[38;5;016m@@@@@@@\x1b[38;5;010m#######\x1b[38;5;016m@@\x1b[38;5;010m##\x1b[38;5;016m@@\x1b[38;5;010m####\x1b[38;5;040m#\x1b[38;5;016m@@@@\x1b[38;5;010m###\x1b[38;5;002m&&", " \x1b[38;5;002m&&\x1b[38;5;010m###\x1b[38;5;016m@@\x1b[38;5;034m%\x1b[38;5;010m###\x1b[38;5;016m@@\x1b[38;5;010m###\x1b[38;5;016m@@@\x1b[38;5;010m####\x1b[38;5;016m@@\x1b[38;5;010m####\x1b[38;5;016m@@\x1b[38;5;010m##\x1b[38;5;016m@@\x1b[38;5;010m###\x1b[38;5;016m@@@@\x1b[38;5;010m##\x1b[38;5;016m@@\x1b[38;5;034m%\x1b[38;5;010m###\x1b[38;5;016m@@\x1b[38;5;010m###\x1b[38;5;002m&&", " \x1b[38;5;002m&&\x1b[38;5;010m#####################################################\x1b[38;5;002m&&", " \x1b[38;5;002m&&&\x1b[38;5;010m###################################################\x1b[38;5;002m&&&", " \x1b[38;5;002m&&&&&\x1b[38;5;010m###############################################\x1b[38;5;002m&&&&&", " \x1b[38;5;002m&&&&&&&&\x1b[38;5;010m#########################################\x1b[38;5;002m&&&&&&&&", " \x1b[38;5;002m&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&", " \x1b[38;5;246m///////", " ///////", " \x1b[38;5;208m((((/))))", " \x1b[38;5;208m(((((/)))))", " \x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m/\x1b[38;5;208m(((((/)))))\x1b[38;5;246m//\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m///\x1b[38;5;247m*\x1b[38;5;246m/", " //\x1b[38;5;247m*\x1b[38;5;246m///////\x1b[38;5;247m*\x1b[38;5;246m///////\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m/\x1b[38;5;208m(((((/)))))\x1b[38;5;246m//\x1b[38;5;247m*\x1b[38;5;246m///////\x1b[38;5;247m*\x1b[38;5;246m///////\x1b[38;5;247m*\x1b[38;5;246m//", " *\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;208m(((((/)))))\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*\x1b[38;5;246m/\x1b[38;5;247m*", " \x1b[38;5;208m((((/))))", "", "", "", "\x1b[0m"]; var fs = require("fs"); @@ -62,10 +69,10 @@ function deleteFolderRecursive(path) { } var os = require("os"); -var version = "3.4.42"; +var version = "3.14.16"; var singlethreaded = false; -if (process.versions) process.versions.svrjs = version; //Inject SVR.JS into process.versions +if (process.versions) process.versions.svrjs = version; // Inject SVR.JS into process.versions var args = process.argv; for (var i = (process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("bun") > -1 ? 2 : 1); i < args.length; i++) { @@ -73,8 +80,8 @@ for (var i = (process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("b console.log("SVR.JS usage:"); console.log("node svr.js [-h] [--help] [-?] [/h] [/?] [--secure] [--reset] [--clean] [--disable-mods] [--single-threaded] [-v] [--version]"); console.log("-h -? /h /? --help -- Displays help"); - console.log("--clean -- Cleans files, that SVR.JS created"); - console.log("--reset -- Resets SVR.JS to factory settings (WARNING: DANGEROUS)"); + console.log("--clean -- Cleans up files created by SVR.JS"); + console.log("--reset -- Resets SVR.JS to default settings (WARNING: DANGEROUS)"); console.log("--secure -- Runs HTTPS server"); console.log("--disable-mods -- Disables mods (safe mode)"); console.log("--single-threaded -- Run single-threaded"); @@ -105,8 +112,8 @@ for (var i = (process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("b console.log("SVR.JS usage:"); console.log("node svr.js [-h] [--help] [-?] [/h] [/?] [--secure] [--reset] [--clean] [--disable-mods] [--single-threaded] [-v] [--version]"); console.log("-h -? /h /? --help -- Displays help"); - console.log("--clean -- Cleans files, that SVR.JS created"); - console.log("--reset -- Resets SVR.JS to factory settings (WARNING: DANGEROUS)"); + console.log("--clean -- Cleans up files created by SVR.JS"); + console.log("--reset -- Resets SVR.JS to default settings (WARNING: DANGEROUS)"); console.log("--secure -- Runs HTTPS server"); console.log("--disable-mods -- Disables mods (safe mode)"); console.log("--single-threaded -- Run single-threaded"); @@ -117,13 +124,12 @@ for (var i = (process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("b var readline = require("readline"); var net = require("net"); -var child_process = require("child_process"); var cluster = {}; if (!singlethreaded) { try { // Import cluster module var cluster = require("cluster"); - } catch (ex) { + } catch (err) { // Clustering is not supported! } @@ -175,11 +181,11 @@ if (!singlethreaded) { }); }; - process.removeFakeIPC = function() { + process.removeFakeIPC = function () { // Close IPC server - process.send = function() {}; + process.send = function () {}; fakeIPCServer.close(); - } + }; } } @@ -205,20 +211,20 @@ if (!singlethreaded) { function checkSendImplementation(worker) { var sendImplemented = true; - + if (!(process.versions && process.versions.bun && process.versions.bun[0] != "0")) { if (!worker.send) { sendImplemented = false; } - oldLog = console.log; - console.log = function(a,b,c,d,e,f) { - if(a == "ChildProcess.prototype.send() - Sorry! Not implemented yet") { + var oldLog = console.log; + console.log = function (a, b, c, d, e, f) { + if (a == "ChildProcess.prototype.send() - Sorry! Not implemented yet") { throw new Error("NOT IMPLEMENTED"); } else { - oldLog(a,b,c,d,e,f); + oldLog(a, b, c, d, e, f); } - } + }; try { worker.send(undefined); @@ -226,6 +232,7 @@ if (!singlethreaded) { if (err.message === "NOT IMPLEMENTED") { sendImplemented = false; } + console.log(err); } console.log = oldLog; @@ -281,7 +288,7 @@ if (!singlethreaded) { cluster._workersCounter++; return newWorker; }; - } + }; if (process.isBun && (cluster.isMaster === undefined || (cluster.isMaster && process.env.NODE_UNIQUE_ID))) { cluster.bunShim(); @@ -291,17 +298,34 @@ if (!singlethreaded) { if (cluster.isPrimary === undefined && cluster.isMaster !== undefined) cluster.isPrimary = cluster.isMaster; } +// ETag-related +var ETagDB = {}; + +function generateETag(filePath, stat) { + if (!ETagDB[filePath + "-" + stat.size + "-" + stat.mtime]) ETagDB[filePath + "-" + stat.size + "-" + stat.mtime] = sha256(filePath + "-" + stat.size + "-" + stat.mtime); + return ETagDB[filePath + "-" + stat.size + "-" + stat.mtime]; +} + +// Brute force protection-related var bruteForceDb = {}; +// PBKDF2/scrypt cache +var pbkdf2Cache = []; +var scryptCache = []; +var passwordHashCacheIntervalId = -1; + +// SVR.JS worker spawn-related var SVRJSInitialized = false; var exiting = false; +var reallyExiting = false; var crashed = false; var threadLimitWarned = false; +// SVR.JS worker forking function function SVRJSFork() { - //Log + // Log if (SVRJSInitialized) serverconsole.locmessage("Starting next thread, because previous one hung up/crashed..."); - //Fork new worker + // Fork new worker var newWorker = {}; try { if (!threadLimitWarned && cluster.__shimmed__ && process.isBun && process.versions.bun && process.versions.bun[0] != "0") { @@ -314,7 +338,7 @@ function SVRJSFork() { if (SVRJSInitialized) serverconsole.locwarnmessage("SVR.JS limited the number of workers to one, because of startup problems in Bun 1.0 and newer with shimmed (not native) clustering module. Reliability may suffer."); } } catch (err) { - if(err.name == "NotImplementedError") { + if (err.name == "NotImplementedError") { // If cluster.fork throws a NotImplementedError, shim cluster module cluster.bunShim(); if (!threadLimitWarned && cluster.__shimmed__ && process.isBun && process.versions.bun && process.versions.bun[0] != "0") { @@ -330,61 +354,63 @@ function SVRJSFork() { throw err; } } - newWorker.on("error", function (err) { - serverconsole.locwarnmessage("There was a problem when handling SVR.JS worker! (from master process side) Reason: " + err.message); - }); - newWorker.on("exit", function () { - if (!exiting && Object.keys(cluster.workers).length == 0) { - crashed = true; - SVRJSFork(); - } - }); - newWorker.on("message", bruteForceListenerWrapper(newWorker)); - newWorker.on("message", listenConnListener); + + // Add event listeners + if (newWorker.on) { + newWorker.on("error", function (err) { + if (!reallyExiting) serverconsole.locwarnmessage("There was a problem when handling SVR.JS worker! (from master process side) Reason: " + err.message); + }); + newWorker.on("exit", function () { + if (!exiting && Object.keys(cluster.workers).length == 0) { + crashed = true; + SVRJSFork(); + } + }); + newWorker.on("message", bruteForceListenerWrapper(newWorker)); + newWorker.on("message", listenConnListener); + } } + var http = require("http"); http.STATUS_CODES[497] = "HTTP Request Sent to HTTPS Port"; http.STATUS_CODES[598] = "Network Read Timeout Error"; http.STATUS_CODES[599] = "Network Connect Timeout Error"; -var dns = require("dns"); var url = require("url"); -if (url.URL && typeof URL == "undefined") URL = url.URL; +var dns = require("dns"); try { var gracefulFs = require("graceful-fs"); - if (!process.isBun) gracefulFs.gracefulify(fs); //Bun + graceful-fs + SVR.JS + requests about static content = 500 Internal Server Error! -} catch (ex) { - //Don't use graceful-fs + if (!process.isBun) gracefulFs.gracefulify(fs); // Bun + graceful-fs + SVR.JS + requests about static content = 500 Internal Server Error! +} catch (err) { + // Don't use graceful-fs } var path = require("path"); var hexstrbase64 = undefined; try { hexstrbase64 = require("./hexstrbase64/index.js"); -} catch (ex) { - //Don't use hexstrbase64 +} catch (err) { + // Don't use hexstrbase64 } -var svrmodpack = undefined; +var inspector = undefined; try { - svrmodpack = require("svrmodpack"); -} catch (ex) { - svrmodpack = { - _errored: ex - }; + inspector = require("inspector"); +} catch (err) { + // Don't use inspector } var zlib = require("zlib"); var tar = undefined; try { tar = require("tar"); -} catch (ex) { +} catch (err) { tar = { - _errored: ex + _errored: err }; } var formidable = undefined; try { formidable = require("formidable"); -} catch (ex) { +} catch (err) { formidable = { - _errored: ex + _errored: err }; } var ocsp = undefined; @@ -392,17 +418,9 @@ var ocspCache = undefined; try { ocsp = require("ocsp"); ocspCache = new ocsp.Cache(); -} catch (ex) { +} catch (err) { ocsp = { - _errored: ex - }; -} -var prettyBytes = undefined; -try { - prettyBytes = require("pretty-bytes"); -} catch (ex) { - prettyBytes = { - _errored: ex + _errored: err }; } var http2 = {}; @@ -411,23 +429,23 @@ try { if (process.isBun) { try { http2.Http2ServerRequest(); - } catch (ex) { - if (ex.name == "NotImplementedError" || ex.code == "ERR_NOT_IMPLEMENTED") throw ex; + } catch (err) { + if (err.name == "NotImplementedError" || err.code == "ERR_NOT_IMPLEMENTED") throw err; } } -} catch (ex) { +} catch (err) { http2.__disabled__ = null; http2.createServer = function () { - throw new Error("HTTP/2 support not present"); + throw new Error("HTTP/2 support is not present"); }; http2.createSecureServer = function () { - throw new Error("HTTP/2 support not present"); + throw new Error("HTTP/2 support is not present"); }; http2.connect = function () { - throw new Error("HTTP/2 support not present"); + throw new Error("HTTP/2 support is not present"); }; http2.get = function () { - throw new Error("HTTP/2 support not present"); + throw new Error("HTTP/2 support is not present"); }; } var crypto = {}; @@ -435,25 +453,29 @@ var https = {}; try { crypto = require("crypto"); https = require("https"); -} catch (ex) { - crypto = {}; - https = {}; - crypto.__disabled__ = null; - https.createServer = function () { - throw new Error("Crypto support not present"); +} catch (err) { + crypto = { + __disabled__: null + }; + https = { + createServer: function () { + throw new Error("Crypto support is not present"); + }, + connect: function () { + throw new Error("Crypto support is not present"); + }, + get: function () { + throw new Error("Crypto support is not present"); + } }; http2.createSecureServer = function () { - throw new Error("Crypto support not present"); - }; - https.connect = function () { - throw new Error("Crypto support not present"); - }; - https.get = function () { - throw new Error("Crypto support not present"); + throw new Error("Crypto support is not present"); }; } var mime = require("mime-types"); var pubip = ""; +var listenAddress = undefined; +var sListenAddress = undefined; var pubport = 80; var port = 80; var domain = ""; @@ -468,31 +490,16 @@ if (!fs.existsSync(__dirname + "/temp")) fs.mkdirSync(__dirname + "/temp"); var modFiles = fs.readdirSync(__dirname + "/mods").sort(); var modInfos = []; -function sizify(x) { - try { - if (prettyBytes._errored) throw prettyBytes._errored; - return prettyBytes(parseInt(x), { - minimumFractionDigits: 0, - maximumFractionDigits: 2 - }).replace(/ /g, "").replace(/B/ig, "").replace(/k/g, "K"); - } catch (ex) { - if (x < 1000) return x.toString(); - if (x < 10000) return (Math.round(x / 10) / 100).toString() + "K"; - if (x < 100000) return (Math.round(x / 100) / 10).toString() + "K"; - if (x < 1000000) return (Math.round(x / 1000)).toString() + "K"; - if (x < 10000000) return (Math.round(x / 10000) / 100).toString() + "M"; - if (x < 100000000) return (Math.round(x / 100000) / 10).toString() + "M"; - if (x < 1000000000) return (Math.round(x / 1000000)).toString() + "M"; - if (x < 10000000000) return (Math.round(x / 10000000) / 100).toString() + "G"; - if (x < 100000000000) return (Math.round(x / 100000000) / 10).toString() + "G"; - if (x < 1000000000000) return (Math.round(x / 1000000000)).toString() + "G"; - if (x < 10000000000000) return (Math.round(x / 10000000000) / 100).toString() + "T"; - if (x < 100000000000000) return (Math.round(x / 100000000000) / 10).toString() + "T"; - if (x < 1000000000000000) return (Math.round(x / 1000000000000)).toString() + "T"; - if (x < 10000000000000000) return (Math.round(x / 10000000000000) / 100).toString() + "P"; - if (x < 100000000000000000) return (Math.round(x / 100000000000000) / 10).toString() + "P"; - return (Math.round(x / 1000000000000000)).toString() + "P"; - } +function sizify(bytes, addI) { + if (bytes == 0) return "0"; + if (bytes < 0) bytes = -bytes; + var prefixes = ["", "K", "M", "G", "T", "P", "E", "Z", "Y", "R", "Q"]; + var prefixIndex = Math.floor(Math.log2 ? Math.log2(bytes) / 10 : (Math.log(bytes) / (Math.log(2) * 10))); + if (prefixIndex >= prefixes.length - 1) prefixIndex = prefixes.length - 1; + var prefixIndexTranslated = Math.pow(2, 10 * prefixIndex); + var decimalPoints = 2 - Math.floor(Math.log10 ? Math.log10(bytes / prefixIndexTranslated) : (Math.log(bytes / prefixIndexTranslated) / Math.log(10))); + if (decimalPoints < 0) decimalPoints = 0; + return (Math.ceil((bytes / prefixIndexTranslated) * Math.pow(10, decimalPoints)) / Math.pow(10, decimalPoints)) + prefixes[prefixIndex] + ((prefixIndex > 0 && addI) ? "i" : ""); } function getOS() { @@ -524,21 +531,26 @@ function getOS() { } } -function createRegex(regex) { - var regexObj = regex.split("/"); - if (regexObj.length == 0) throw new Error("Invalid regex!"); - var modifiers = regexObj.pop(); - regexObj.shift(); - var searchString = regexObj.join("/"); +function createRegex(regex, isPath) { + var regexStrMatch = regex.match(/^\/((?:\\.|[^\/\\])*)\/([a-zA-Z0-9]*)$/); + if (!regexStrMatch) throw new Error("Invalid regular expression: " + regex); + var searchString = regexStrMatch[1]; + var modifiers = regexStrMatch[2]; + if (isPath && !modifiers.match(/i/i) && os.platform() == "win32") modifiers += "i"; return new RegExp(searchString, modifiers); } -//IP Block list object -function ipBlockList(rawBlockList) { +// Function to check if IPs are equal +function ipMatch(IP1, IP2) { + if (!IP1) return true; + if (!IP2) return false; + + // Function to normalize IPv4 address (remove leading zeros) function normalizeIPv4Address(address) { return address.replace(/(^|\.)(?:0(?!\.|$))+/g, ""); } + // Function to expand IPv6 address to full format function expandIPv6Address(address) { var fullAddress = ""; var expandedAddress = ""; @@ -550,9 +562,9 @@ function ipBlockList(rawBlockList) { var validateIpv4 = /((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})/; if (validateIpv4.test(address)) { - groups = address.match(extractIpv4); - for (var i = 1; i < groups.length; i++) { - ipv4 += ("00" + (parseInt(groups[i], 10).toString(16))).slice(-2) + (i == 2 ? ":" : ""); + var oldGroups = address.match(extractIpv4); + for (var i = 1; i < oldGroups.length; i++) { + ipv4 += ("00" + (parseInt(oldGroups[i], 10).toString(16))).slice(-2) + (i == 2 ? ":" : ""); } address = address.replace(extractIpv4, ipv4); } @@ -562,30 +574,146 @@ function ipBlockList(rawBlockList) { } else { var sides = address.split("::"); var groupsPresent = 0; - for (var i = 0; i < sides.length; i++) { - groupsPresent += sides[i].split(":").length; - } + sides.forEach(function (side) { + groupsPresent += side.split(":").length; + }); fullAddress += sides[0] + ":"; - for (var i = 0; i < validGroupCount - groupsPresent; i++) { - fullAddress += "0000:"; + if (validGroupCount - groupsPresent > 1) { + fullAddress += "0000:".repeat(validGroupCount - groupsPresent); } fullAddress += sides[1]; } var groups = fullAddress.split(":"); for (var i = 0; i < validGroupCount; i++) { - while (groups[i].length < validGroupSize) { - groups[i] = "0" + groups[i]; + if (groups[i].length < validGroupSize) { + groups[i] = "0".repeat(validGroupSize - groups[i].length) + groups[i]; } expandedAddress += (i != validGroupCount - 1) ? groups[i] + ":" : groups[i]; } return expandedAddress; } + // Normalize or expand IP addresses + IP1 = IP1.toLowerCase(); + if (IP1 == "localhost") IP1 = "::1"; + if (IP1.indexOf("::ffff:") == 0) IP1 = IP1.substring(7); + if (IP1.indexOf(":") > -1) { + IP1 = expandIPv6Address(IP1); + } else { + IP1 = normalizeIPv4Address(IP1); + } + + IP2 = IP2.toLowerCase(); + if (IP2 == "localhost") IP2 = "::1"; + if (IP2.indexOf("::ffff:") == 0) IP2 = IP2.substring(7); + if (IP2.indexOf(":") > -1) { + IP2 = expandIPv6Address(IP2); + } else { + IP2 = normalizeIPv4Address(IP2); + } + + // Check if processed IPs are equal + if (IP1 == IP2) return true; + else return false; +} + +function checkForEnabledDirectoryListing(hostname, localAddress) { + function matchHostname(hostnameM) { + if (typeof hostnameM == "undefined" || hostnameM == "*") { + return true; + } else if (hostname && hostnameM.indexOf("*.") == 0 && hostnameM != "*.") { + var hostnamesRoot = hostnameM.substring(2); + if (hostname == hostnamesRoot || (hostname.length > hostnamesRoot.length && hostname.indexOf("." + hostnamesRoot) == hostname.length - hostnamesRoot.length - 1)) { + return true; + } + } else if (hostname && hostname == hostnameM) { + return true; + } + return false; + } + + var main = (configJSON.enableDirectoryListing || configJSON.enableDirectoryListing === undefined); + if (!configJSON.enableDirectoryListingVHost) return main; + var vhostP = null; + configJSON.enableDirectoryListingVHost.every(function (vhost) { + if (matchHostname(vhost.host) && ipMatch(vhost.ip, localAddress)) { + vhostP = vhost; + return false; + } else { + return true; + } + }); + if (!vhostP || vhostP.enabled === undefined) return main; + else return vhostP.enabled; +} + +// IP Block list object +function ipBlockList(rawBlockList) { + + // Initialize the instance with empty arrays + if (rawBlockList === undefined) rawBlockList = []; + var instance = { + raw: [], + rawtoPreparedMap: [], + prepared: [], + cidrs: [] + }; + + // Function to normalize IPv4 address (remove leading zeros) + function normalizeIPv4Address(address) { + return address.replace(/(^|\.)(?:0(?!\.|$))+/g, ""); + } + + // Function to expand IPv6 address to full format + function expandIPv6Address(address) { + var fullAddress = ""; + var expandedAddress = ""; + var validGroupCount = 8; + var validGroupSize = 4; + + var ipv4 = ""; + var extractIpv4 = /([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})/; + var validateIpv4 = /((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})/; + + if (validateIpv4.test(address)) { + var oldGroups = address.match(extractIpv4); + for (var i = 1; i < oldGroups.length; i++) { + ipv4 += ("00" + (parseInt(oldGroups[i], 10).toString(16))).slice(-2) + (i == 2 ? ":" : ""); + } + address = address.replace(extractIpv4, ipv4); + } + + if (address.indexOf("::") == -1) { + fullAddress = address; + } else { + var sides = address.split("::"); + var groupsPresent = 0; + sides.forEach(function (side) { + groupsPresent += side.split(":").length; + }); + fullAddress += sides[0] + ":"; + if (validGroupCount - groupsPresent > 1) { + fullAddress += "0000:".repeat(validGroupCount - groupsPresent); + } + fullAddress += sides[1]; + } + var groups = fullAddress.split(":"); + for (var i = 0; i < validGroupCount; i++) { + if (groups[i].length < validGroupSize) { + groups[i] = "0".repeat(validGroupSize - groups[i].length) + groups[i]; + } + expandedAddress += (i != validGroupCount - 1) ? groups[i] + ":" : groups[i]; + } + return expandedAddress; + } + + // Convert IPv4 address to an integer representation function ipv4ToInt(ip) { var ips = ip.split("."); return parseInt(ips[0]) * 16777216 + parseInt(ips[1]) * 65536 + parseInt(ips[2]) * 256 + parseInt(ips[3]); } + // Get IPv4 CIDR block limits (min and max) function getIPv4CIDRLimits(ip, cidrMask) { var ipInt = ipv4ToInt(ip); var exp = Math.pow(2, 32 - cidrMask); @@ -597,15 +725,17 @@ function ipBlockList(rawBlockList) { }; } + // Convert IPv6 address to an array of blocks function ipv6ToBlocks(ip) { var ips = ip.split(":"); var ip2s = []; - for (var i = 0; i < ips.length; i++) { - ip2s.push(parseInt(ips[i])); - } + ips.forEach(function (ipe) { + ip2s.push(parseInt(ipe)); + }); return ip2s; } + // Get IPv6 CIDR block limits (min and max) function getIPv6CIDRLimits(ip, cidrMask) { var ipBlocks = ipv6ToBlocks(ip); var fieldsToDelete = Math.floor((128 - cidrMask) / 16); @@ -624,11 +754,13 @@ function ipBlockList(rawBlockList) { }; } + // Check if the IPv4 address matches the given CIDR block function checkIfIPv4CIDRMatches(ipInt, cidrObject) { if (cidrObject.v6) return false; return ipInt >= cidrObject.min && ipInt <= cidrObject.max; } + // Check if the IPv6 address matches the given CIDR block function checkIfIPv6CIDRMatches(ipBlock, cidrObject) { if (!cidrObject.v6) return false; for (var i = 0; i < 8; i++) { @@ -636,31 +768,36 @@ function ipBlockList(rawBlockList) { } return false; } - if (rawBlockList === undefined) rawBlockList = []; - var instance = {}; - instance.raw = []; - instance.rawtoPreparedMap = []; - instance.prepared = []; - instance.cidrs = []; + + // Function to add an IP or CIDR block to the block list instance.add = function (rawValue) { + // Add to raw block list instance.raw.push(rawValue); + + // Initialize variables var beginIndex = instance.prepared.length; var cidrIndex = instance.cidrs.length; var cidrMask = null; var isIPv6 = false; + + // Check if the input contains CIDR notation if (rawValue.indexOf("/") > -1) { var rwArray = rawValue.split("/"); cidrMask = rwArray.pop(); rawValue = rwArray.join("/"); } + + // Normalize the IP address or expand the IPv6 address rawValue = rawValue.toLowerCase(); - if (rawValue.indexOf("::ffff:") == 0) rawValue = rawValue.substr(7); + if (rawValue.indexOf("::ffff:") == 0) rawValue = rawValue.substring(7); if (rawValue.indexOf(":") > -1) { isIPv6 = true; rawValue = expandIPv6Address(rawValue); } else { rawValue = normalizeIPv4Address(rawValue); } + + // Add the IP or CIDR block to the appropriate list if (cidrMask) { var cidrLimits = {}; if (isIPv6) { @@ -683,6 +820,8 @@ function ipBlockList(rawBlockList) { }); } }; + + // Function to remove an IP or CIDR block from the block list instance.remove = function (ip) { var index = instance.raw.indexOf(ip); if (index == -1) return false; @@ -696,65 +835,140 @@ function ipBlockList(rawBlockList) { } return true; }; + + // Function to check if an IP is blocked by the block list instance.check = function (rawValue) { if (instance.raw.length == 0) return false; var isIPv6 = false; + + // Normalize or expand the IP address rawValue = rawValue.toLowerCase(); - if (rawValue == "localhost") rawValue = "127.0.0.1"; - if (rawValue.indexOf("::ffff:") == 0) rawValue = rawValue.substr(7); + if (rawValue == "localhost") rawValue = "::1"; + if (rawValue.indexOf("::ffff:") == 0) rawValue = rawValue.substring(7); if (rawValue.indexOf(":") > -1) { isIPv6 = true; rawValue = expandIPv6Address(rawValue); } else { rawValue = normalizeIPv4Address(rawValue); } + + // Check if the IP is in the prepared list if (instance.prepared.indexOf(rawValue) > -1) return true; + + // Check if the IP is within any CIDR block in the block list if (instance.cidrs.length == 0) return false; var ipParsedObject = (!isIPv6 ? ipv4ToInt : ipv6ToBlocks)(rawValue); var checkMethod = (!isIPv6 ? checkIfIPv4CIDRMatches : checkIfIPv6CIDRMatches); - for (var i = 0; i < instance.cidrs.length; i++) { - if (checkMethod(ipParsedObject, instance.cidrs[i])) return true; - } - return false; + + return instance.cidrs.some(function (iCidr) { + return checkMethod(ipParsedObject, iCidr); + }); }; - for (var i = 0; i < rawBlockList.length; i++) { - instance.add(rawBlockList[i]); - } + + // Add initial raw block list values to the instance + rawBlockList.forEach(function (rbe) { + instance.add(rbe); + }); + return instance; } -//Error stack generator from Error objects. -function generateErrorStack(ex) { - var errStack = ex.stack ? ex.stack.split("\n") : []; - for (var i = 0; i < errStack.length; i++) { - if (errStack[i].indexOf(ex.name) == 0) return ex.stack; +// Generate V8-style error stack from Error object. +function generateErrorStack(errorObject) { + // Split the error stack by newlines. + var errorStack = errorObject.stack ? errorObject.stack.split("\n") : []; + + // If the error stack starts with the error name, return the original stack (it is V8-style then). + if (errorStack.some(function (errorStackLine) { + return (errorStackLine.indexOf(errorObject.name) == 0); + })) { + return errorObject.stack; } - var nErrStack = [ex.name + (ex.code ? ": " + ex.code : "") + (ex.message == "" ? "" : ": " + ex.message)]; - for (var i = 0; i < errStack.length; i++) { - if (errStack[i] != "") { - var ef = errStack[i].split("@"); + + // Create a new error stack with the error name and code (if available). + var newErrorStack = [errorObject.name + (errorObject.code ? ": " + errorObject.code : "") + (errorObject.message == "" ? "" : ": " + errorObject.message)]; + + // Process each line of the original error stack. + errorStack.forEach(function (errorStackLine) { + if (errorStackLine != "") { + // Split the line into function and location parts (if available). + var errorFrame = errorStackLine.split("@"); var location = ""; - if (ef.length > 1) location = ef.pop(); - var func = ef.join("@"); - nErrStack.push(" at " + (func == "" ? (!location || location == "" ? "
{stack}You may need to contact the server administrator at {contact}.", + 501: "The request requires the use of a function, which isn't currently implemented by the server.", + 502: "The server had an error while it was acting as a gateway.
You may need to contact the server administrator at {contact}.", + 503: "The service provided by the server is currently unavailable, possibly due to maintenance downtime or capacity problems. Please try again later.
You may need to contact the server administrator at {contact}.", + 504: "The server couldn't get a response in time while it was acting as a gateway.
You may need to contact the server administrator at {contact}.", + 505: "The server doesn't support the HTTP version used in the request.", + 506: "The Variant header is configured to be engaged in content negotiation.
You may need to contact the server administrator at {contact}.", + 507: "The server ran out of disk space necessary to complete the request.", + 508: "The server detected an infinite loop while processing the request.", + 509: "The server has its bandwidth limit exceeded.
You may need to contact the server administrator at {contact}.", + 510: "The server requires an extended HTTP request. The request you made isn't an extended HTTP request.", + 511: "You need to authenticate yourself in order to get network access.", + 598: "The server couldn't get a response in time while it was acting as a proxy.", + 599: "The server couldn't connect in time while it was acting as a proxy." +}; + +// Server error descriptions +var serverErrorDescs = { + "EADDRINUSE": "Address is already in use by another process.", + "EADDRNOTAVAIL": "Address is not available on this machine.", + "EACCES": "Permission denied. You may not have sufficient privileges to access the requested address.", + "EAFNOSUPPORT": "Address family not supported. The address family (IPv4 or IPv6) of the requested address is not supported.", + "EALREADY": "Operation already in progress. The server is already in the process of establishing a connection on the requested address.", + "ECONNABORTED": "Connection aborted. The connection to the server was terminated abruptly.", + "ECONNREFUSED": "Connection refused. The server refused the connection attempt.", + "ECONNRESET": "Connection reset by peer. The connection to the server was reset by the remote host.", + "EDESTADDRREQ": "Destination address required. The destination address must be specified.", + "EINVAL": "Invalid argument (invalid IP address?).", + "ENETDOWN": "Network is down. The network interface used for the connection is not available.", + "ENETUNREACH": "Network is unreachable. The network destination is not reachable from this host.", + "ENOBUFS": "No buffer space available. Insufficient buffer space is available for the server to process the request.", + "ENOTFOUND": "Domain name doesn't exist (invalid IP address?).", + "ENOTSOCK": "Not a socket. The file descriptor provided is not a valid socket.", + "EPROTO": "Protocol error. An unspecified protocol error occurred.", + "EPROTONOSUPPORT": "Protocol not supported. The requested network protocol is not supported.", + "ETIMEDOUT": "Connection timed out. The server did not respond within the specified timeout period.", + "UNKNOWN": "There was an unknown error with the server." +}; + +// Create server instances if (!cluster.isPrimary) { var reqcounter = 0; + var malformedcounter = 0; + var err4xxcounter = 0; + var err5xxcounter = 0; + var reqcounterKillReq = 0; var server = {}; var server2 = {}; try { server2 = http.createServer({ requireHostHeader: false }); - } catch (ex) { + } catch (err) { server2 = http.createServer(); } + server2.on("request", function (req, res) { + reqhandler(req, res, false); + }); + server2.on("checkExpectation", reqhandler); + server2.on("clientError", function (err, socket) { + reqerrhandler(err, socket, false); + }); if (!disableToHTTPSRedirect) { - server2.on("request", redirhandler); server2.on("connect", function (request, socket) { - var reqIdInt = Math.round(Math.random() * 16777216); + var reqIdInt = Math.floor(Math.random() * 16777216); + if (reqIdInt == 16777216) reqIdInt = 0; var reqId = "0".repeat(6 - reqIdInt.toString(16).length) + reqIdInt.toString(16); var serverconsole = { climessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.climessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.climessage(nmsg); + }); return; } - console.log("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER CLI MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, reqmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.reqmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.reqmessage(nmsg); + }); return; } - console.log("\x1b[34mSERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[34m\x1b[1mSERVER REQUEST MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, resmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.resmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.resmessage(nmsg); + }); return; } - console.log("\x1b[32mSERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[32m\x1b[1mSERVER RESPONSE MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, errmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.errmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.errmessage(nmsg); + }); return; } - console.log("\x1b[31mSERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[31m\x1b[1mSERVER RESPONSE ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locerrmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locerrmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locerrmessage(nmsg); + }); return; } - console.log("\x1b[41mSERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[41m\x1b[1mSERVER ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locwarnmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locwarnmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locwarnmessage(nmsg); + }); return; } - console.log("\x1b[43mSERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[43m\x1b[1mSERVER WARNING MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locmessage(nmsg); + }); return; } - console.log("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); return; } @@ -1696,59 +2121,21 @@ if (!cluster.isPrimary) { socket.on("error", function () {}); var reqip = socket.remoteAddress; var reqport = socket.remotePort; - serverconsole.locmessage("Somebody connected to port " + port + "..."); + serverconsole.locmessage("Somebody connected to " + (typeof port == "number" ? "port " : "socket ") + port + "..."); + reqcounter++; serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants to proxy " + request.url + " through this server"); if (request.headers["user-agent"] != undefined) serverconsole.reqmessage("Client uses " + request.headers["user-agent"]); serverconsole.errmessage("This server will never be a proxy."); if (!socket.destroyed) socket.end("HTTP/1.1 501 Not Implemented\n\n"); }); - server2.on("clientError", function (err, socket) { - reqerrhandler(err, socket, false); - }); - server2.on("checkExpectation", redirhandler); } else { - server2.on("request", function (req, res) { - reqhandler(req, res, false); - }); - server2.on("checkExpectation", reqhandler); server2.on("connect", connhandler); - server2.on("clientError", function (err, socket) { - reqerrhandler(err, socket, false); - }); - } server2.on("error", function (err) { - if (err.code == "EADDRINUSE" || err.code == "EADDRNOTAVAIL" || err.code == "EACCES") { - attmtsRedir--; - if (cluster.isPrimary === undefined) { - if (err.code == "EADDRINUSE") { - serverconsole.locerrmessage("Address in use by another process."); - } else if (err.code == "EADDRNOTAVAIL") { - serverconsole.locerrmessage("Address not available."); - } else if (err.code == "EACCES") { - serverconsole.locerrmessage("Access denied."); - } - serverconsole.locmessage(attmtsRedir + " attempts left."); - } else { - process.send("\x12ERRLIST" + attmtsRedir + err.code); - } - if (attmtsRedir > 0) { - server2.close(); - setTimeout(start, 900); - } else { - if (cluster.isPrimary !== undefined) process.send("\x12" + err.code); - process.exit(errors[err.code]); - } - } else { - serverconsole.locerrmessage("There was a problem starting SVR.JS!!!"); - serverconsole.locerrmessage("Stack:"); - serverconsole.locerrmessage(generateErrorStack(err)); - if (cluster.isPrimary !== undefined) process.send("\x12CRASH"); - process.exit(err.code ? errors[err.code] : 1); - } + serverErrorHandler(err, true); }); - - server2.once("listening", function () { + server2.on("listening", function () { + attmtsRedir = 5; listeningMessage(); }); @@ -1758,12 +2145,21 @@ if (!cluster.isPrimary) { allowHTTP1: true, requireHostHeader: false, key: key, - cert: cert + cert: cert, + requestCert: configJSON.useClientCertificate, + rejectUnauthorized: configJSON.rejectUnauthorizedClientCertificates, + ciphers: configJSON.cipherSuite, + ecdhCurve: configJSON.ecdhCurve, + minVersion: configJSON.tlsMinVersion, + maxVersion: configJSON.tlsMaxVersion, + sigalgs: configJSON.signatureAlgorithms, + settings: configJSON.http2Settings }); } else { server = http2.createServer({ allowHTTP1: true, - requireHostHeader: false + requireHostHeader: false, + settings: configJSON.http2Settings }); } } else { @@ -1771,24 +2167,42 @@ if (!cluster.isPrimary) { server = https.createServer({ key: key, cert: cert, - requireHostHeader: false + requireHostHeader: false, + requestCert: configJSON.useClientCertificate, + rejectUnauthorized: configJSON.rejectUnauthorizedClientCertificates, + ciphers: configJSON.cipherSuite, + ecdhCurve: configJSON.ecdhCurve, + minVersion: configJSON.tlsMinVersion, + maxVersion: configJSON.tlsMaxVersion, + sigalgs: configJSON.signatureAlgorithms }); } else { try { server = http.createServer({ requireHostHeader: false }); - } catch (ex) { + } catch (err) { server = http.createServer(); } } } if (secure) { - for (var i = 0; i < sniCredentials.length; i++) { - server.addContext(sniCredentials[i].name, { - cert: sniCredentials[i].cert, - key: sniCredentials[i].key + try { + sniCredentials.forEach(function (sniCredentialsSingle) { + server.addContext(sniCredentialsSingle.name, { + cert: sniCredentialsSingle.cert, + key: sniCredentialsSingle.key + }); + try { + var snMatches = sniCredentialsSingle.name.match(/^([^:[]*|\[[^]]*\]?)((?::.*)?)$/); + if (!snMatches[1][0].match(/^\.+$/)) snMatches[1][0] = snMatches[1][0].replace(/\.+$/, ""); + server._contexts[server._contexts.length - 1][0] = new RegExp("^" + snMatches[1].replace(/([.^$+?\-\\[\]{}])/g, "\\$1").replace(/\*/g, "[^.:]*") + ((snMatches[1][0] == "[" || snMatches[1].match(/^(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])$/)) ? "" : "\.?") + snMatches[2].replace(/([.^$+?\-\\[\]{}])/g, "\\$1").replace(/\*/g, "[^.]*") + "$", "i"); + } catch (ex) { + // Can't replace regex, ignoring... + } }); + } catch (err) { + // SNI error } } server.on("request", reqhandler); @@ -1828,16 +2242,16 @@ if (!cluster.isPrimary) { try { sock._parent.destroy(a, b, c); sock.destroyed = sock._parent.destroyed; - } catch (ex) { - //Socket is probably already destroyed. + } catch (err) { + // Socket is probably already destroyed. } }; } else { sock._parent.destroy = sock._parent.reallyDestroy; try { if (sock._parent.toDestroy) sock._parent.destroy(); - } catch (ex) { - //Socket is probably already destroyed. + } catch (err) { + // Socket is probably already destroyed. } } }); @@ -1864,407 +2278,13 @@ if (!cluster.isPrimary) { } } - //Patches from Node.JS v18.0.0 + // Patches from Node.JS v18.0.0 if (server.requestTimeout !== undefined && server.requestTimeout === 0) server.requestTimeout = 300000; if (server2.requestTimeout !== undefined && server2.requestTimeout === 0) server2.requestTimeout = 300000; - function redirhandler(req, res) { - var reqIdInt = Math.round(Math.random() * 16777216); - var reqId = "0".repeat(6 - reqIdInt.toString(16).length) + reqIdInt.toString(16); - var serverconsole = { - climessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.climessage(nmsg[i]); - } - return; - } - console.log("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); - LOG("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - reqmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.reqmessage(nmsg[i]); - } - return; - } - console.log("\x1b[34mSERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); - LOG("SERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - resmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.resmessage(nmsg[i]); - } - return; - } - console.log("\x1b[32mSERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); - LOG("SERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - errmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.errmessage(nmsg[i]); - } - return; - } - console.log("\x1b[31mSERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); - LOG("SERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - locerrmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locerrmessage(nmsg[i]); - } - return; - } - console.log("\x1b[41mSERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); - LOG("SERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - locwarnmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locwarnmessage(nmsg[i]); - } - return; - } - console.log("\x1b[43mSERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); - LOG("SERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - }, - locmessage: function (msg) { - if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locmessage(nmsg[i]); - } - return; - } - console.log("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); - LOG("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); - return; - } - }; - - function getCustomHeaders() { - var ph = JSON.parse(JSON.stringify(customHeaders)); - var phk = Object.keys(ph); - for (var i = 0; i < phk.length; i++) { - if (typeof ph[phk[i]] == "string") ph[phk[i]] = ph[phk[i]].replace(/\{path\}/g, req.url); - } - return ph; - } - if (req.headers["x-svr-js-from-main-thread"] == "true") { - res.writeHead(204, "No Content", getCustomHeaders()); - res.end(); - return; - } - - req.url = fixNodeMojibakeURL(req.url); - - res.writeHeadNative = res.writeHead; - res.writeHead = function (a, b, c) { - if (parseInt(a) >= 400 && parseInt(a) <= 599) { - serverconsole.errmessage("Server responded with " + a.toString() + " code."); - } else { - serverconsole.resmessage("Server responded with " + a.toString() + " code."); - } - res.writeHeadNative(a, b, c); - }; - var finished = false; - res.on("finish", function () { - if (!finished) { - finished = true; - serverconsole.locmessage("Client disconnected."); - } - }); - res.on("close", function () { - if (!finished) { - finished = true; - serverconsole.locmessage("Client disconnected."); - } - }); - - serverconsole.locmessage("Somebody connected to port " + port + "..."); - - if (req.socket == null) { - serverconsole.errmessage("Client socket is null!!!"); - return; - } - - var isProxy = false; - if (req.url.indexOf("/") != 0 && req.url != "*") isProxy = true; - - // Header and footer placeholders - var head = ""; - var foot = ""; - var fd = ""; - - function responseEnd(d) { - if (d === undefined) d = fd; - res.write(head + d + foot); - res.end(); - } - - //Error descriptions - var serverErrorDescs = { - 400: "The request you made is invalid.", - 417: "Expectation in Expect property couldn't be satisfied.", - 500: "The server had an unexpected error. Below, the error stack is shown:
{stack}Please contact with developer/administrator at {contact}.",
- 501: "The request requires use of a function, which isn't currently implemented by the server."
- };
-
- //Server error calling method
- function callServerError(errorCode, extName, stack, ch) {
- var errorFile = errorCode.toString() + ".html";
- var errorFile2 = "." + errorCode.toString();
- if (fs.existsSync(errorFile2)) errorFile = errorFile2;
- if (errorCode == 404 && fs.existsSync(page404)) errorFile = page404;
- if (Object.prototype.toString.call(stack) === "[object Error]") stack = generateErrorStack(stack);
- if (stack === undefined) stack = generateErrorStack(new Error("Unknown error"));
- if (errorCode == 500 || errorCode == 502) {
- serverconsole.errmessage("There was an error while processing the request!");
- serverconsole.errmessage("Stack:");
- serverconsole.errmessage(stack);
- }
- if (stackHidden) stack = "[error stack hidden]";
- if (serverErrorDescs[errorCode] === undefined) {
- callServerError(501, extName, stack);
- } else {
- var cheaders = getCustomHeaders();
- if (ch) {
- var chon = Object.keys(cheaders);
- var chn = Object.keys(ch);
- for (var i = 0; i < chn.length; i++) {
- var nhn = chn[i];
- for (var j = 0; j < chon.length; j++) {
- if (chon[j].toLowerCase() == chn[i].toLowerCase()) {
- nhn = chon[j];
- break;
- }
- }
- if (ch[chn[i]]) cheaders[nhn] = ch[chn[i]];
- }
- }
- cheaders["Content-Type"] = "text/html; charset=utf-8";
- if (errorCode == 405 && !cheaders["Allow"]) cheaders["Allow"] = "GET, POST, HEAD, OPTIONS";
- fs.readFile(errorFile, function (err, data) {
- try {
- if (err) throw err;
- res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders);
- fd += data.toString().replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, req.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]"));
- responseEnd();
- } catch (ex) {
- var additionalError = 500;
- if (ex.code == "ENOENT") {
- additionalError = 404;
- } else if (ex.code == "ENOTDIR") {
- additionalError = 404;
- } else if (ex.code == "EACCES") {
- additionalError = 403;
- } else if (ex.code == "ENAMETOOLONG") {
- additionalError = 414;
- } else if (ex.code == "EMFILE") {
- additionalError = 503;
- } else if (ex.code == "ELOOP") {
- additionalError = 508;
- }
- res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders);
- res.write(("
{errorMessage}
{errorDesc}
" + ((additionalError == 404) ? "" : "Additionally, a {additionalError} error occurred while loading an error page.
") + "{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, req.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")).replace(/{additionalError}/g, additionalError.toString())); - res.end(); - } - }); - - } - } - - var reqip = req.socket.remoteAddress; - var reqport = req.socket.remotePort; - var oldip = ""; - var oldport = ""; - var isForwardedValid = true; - if(enableIPSpoofing) { - if (req.headers["x-forwarded-for"] != undefined) { - var preparedReqIP = req.headers["x-forwarded-for"].split(",")[0].replace(/ /g, ""); - var preparedReqIPvalid = net.isIP(preparedReqIP); - if(preparedReqIPvalid) { - if (preparedReqIPvalid == 4 && req.socket.remoteAddress && req.socket.remoteAddress.indexOf(":") > -1) preparedReqIP = "::ffff:" + preparedReqIP; - reqip = preparedReqIP; - reqport = null; - try { - oldport = req.socket.remotePort; - oldip = req.socket.remoteAddress; - req.socket.realRemotePort = reqport; - req.socket.realRemoteAddress = reqip; - req.socket.originalRemotePort = oldport; - req.socket.originalRemoteAddress = oldip; - res.socket.realRemotePort = reqport; - res.socket.realRemoteAddress = reqip; - res.socket.originalRemotePort = oldport; - res.socket.originalRemoteAddress = oldip; - } catch (err) { - // Address setting failed - } - } else { - isForwardedValid = false; - } - } - } - - if (!isProxy) serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants " + (req.method == "GET" ? "content in " : (req.method == "POST" ? "to post content in " : (req.method == "PUT" ? "to add content in " : (req.method == "DELETE" ? "to delete content in " : (req.method == "PATCH" ? "to patch content in " : "to access content using " + req.method + " method in "))))) + (req.headers.host == undefined ? "" : req.headers.host) + req.url); - else serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants " + (req.method == "GET" ? "content in " : (req.method == "POST" ? "to post content in " : (req.method == "PUT" ? "to add content in " : (req.method == "DELETE" ? "to delete content in " : (req.method == "PATCH" ? "to patch content in " : "to access content using " + req.method + " method in "))))) + req.url); - if (req.headers["user-agent"] != undefined) serverconsole.reqmessage("Client uses " + req.headers["user-agent"]); - - try { - head = fs.existsSync("./.head") ? fs.readFileSync("./.head").toString() : (fs.existsSync("./head.html") ? fs.readFileSync("./head.html").toString() : ""); // header - foot = fs.existsSync("./.foot") ? fs.readFileSync("./.foot").toString() : (fs.existsSync("./foot.html") ? fs.readFileSync("./foot.html").toString() : ""); // footer - - if (req.headers["expect"] && req.headers["expect"] != "100-continue") { - serverconsole.errmessage("Expectation not satified!"); - callServerError(417); - return; - } - var hostx = req.headers.host; - if (hostx === undefined || !isForwardedValid) { - serverconsole.errmessage("Bad request!"); - callServerError(400); - return; - } - - if (req.method == "CONNECT") { - callServerError(501); - serverconsole.errmessage("CONNECT requests aren't supported. Your JS runtime probably doesn't support 'connect' handler for HTTP library."); - return; - } - - if (isProxy) { - callServerError(501); - serverconsole.errmessage("This server will never be a proxy."); - return; - } - - function urlParse(uri) { - if (typeof URL != "undefined" && url.Url) { - try { - var uobject = new URL(uri, "http" + (req.socket.encrypted ? "s" : "") + "://" + (req.headers.host ? req.headers.host : (domain ? domain : "unknown.invalid"))); - var nuobject = new url.Url(); - if (uri.indexOf("/") != -1) nuobject.slashes = true; - if (uobject.protocol != "") nuobject.protocol = uobject.protocol; - if (uobject.username != "" && uobject.password != "") nuobject.auth = uobject.username + ":" + uobject.password; - if (uobject.host != "") nuobject.host = uobject.host; - if (uobject.hostname != "") nuobject.hostname = uobject.hostname; - if (uobject.port != "") nuobject.port = uobject.port; - if (uobject.pathname != "") nuobject.pathname = uobject.pathname; - if (uobject.search != "") nuobject.search = uobject.search; - if (uobject.hash != "") nuobject.hash = uobject.hash; - if (uobject.href != "") nuobject.href = uobject.href; - if (uri.indexOf("/") != 0) { - if (nuobject.pathname) { - nuobject.pathname = nuobject.pathname.substr(1); - nuobject.href = nuobject.pathname + (nuobject.search ? nuobject.search : ""); - } - } - if (nuobject.pathname) { - nuobject.path = nuobject.pathname + (nuobject.search ? nuobject.search : ""); - } - //if(nuobject.path != "" && uobject.password != "") nuobject.path = nuobject.pathname + nuobject.href; - nuobject.query = {}; - uobject.searchParams.forEach(function (value, key) { - nuobject.query[key] = value; - }); - return nuobject; - } catch (ex) { - return url.parse(uri, true); - } - } else { - return url.parse(uri, true); - } - } - var urlp = urlParse("http://" + hostx); - try { - if (urlp.path.indexOf("//") == 0) { - urlp = urlParse("http:" + url.path); - } - } catch (ex) { - //URL parse error... - } - if (urlp.host == "localhost" || urlp.host == "localhost:" + port.toString() || urlp.host == "127.0.0.1" || urlp.host == "127.0.0.1:" + port.toString() || urlp.host == "::1" || urlp.host == "::1:" + port.toString()) { - urlp.protocol = "https:"; - if (sport == 443) { - urlp.host = urlp.hostname; - } else { - urlp.host = urlp.hostname + ":" + sport.toString(); - urlp.port = sport.toString(); - } - } else if (urlp.host == host || urlp.host == host + ":" + port.toString()) { - urlp.protocol = "https:"; - if (sport == 443) { - urlp.host = urlp.hostname; - } else { - urlp.host = urlp.hostname + ":" + sport.toString(); - urlp.port = sport.toString(); - } - } else if (urlp.host == pubip || urlp.host == pubip + ":" + pubport.toString()) { - urlp.protocol = "https:"; - if (spubport == 443) { - urlp.host = urlp.hostname; - } else { - urlp.host = urlp.hostname + ":" + spubport.toString(); - urlp.port = spubport.toString(); - } - } else if (urlp.hostname == domain || urlp.hostname.indexOf(domain) != -1) { - urlp.protocol = "https:"; - if (spubport == 443) { - urlp.host = urlp.hostname; - } else { - urlp.host = urlp.hostname + ":" + spubport.toString(); - urlp.port = spubport.toString(); - } - } else { - urlp.protocol = "https:"; - } - urlp.path = null; - urlp.pathname = null; - var lloc = url.format(urlp); - var requestURL = req.url; - try { - if (requestURL.split("/")[1].indexOf(".onion") != -1) { - requestURL = requestURL.split("/"); - requestURL.shift(); - requestURL.shift(); - requestURL.unshift(""); - requestURL = requestURL.join("/"); - } - } catch (ex) { - //Leave URL as it is... - } - var rheaders = getCustomHeaders(); - rheaders["Location"] = lloc + requestURL; - res.writeHead(301, "Redirect to HTTPS", rheaders); - res.end(); - } catch (ex) { - serverconsole.errmessage("There was an error while processing the request!"); - serverconsole.errmessage("Stack:"); - serverconsole.errmessage(generateErrorStack(ex)); - callServerError(500, undefined, generateErrorStack(ex)); - } - } - function reqerrhandler(err, socket, fromMain) { if (fromMain === undefined) fromMain = true; - //Define response object similar to Node.JS native one + // Define response object similar to Node.JS native one var res = {}; res.socket = socket; res.write = function (x) { @@ -2280,117 +2300,112 @@ if (!cluster.isPrimary) { socket.end(x, function () { try { socket.destroy(); - } catch (ex) { - //Socket is probably already destroyed + } catch (err) { + // Socket is probably already destroyed } }); }; res.writeHead = function (code, name, headers) { + if (code >= 400 && code <= 499) err4xxcounter++; + if (code >= 500 && code <= 599) err5xxcounter++; var head = ("HTTP/1.1 " + code.toString() + " " + name + "\r\n"); var headers = JSON.parse(JSON.stringify(headers)); headers["Date"] = (new Date()).toGMTString(); headers["Connection"] = "close"; - var headernames = Object.keys(headers); - for (var i = 0; i < headernames.length; i++) { - if (headernames[i].toLowerCase() == "set-cookie") { - for (var j = 0; j < headers[headernames[i]]; j++) { - if (headernames[i].match(/[^\x09\x20-\x7e\x80-\xff]|.:/) || headers[headernames[i]][j].match(/[^\x09\x20-\x7e\x80-\xff]/)) throw new Error("Invalid header!!! (" + headernames[i] + ")"); - head += (headernames[i] + ": " + headers[headernames[i]][j]); - } + Object.keys(headers).forEach(function (headername) { + if (headername.toLowerCase() == "set-cookie") { + headers[headername].forEach(function (headerValueS) { + if (headername.match(/[^\x09\x20-\x7e\x80-\xff]|.:/) || headerValueS.match(/[^\x09\x20-\x7e\x80-\xff]/)) throw new Error("Invalid header!!! (" + headername + ")"); + head += (headername + ": " + headerValueS); + }); } else { - if (headernames[i].match(/[^\x09\x20-\x7e\x80-\xff]|.:/) || headers[headernames[i]].match(/[^\x09\x20-\x7e\x80-\xff]/)) throw new Error("Invalid header!!! (" + headernames[i] + ")"); - head += (headernames[i] + ": " + headers[headernames[i]]); + if (headername.match(/[^\x09\x20-\x7e\x80-\xff]|.:/) || headers[headername].match(/[^\x09\x20-\x7e\x80-\xff]/)) throw new Error("Invalid header!!! (" + headername + ")"); + head += (headername + ": " + headers[headername]); } head += "\r\n"; - } + }); head += ("\r\n"); res.write(head); }; - var reqIdInt = Math.round(Math.random() * 16777216); + var reqIdInt = Math.floor(Math.random() * 16777216); + if (reqIdInt == 16777216) reqIdInt = 0; var reqId = "0".repeat(6 - reqIdInt.toString(16).length) + reqIdInt.toString(16); var serverconsole = { climessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.climessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.climessage(nmsg); + }); return; } - console.log("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER CLI MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, reqmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.reqmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.reqmessage(nmsg); + }); return; } - console.log("\x1b[34mSERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[34m\x1b[1mSERVER REQUEST MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, resmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.resmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.resmessage(nmsg); + }); return; } - console.log("\x1b[32mSERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[32m\x1b[1mSERVER RESPONSE MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, errmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.errmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.errmessage(nmsg); + }); return; } - console.log("\x1b[31mSERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[31m\x1b[1mSERVER RESPONSE ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locerrmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locerrmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locerrmessage(nmsg); + }); return; } - console.log("\x1b[41mSERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[41m\x1b[1mSERVER ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locwarnmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locwarnmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locwarnmessage(nmsg); + }); return; } - console.log("\x1b[43mSERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[43m\x1b[1mSERVER WARNING MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locmessage(nmsg); + }); return; } - console.log("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); return; } @@ -2405,95 +2420,176 @@ if (!cluster.isPrimary) { var head = ""; var foot = ""; - var fd = ""; - - function responseEnd(d) { - if (d === undefined) d = fd; - res.write(head + d + foot); + function responseEnd(body) { + // If body is Buffer, then it is converted to String anyway. + res.write(head + body + foot); res.end(); } - var serverErrorDescs = { - 400: "The request you made is invalid.", - 405: "Method used to access the requested file isn't allowed.", - 408: "You have timed out.", - 414: "URL you sent is too long.", - 431: "The request you sent contains headers, that are too large.", - 451: "The requested file isn't accessible for legal reasons.", - 497: "You sent non-TLS request to the HTTPS server." - }; - - //Server error calling method + // Server error calling method function callServerError(errorCode, extName, stack, ch) { - var errorFile = errorCode.toString() + ".html"; - var errorFile2 = "." + errorCode.toString(); - if (fs.existsSync(errorFile2)) errorFile = errorFile2; - if (errorCode == 404 && fs.existsSync(page404)) errorFile = page404; - if (Object.prototype.toString.call(stack) === "[object Error]") stack = generateErrorStack(stack); - if (stack === undefined) stack = generateErrorStack(new Error("Unknown error")); - if (errorCode == 500 || errorCode == 502) { - serverconsole.errmessage("There was an error while processing the request!"); - serverconsole.errmessage("Stack:"); - serverconsole.errmessage(stack); + if (typeof errorCode !== "number") { + throw new TypeError("HTTP error code parameter needs to be an integer."); } - if (stackHidden) stack = "[error stack hidden]"; - if (serverErrorDescs[errorCode] === undefined) { - callServerError(501, extName, stack); - } else { - var cheaders = getCustomHeaders(); - if (ch) { - var chon = Object.keys(cheaders); - var chn = Object.keys(ch); - for (var i = 0; i < chn.length; i++) { - var nhn = chn[i]; - for (var j = 0; j < chon.length; j++) { - if (chon[j].toLowerCase() == chn[i].toLowerCase()) { - nhn = chon[j]; - break; - } + + // Handle optional parameters + if (extName && typeof extName === "object") { + ch = stack; + stack = extName; + extName = undefined; + } else if (typeof extName !== "string" && extName !== null && extName !== undefined) { + throw new TypeError("Extension name parameter needs to be a string."); + } + + if (stack && typeof stack === "object" && Object.prototype.toString.call(stack) !== "[object Error]") { + ch = stack; + stack = undefined; + } else if (typeof stack !== "object" && typeof stack !== "string" && stack) { + throw new TypeError("Error stack parameter needs to be either a string or an instance of Error object."); + } + + // Determine error file + function getErrorFileName(list, callback, _i) { + if (err.code == "ERR_SSL_HTTP_REQUEST" && process.version && parseInt(process.version.split(".")[0].substring(1)) >= 16) { + // Disable custom error page for HTTP SSL error + callback(errorCode.toString() + ".html"); + return; + } + + function medCallback(p) { + if (p) callback(p); + else { + if (errorCode == 404) { + fs.access(page404, fs.constants.F_OK, function (err) { + if (err) { + fs.access("." + errorCode.toString(), fs.constants.F_OK, function (err) { + try { + if (err) { + callback(errorCode.toString() + ".html"); + } else { + callback("." + errorCode.toString()); + } + } catch (err2) { + callServerError(500, err2); + } + }); + } else { + try { + callback(page404); + } catch (err2) { + callServerError(500, err2); + } + } + }); + } else { + fs.access("." + errorCode.toString(), fs.constants.F_OK, function (err) { + try { + if (err) { + callback(errorCode.toString() + ".html"); + } else { + callback("." + errorCode.toString()); + } + } catch (err2) { + callServerError(500, err2); + } + }); } - if (ch[chn[i]]) cheaders[nhn] = ch[chn[i]]; } } - cheaders["Content-Type"] = "text/html; charset=utf-8"; - if (errorCode == 405 && !cheaders["Allow"]) cheaders["Allow"] = "GET, POST, HEAD, OPTIONS"; - fs.readFile(errorFile, function (err, data) { - try { - if (err) throw err; - res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); - fd += data.toString().replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">")).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")); - responseEnd(); - } catch (ex) { - var additionalError = 500; - if (ex.code == "ENOENT") { - additionalError = 404; - } else if (ex.code == "ENOTDIR") { - additionalError = 404; - } else if (ex.code == "EACCES") { - additionalError = 403; - } else if (ex.code == "ENAMETOOLONG") { - additionalError = 414; - } else if (ex.code == "EMFILE") { - additionalError = 503; - } else if (ex.code == "ELOOP") { - additionalError = 508; - } - res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); - res.write(("
{errorMessage}
{errorDesc}
" + ((additionalError == 404) ? "" : "Additionally, a {additionalError} error occurred while loading an error page.
") + "{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">")).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")).replace(/{additionalError}/g, additionalError.toString())); - res.end(); - } - }); + if (!_i) _i = 0; + if (_i >= list.length) { + medCallback(false); + return; + } + + if (list[_i].scode != errorCode) { + getErrorFileName(list, callback, _i + 1); + return; + } else { + fs.access(list[_i].path, fs.constants.F_OK, function (err) { + if (err) { + getErrorFileName(list, callback, _i + 1); + } else { + medCallback(list[_i].path); + } + }); + } } + + getErrorFileName(errorPages, function (errorFile) { + if (Object.prototype.toString.call(stack) === "[object Error]") stack = generateErrorStack(stack); + if (stack === undefined) stack = generateErrorStack(new Error("Unknown error")); + if (errorCode == 500 || errorCode == 502) { + serverconsole.errmessage("There was an error while processing the request!"); + serverconsole.errmessage("Stack:"); + serverconsole.errmessage(stack); + } + if (stackHidden) stack = "[error stack hidden]"; + if (serverHTTPErrorDescs[errorCode] === undefined) { + callServerError(501, extName, stack); + } else { + var cheaders = getCustomHeaders(); + if (ch) { + var chon = Object.keys(cheaders); + Object.keys(ch).forEach(function (chnS) { + var nhn = chnS; + for (var j = 0; j < chon.length; j++) { + if (chon[j].toLowerCase() == chnS.toLowerCase()) { + nhn = chon[j]; + break; + } + } + if (ch[chnS]) cheaders[nhn] = ch[chnS]; + }); + } + cheaders["Content-Type"] = "text/html; charset=utf-8"; + if (errorCode == 405 && !cheaders["Allow"]) cheaders["Allow"] = "GET, POST, HEAD, OPTIONS"; + if (err.code == "ERR_SSL_HTTP_REQUEST" && process.version && parseInt(process.version.split(".")[0].substring(1)) >= 16) { + // Disable custom error page for HTTP SSL error + res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); + res.write(("
{errorMessage}
{errorDesc}
{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverHTTPErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">")).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]"))); + res.end(); + } else { + fs.readFile(errorFile, function (err, data) { + try { + if (err) throw err; + res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); + responseEnd(data.toString().replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverHTTPErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">")).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]"))); + } catch (err) { + var additionalError = 500; + if (err.code == "ENOENT") { + additionalError = 404; + } else if (err.code == "ENOTDIR") { + additionalError = 404; // Assume that file doesn't exist + } else if (err.code == "EACCES") { + additionalError = 403; + } else if (err.code == "ENAMETOOLONG") { + additionalError = 414; + } else if (err.code == "EMFILE") { + additionalError = 503; + } else if (err.code == "ELOOP") { + additionalError = 508; + } + res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); + res.write(("
{errorMessage}
{errorDesc}
" + ((additionalError == 404) ? "" : "Additionally, a {additionalError} error occurred while loading an error page.
") + "{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverHTTPErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">")).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")).replace(/{additionalError}/g, additionalError.toString())); + res.end(); + } + }); + } + } + }); } var reqip = socket.remoteAddress; var reqport = socket.remotePort; - serverconsole.locmessage("Somebody connected to port " + (secure && fromMain ? sport : port) + "..."); + reqcounter++; + malformedcounter++; + serverconsole.locmessage("Somebody connected to " + (secure && fromMain ? ((typeof sport == "number" ? "port " : "socket ") + sport) : ((typeof port == "number" ? "port " : "socket ") + port)) + "..."); serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " sent invalid request."); try { head = fs.existsSync("./.head") ? fs.readFileSync("./.head").toString() : (fs.existsSync("./head.html") ? fs.readFileSync("./head.html").toString() : ""); // header foot = fs.existsSync("./.foot") ? fs.readFileSync("./.foot").toString() : (fs.existsSync("./foot.html") ? fs.readFileSync("./foot.html").toString() : ""); // footer - + if ((err.code && (err.code.indexOf("ERR_SSL_") == 0 || err.code.indexOf("ERR_TLS_") == 0)) || (!err.code && err.message.indexOf("SSL routines") != -1)) { if (err.code == "ERR_SSL_HTTP_REQUEST" || err.message.indexOf("http request") != -1) { serverconsole.errmessage("Client sent HTTP request to HTTPS port."); @@ -2506,6 +2602,12 @@ if (!cluster.isPrimary) { } } + if (err.code && err.code.indexOf("ERR_HTTP2_") == 0) { + serverconsole.errmessage("An HTTP/2 error occured: " + err.code); + callServerError(400); + return; + } + if (err.code && err.code == "ERR_HTTP_REQUEST_TIMEOUT") { serverconsole.errmessage("Client timed out."); callServerError(408); @@ -2528,14 +2630,14 @@ if (!cluster.isPrimary) { function checkHeaders(beginsFromFirst) { for (var i = (beginsFromFirst ? 0 : 1); i < packetLines.length; i++) { var header = packetLines[i]; - if (header == "") return false; //Beginning of body + if (header == "") return false; // Beginning of body else if (header.indexOf(":") < 1) { serverconsole.errmessage("Invalid header."); callServerError(400); return true; } else if (header.length > 8192) { serverconsole.errmessage("Header too large."); - callServerError(431); //Headers too large + callServerError(431); // Headers too large return true; } } @@ -2546,8 +2648,8 @@ if (!cluster.isPrimary) { var httpVersion = "HTTP/1.1"; if (String(packetLine1[0]).indexOf(":") > 0) { if (!checkHeaders(true)) { - serverconsole.errmessage("The request is invalid."); - callServerError(400); //Also malformed Packet + serverconsole.errmessage("The request is invalid (it may be a part of larger invalid request)."); + callServerError(400); // Also malformed Packet return; } } @@ -2555,114 +2657,108 @@ if (!cluster.isPrimary) { if (String(packetLine1[packetLine1.length - 1]).length < 50) httpVersion = packetLine1.pop(); if (packetLine1.length != 1) { serverconsole.errmessage("The head of request is invalid."); - callServerError(400); //Malformed Packet + callServerError(400); // Malformed Packet } else if (!httpVersion.toString().match(/^HTTP[\/]/i)) { serverconsole.errmessage("Invalid protocol."); - callServerError(400); //bad protocol version + callServerError(400); // bad protocol version } else if (http.METHODS.indexOf(method) == -1) { serverconsole.errmessage("Invalid method."); - callServerError(405); //Also malformed Packet + callServerError(405); // Also malformed Packet } else { if (checkHeaders(false)) return; if (packetLine1[0].length > 255) { serverconsole.errmessage("URI too long."); - callServerError(414); //Also malformed Packet + callServerError(414); // Also malformed Packet } else { - serverconsole.errmessage("Bad request."); - callServerError(400); //Also malformed Packet + serverconsole.errmessage("The request is invalid."); + callServerError(400); // Also malformed Packet } } - } catch (ex) { + } catch (err) { serverconsole.errmessage("There was an error while determining type of malformed request."); callServerError(400); } } function connhandler(request, socket, head) { - var reqIdInt = Math.round(Math.random() * 16777216); + var reqIdInt = Math.floor(Math.random() * 16777216); + if (reqIdInt == 16777216) reqIdInt = 0; var reqId = "0".repeat(6 - reqIdInt.toString(16).length) + reqIdInt.toString(16); var serverconsole = { climessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.climessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.climessage(nmsg); + }); return; } - console.log("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER CLI MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, reqmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.reqmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.reqmessage(nmsg); + }); return; } - console.log("\x1b[34mSERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[34m\x1b[1mSERVER REQUEST MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, resmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.resmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.resmessage(nmsg); + }); return; } - console.log("\x1b[32mSERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[32m\x1b[1mSERVER RESPONSE MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, errmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.errmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.errmessage(nmsg); + }); return; } - console.log("\x1b[31mSERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[31m\x1b[1mSERVER RESPONSE ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locerrmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locerrmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locerrmessage(nmsg); + }); return; } - console.log("\x1b[41mSERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[41m\x1b[1mSERVER ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locwarnmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locwarnmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locwarnmessage(nmsg); + }); return; } - console.log("\x1b[43mSERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[43m\x1b[1mSERVER WARNING MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locmessage(nmsg); + }); return; } - console.log("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); return; } @@ -2676,20 +2772,21 @@ if (!cluster.isPrimary) { var reqip = socket.remoteAddress; var reqport = socket.remotePort; - serverconsole.locmessage("Somebody connected to port " + (secure ? sport : port) + "..."); + reqcounter++; + serverconsole.locmessage("Somebody connected to " + (secure ? ((typeof sport == "number" ? "port " : "socket ") + sport) : ((typeof port == "number" ? "port " : "socket ") + port)) + "..."); serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants to proxy " + request.url + " through this server"); if (request.headers["user-agent"] != undefined) serverconsole.reqmessage("Client uses " + request.headers["user-agent"]); function modExecute(mods, ffinals) { var proxyMods = []; - for (var i = 0; i < mods.length; i++) { - if (mods[i].proxyCallback !== undefined) proxyMods.push(mods[i]); - } + mods.forEach(function (mod) { + if (mod.proxyCallback !== undefined) proxyMods.push(mod); + }); var modFunction = ffinals; - for (var i = proxyMods.length - 1; i >= 0; i--) { - modFunction = proxyMods[i].proxyCallback(req, socket, head, configJSON, serverconsole, modFunction); - } + proxyMods.reverse().forEach(function (proxyMod) { + modFunction = proxyMod.proxyCallback(req, socket, head, configJSON, serverconsole, modFunction); + }); modFunction(); } @@ -2702,389 +2799,376 @@ if (!cluster.isPrimary) { modExecute(mods, vres(req, socket, head, serverconsole)); } - function reqhandler(request, response, fromMain) { + function reqhandler(req, res, fromMain) { if (fromMain === undefined) fromMain = true; - var reqIdInt = Math.round(Math.random() * 16777216); + var reqIdInt = Math.floor(Math.random() * 16777216); + if (reqIdInt == 16777216) reqIdInt = 0; var reqId = "0".repeat(6 - reqIdInt.toString(16).length) + reqIdInt.toString(16); var serverconsole = { climessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.climessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.climessage(nmsg); + }); return; } - console.log("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER CLI MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER CLI MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, reqmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.reqmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.reqmessage(nmsg); + }); return; } - console.log("\x1b[34mSERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[34m\x1b[1mSERVER REQUEST MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER REQUEST MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, resmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.resmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.resmessage(nmsg); + }); return; } - console.log("\x1b[32mSERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[32m\x1b[1mSERVER RESPONSE MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, errmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.errmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.errmessage(nmsg); + }); return; } - console.log("\x1b[31mSERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); + console.log("\x1b[31m\x1b[1mSERVER RESPONSE ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[37m\x1b[0m"); LOG("SERVER RESPONSE ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locerrmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locerrmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locerrmessage(nmsg); + }); return; } - console.log("\x1b[41mSERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[41m\x1b[1mSERVER ERROR MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER ERROR MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locwarnmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locwarnmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locwarnmessage(nmsg); + }); return; } - console.log("\x1b[43mSERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); + console.log("\x1b[43m\x1b[1mSERVER WARNING MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg + "\x1b[40m\x1b[0m"); LOG("SERVER WARNING MESSAGE [Request Id: " + reqId + "]: " + msg); return; }, locmessage: function (msg) { if (msg.indexOf("\n") != -1) { - var nmsg = msg.split("\n"); - for (var i = 0; i < nmsg.length; i++) { - serverconsole.locmessage(nmsg[i]); - } + msg.split("\n").forEach(function (nmsg) { + serverconsole.locmessage(nmsg); + }); return; } - console.log("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); + console.log("\x1b[1mSERVER MESSAGE\x1b[22m [Request Id: " + reqId + "]: " + msg); LOG("SERVER MESSAGE [Request Id: " + reqId + "]: " + msg); return; } }; + function matchHostname(hostname) { + if (typeof hostname == "undefined" || hostname == "*") { + return true; + } else if (req.headers.host && hostname.indexOf("*.") == 0 && hostname != "*.") { + var hostnamesRoot = hostname.substring(2); + if (req.headers.host == hostnamesRoot || (req.headers.host.length > hostnamesRoot.length && req.headers.host.indexOf("." + hostnamesRoot) == req.headers.host.length - hostnamesRoot.length - 1)) { + return true; + } + } else if (req.headers.host && req.headers.host == hostname) { + return true; + } + return false; + } + function getCustomHeaders() { var ph = JSON.parse(JSON.stringify(customHeaders)); - var phk = Object.keys(ph); - for (var i = 0; i < phk.length; i++) { - if (typeof ph[phk[i]] == "string") ph[phk[i]] = ph[phk[i]].replace(/\{path\}/g, request.url); + if (configJSON.customHeadersVHost) { + var vhostP = null; + configJSON.customHeadersVHost.every(function (vhost) { + if (matchHostname(vhost.host) && ipMatch(vhost.ip, req.socket ? req.socket.localAddress : undefined)) { + vhostP = vhost; + return false; + } else { + return true; + } + }); + if (vhostP && vhostP.headers) { + var phNu = JSON.parse(JSON.stringify(vhostP.headers)); + Object.keys(phNu).forEach(function (phNuK) { + ph[phNuK] = phNu[phNuK]; + }); + } } + Object.keys(ph).forEach(function (phk) { + if (typeof ph[phk] == "string") ph[phk] = ph[phk].replace(/\{path\}/g, req.url); + }); return ph; } - //Make HTTP/1.x API-based scripts compatible with HTTP/2.0 API - if (configJSON.enableHTTP2 == true && request.httpVersion == "2.0") { - try { - //Set HTTP/1.x methods (to prevent process warnings) - response.writeHeadNodeApi = response.writeHead; - response.setHeaderNodeApi = response.setHeader; - response.writeHead = function (a, b, c) { - var table = c; - if (typeof (b) == "object") table = b; - if (table == undefined) table = this.tHeaders; - table = JSON.parse(JSON.stringify(table)); - if (table["content-type"] != undefined && table["Content-Type"] != undefined) { - delete table["content-type"]; - } - delete table["transfer-encoding"]; - delete table["connection"]; - delete table["keep-alive"]; - delete table["upgrade"]; - if(res.stream && res.stream.destroyed) { - return false; - } else { - return res.writeHeadNodeApi(a, table); - } - }; + // Make HTTP/1.x API-based scripts compatible with HTTP/2.0 API + if (configJSON.enableHTTP2 == true && req.httpVersion == "2.0") { + // Set HTTP/1.x methods (to prevent process warnings) + res.writeHeadNodeApi = res.writeHead; + res.setHeaderNodeApi = res.setHeader; - response.setHeader = function (a, b) { - if (a != "transfer-encoding" && a != "connection" && a != "keep-alive" && a != "upgrade") return response.setHeaderNodeApi(a, b); + res.writeHead = function (a, b, c) { + var table = c; + if (typeof (b) == "object") table = b; + if (table == undefined) table = this.tHeaders; + if (table == undefined) table = {}; + table = JSON.parse(JSON.stringify(table)); + Object.keys(table).forEach(function (key) { + var al = key.toLowerCase(); + if (al == "transfer-encoding" || al == "connection" || al == "keep-alive" || al == "upgrade") delete table[key]; + }); + if (res.stream && res.stream.destroyed) { return false; - }; - //Set HTTP/1.x headers - if (!request.headers.host) request.headers.host = request.headers[":authority"]; - (request.headers[":path"] == undefined ? (function () {})() : request.url = request.headers[":path"]); - request.protocol = request.headers[":scheme"]; - var headers = [":path" || ":method"]; - for (var i = 0; i < headers.length; i++) { - if (request.headers[headers[i]] == undefined) { - var cheaders = getCustomHeaders(); - cheaders["Content-Type"] = "text/html; charset=utf-8"; - response.writeHead(400, "Bad Request", cheaders); - response.write("
400 Bad Request
The request you sent is invalid.
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + (request.headers[":authority"] == undefined ? "" : " on " + request.headers[":authority"]) + "
"); - response.end(); - return; - } + } else { + return res.writeHeadNodeApi(a, table); } - } catch (ex) { - var cheaders = getCustomHeaders(); - cheaders["Content-Type"] = "text/html; charset=utf-8"; - cheaders[":status"] = "500"; - response.stream.respond(cheaders); - response.stream.write("500 Internal Server Error
The server had an unexpected error. Below, error stack is shown:
" + (stackHidden ? "[error stack hidden]" : generateErrorStack(ex)).replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ") + "Please contact with developer/administrator of the website.
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + (request.headers[":authority"] == undefined ? "" : " on " + request.headers[":authority"]) + "
"); - response.stream.end(); - return; + }; + res.setHeader = function (headerName, headerValue) { + var al = headerName.toLowerCase(); + if (al != "transfer-encoding" && al != "connection" && al != "keep-alive" && al != "upgrade") return res.setHeaderNodeApi(headerName, headerValue); + return false; + }; + + // Set HTTP/1.x headers + if (!req.headers.host) req.headers.host = req.headers[":authority"]; + if (!req.url) req.url = req.headers[":path"]; + if (!req.protocol) req.protocol = req.headers[":scheme"]; + if (!req.method) req.method = req.headers[":method"]; + if (req.headers[":path"] == undefined || req.headers[":method"] == undefined) { + var err = new Error("Either \":path\" or \":method\" pseudoheader is missing."); + if(Buffer.alloc) err.rawPacket = Buffer.alloc(0); + reqerrhandler(err, req.socket, fromMain); } } - if (request.headers["x-svr-js-from-main-thread"] == "true") { - response.writeHead(204, "No Content", getCustomHeaders()); - var lastStatusCode = null; - response.end(); + if (req.headers["x-svr-js-from-main-thread"] == "true" && req.socket && (!req.socket.remoteAddress || req.socket.remoteAddress == "::1" || req.socket.remoteAddress == "::ffff:127.0.0.1" || req.socket.remoteAddress == "127.0.0.1" || req.socket.remoteAddress == "localhost" || req.socket.remoteAddress == host || req.socket.remoteAddress == "::ffff:" + host)) { + var headers = getCustomHeaders(); + res.writeHead(204, http.STATUS_CODES[204], headers); + res.end(); return; } - request.url = fixNodeMojibakeURL(request.url); + req.url = fixNodeMojibakeURL(req.url); var headWritten = false; - response.writeHeadNative = response.writeHead; - response.writeHead = function (a, b, c) { - if (!(headWritten && process.isBun && a === lastStatusCode && b === undefined && c === undefined)) { + var lastStatusCode = null; + res.writeHeadNative = res.writeHead; + res.writeHead = function (code, codeDescription, headers) { + if (!(headWritten && process.isBun && code === lastStatusCode && codeDescription === undefined && codeDescription === undefined)) { if (headWritten) { process.emitWarning("res.writeHead called multiple times.", { code: "WARN_SVRJS_MULTIPLE_WRITEHEAD" }); - return response; + return res; } else { headWritten = true; } - if (parseInt(a) >= 400 && parseInt(a) <= 599) { - serverconsole.errmessage("Server responded with " + a.toString() + " code."); + if (code >= 400 && code <= 599) { + if (code >= 400 && code <= 499) err4xxcounter++; + else if (code >= 500 && code <= 599) err5xxcounter++; + serverconsole.errmessage("Server responded with " + code.toString() + " code."); } else { - serverconsole.resmessage("Server responded with " + a.toString() + " code."); + serverconsole.resmessage("Server responded with " + code.toString() + " code."); } - lastStatusCode = a; + if (typeof codeDescription != "string" && http.STATUS_CODES[code]) { + if (!headers) headers = codeDescription; + codeDescription = http.STATUS_CODES[code]; + } + lastStatusCode = code; } - response.writeHeadNative(a, b, c); + res.writeHeadNative(code, codeDescription, headers); }; - if (wwwredirect) { - var hostname = request.headers.host.split[":"]; - var hostport = null; - if (hostname.length > 1 && (hostname[0] != "[" || hostname[hostname.length - 1] != "]")) hostport = hostname.pop(); - hostname = hostname.join(":"); + + var finished = false; + res.on("finish", function () { + if (!finished) { + finished = true; + serverconsole.locmessage("Client disconnected."); + } + }); + res.on("close", function () { + if (!finished) { + finished = true; + serverconsole.locmessage("Client disconnected."); + } + }); + var isProxy = false; + if (req.url[0] != "/" && req.url != "*") isProxy = true; + serverconsole.locmessage("Somebody connected to " + (secure && fromMain ? ((typeof sport == "number" ? "port " : "socket ") + sport) : ((typeof port == "number" ? "port " : "socket ") + port)) + "..."); + + if (req.socket == null) { + serverconsole.errmessage("Client socket is null!!!"); + return; } - if (wwwredirect && hostname == domain && hostname.indexOf("www.") != 0) { - var lloc = (request.socket.encrypted ? "https" : "http") + "://www." + hostname + (hostport ? ":" + hostport : ""); - try { - var rheaders = getCustomHeaders(); - rheaders["Location"] = lloc + (request.url.replace(/\/+/g, "/")); - response.writeHead(301, "Redirect to WWW", rheaders); - response.end(); - } catch (ex) { - var cheaders = getCustomHeaders(); - cheaders["Content-Type"] = "text/html; charset=utf-8"; - res.writeHead(500, "Internal Server Error", cheaders); - res.write("500 Internal Server Error
The server had an unexpected error. Below, error stack is shown:
" + (stackHidden ? "[error stack hidden]" : generateErrorStack(ex)).replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ") + "Please contact with developer/administrator of the website.
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + (req.headers.host == undefined ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
"); - response.end(); - } - } else { - var finished = false; - response.on("finish", function () { - if (!finished) { - finished = true; - serverconsole.locmessage("Client disconnected."); - } - }); - response.on("close", function () { - if (!finished) { - finished = true; - serverconsole.locmessage("Client disconnected."); - } - }); - var isProxy = false; - if (request.url.indexOf("/") != 0 && request.url != "*") isProxy = true; - serverconsole.locmessage("Somebody connected to port " + (secure && fromMain ? sport : port) + "..."); - if (request.socket == null) { - serverconsole.errmessage("Client socket is null!!!"); - return; + // Set up X-Forwarded-For + var reqip = req.socket.remoteAddress; + var reqport = req.socket.remotePort; + var oldip = ""; + var oldport = ""; + var isForwardedValid = true; + if (enableIPSpoofing) { + if (req.headers["x-forwarded-for"] != undefined) { + var preparedReqIP = req.headers["x-forwarded-for"].split(",")[0].replace(/ /g, ""); + var preparedReqIPvalid = net.isIP(preparedReqIP); + if (preparedReqIPvalid) { + if (preparedReqIPvalid == 4 && req.socket.remoteAddress && req.socket.remoteAddress.indexOf(":") > -1) preparedReqIP = "::ffff:" + preparedReqIP; + reqip = preparedReqIP; + reqport = null; + try { + oldport = req.socket.remotePort; + oldip = req.socket.remoteAddress; + req.socket.realRemotePort = reqport; + req.socket.realRemoteAddress = reqip; + req.socket.originalRemotePort = oldport; + req.socket.originalRemoteAddress = oldip; + res.socket.realRemotePort = reqport; + res.socket.realRemoteAddress = reqip; + res.socket.originalRemotePort = oldport; + res.socket.originalRemoteAddress = oldip; + } catch (err) { + // Address setting failed + } + } else { + isForwardedValid = false; + } + } + } + + reqcounter++; + + // Process the Host header + var oldHostHeader = req.headers.host; + if (typeof req.headers.host == "string") { + req.headers.host = req.headers.host.toLowerCase(); + if (!req.headers.host.match(/^\.+$/)) req.headers.host = req.headers.host.replace(/\.$/g, ""); + } + + serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants " + (req.method == "GET" ? "content in " : (req.method == "POST" ? "to post content in " : (req.method == "PUT" ? "to add content in " : (req.method == "DELETE" ? "to delete content in " : (req.method == "PATCH" ? "to patch content in " : "to access content using " + req.method + " method in "))))) + ((req.headers.host == undefined || isProxy) ? "" : req.headers.host) + req.url); + if (req.headers["user-agent"] != undefined) serverconsole.reqmessage("Client uses " + req.headers["user-agent"]); + if (oldHostHeader && oldHostHeader != req.headers.host) serverconsole.resmessage("Host name rewritten: " + oldHostHeader + " => " + req.headers.host); + + var acceptEncoding = req.headers["accept-encoding"]; + if (!acceptEncoding) acceptEncoding = ""; + + // Header and footer placeholders + var head = ""; + var foot = ""; + + function responseEnd(body) { + // If body is Buffer, then it is converted to String anyway. + res.write(head + body + foot); + res.end(); + } + + // Server error calling method + function callServerError(errorCode, extName, stack, ch) { + if (typeof errorCode !== "number") { + throw new TypeError("HTTP error code parameter needs to be an integer."); } - var reqip = request.socket.remoteAddress; - var reqport = request.socket.remotePort; - var oldip = ""; - var oldport = ""; - var isForwardedValid = true; - if(enableIPSpoofing) { - if (request.headers["x-forwarded-for"] != undefined) { - var preparedReqIP = request.headers["x-forwarded-for"].split(",")[0].replace(/ /g, ""); - var preparedReqIPvalid = net.isIP(preparedReqIP); - if(preparedReqIPvalid) { - if (preparedReqIPvalid == 4 && request.socket.remoteAddress && request.socket.remoteAddress.indexOf(":") > -1) preparedReqIP = "::ffff:" + preparedReqIP; - reqip = preparedReqIP; - reqport = null; - try { - oldport = request.socket.remotePort; - oldip = request.socket.remoteAddress; - request.socket.realRemotePort = reqport; - request.socket.realRemoteAddress = reqip; - request.socket.originalRemotePort = oldport; - request.socket.originalRemoteAddress = oldip; - response.socket.realRemotePort = reqport; - response.socket.realRemoteAddress = reqip; - response.socket.originalRemotePort = oldport; - response.socket.originalRemoteAddress = oldip; - } catch (err) { - // Address setting failed + // Handle optional parameters + if (extName && typeof extName === "object") { + ch = stack; + stack = extName; + extName = undefined; + } else if (typeof extName !== "string" && extName !== null && extName !== undefined) { + throw new TypeError("Extension name parameter needs to be a string."); + } + + if (stack && typeof stack === "object" && Object.prototype.toString.call(stack) !== "[object Error]") { + ch = stack; + stack = undefined; + } else if (typeof stack !== "object" && typeof stack !== "string" && stack) { + throw new TypeError("Error stack parameter needs to be either a string or an instance of Error object."); + } + + // Determine error file + function getErrorFileName(list, callback, _i) { + function medCallback(p) { + if (p) callback(p); + else { + if (errorCode == 404) { + fs.access(page404, fs.constants.F_OK, function (err) { + if (err) { + fs.access("." + errorCode.toString(), fs.constants.F_OK, function (err) { + try { + if (err) { + callback(errorCode.toString() + ".html"); + } else { + callback("." + errorCode.toString()); + } + } catch (err2) { + callServerError(500, err2); + } + }); + } else { + try { + callback(page404); + } catch (err2) { + callServerError(500, err2); + } + } + }); + } else { + fs.access("." + errorCode.toString(), fs.constants.F_OK, function (err) { + try { + if (err) { + callback(errorCode.toString() + ".html"); + } else { + callback("." + errorCode.toString()); + } + } catch (err2) { + callServerError(500, err2); + } + }); } - } else { - isForwardedValid = false; } } + + if (!_i) _i = 0; + if (_i >= list.length) { + medCallback(false); + return; + } + + if (list[_i].scode != errorCode || !(matchHostname(list[_i].host) && ipMatch(list[_i].ip, req.socket ? req.socket.localAddress : undefined))) { + getErrorFileName(list, callback, _i + 1); + return; + } else { + fs.access(list[_i].path, fs.constants.F_OK, function (err) { + if (err) { + getErrorFileName(list, callback, _i + 1); + } else { + medCallback(list[_i].path); + } + }); + } } - if (!isProxy) serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants " + (request.method == "GET" ? "content in " : (request.method == "POST" ? "to post content in " : (request.method == "PUT" ? "to add content in " : (request.method == "DELETE" ? "to delete content in " : (request.method == "PATCH" ? "to patch content in " : "to access content using " + request.method + " method in "))))) + (request.headers.host == undefined ? "" : request.headers.host) + request.url); - else serverconsole.reqmessage("Client " + ((!reqip || reqip == "") ? "[unknown client]" : (reqip + ((reqport && reqport !== 0) && reqport != "" ? ":" + reqport : ""))) + " wants " + (request.method == "GET" ? "content in " : (request.method == "POST" ? "to post content in " : (request.method == "PUT" ? "to add content in " : (request.method == "DELETE" ? "to delete content in " : (request.method == "PATCH" ? "to patch content in " : "to access content using " + request.method + " method in "))))) + request.url); - if (request.headers["user-agent"] != undefined) serverconsole.reqmessage("Client uses " + request.headers["user-agent"]); - - var acceptEncoding = request.headers["accept-encoding"]; - if (!acceptEncoding) acceptEncoding = ""; - - // Header and footer placeholders - var head = ""; - var foot = ""; - var fd = ""; - - function responseEnd(d) { - if (d === undefined) d = fd; - res.write(head + d + foot); - res.end(); - } - - // function responseEndGzip(d) { - // if (d === undefined) d = fd; - // zlib.gzip(head + d + foot, function (err, buff) { - // if (err) { - // throw err; - // } else { - // res.write(buff); - // res.end(); - // } - // }); - // } - // - // function responseEndDeflate(d) { - // if (d === undefined) d = fd; - // zlib.deflateRaw(head + d + foot, function (err, buff) { - // if (err) { - // throw err; - // } else { - // res.write(buff); - // res.end(); - // } - // }); - // } - - var req = request; // request var is req = request - var res = response; // response var is res = response - - //Error descriptions - var serverErrorDescs = { - 200: "The request succeeded! :)", - 201: "New resource has been created.", - 202: "The request has been accepted for processing, but the processing has not been completed.", - 400: "The request you made is invalid.", - 401: "You need to authenticate yourself in order to access the requested file.", - 402: "You need to pay in order to access the requested file.", - 403: "You don't have access to the requested file.", - 404: "The requested file doesn't exist. If you have typed URL manually, then please check the spelling.", - 405: "Method used to access the requested file isn't allowed.", - 406: "The request is capable of generating only not acceptable content.", - 407: "You need to authenticate yourself in order to use the proxy.", - 408: "You have timed out.", - 409: "The request you sent conflicts with the current state of the server.", - 410: "The requested file is permanently deleted.", - 411: "Content-Length property is required.", - 412: "The server doesn't meet preconditions you put in the request.", - 413: "The request you sent is too large.", - 414: "URL you sent is too long.", - 415: "The media type of request you sent isn't supported by the server.", - 416: "Content-Range you sent is unsatisfiable.", - 417: "Expectation in Expect property couldn't be satisfied.", - 418: "The server (teapot) can't brew any coffee! ;)", - 421: "The request you made isn't intended for this server.", - 422: "The server couldn't process content sent by you.", - 423: "The requested file is locked.", - 424: "The request depends on another failed request.", - 425: "The server is unwilling to risk processing a request that might be replayed.", - 426: "You need to upgrade protocols you use to request a file.", - 428: "The request you sent needs to be conditional, but it isn't.", - 429: "You sent too much requests to the server.", - 431: "The request you sent contains headers, that are too large.", - 451: "The requested file isn't accessible for legal reasons.", - 500: "The server had an unexpected error. Below, the error stack is shown:{stack}Please contact with developer/administrator at {contact}.", - 501: "The request requires use of a function, which isn't currently implemented by the server.", - 502: "The server had an error, while it was acting as a gateway.
Please contact with developer/administrator at {contact}.", - 503: "The service provided by the server is currently unavailable, possibly due to maintenance downtime or capacity problems. Please try again later.
Please contact with developer/administrator at {contact}.", - 504: "The server couldn't get response in time, while it was acting as a gateway.
Please contact with developer/administrator at {contact}.", - 505: "The server doesn't support HTTP version used in the request.", - 506: "Variant header is configured to be engaged in content negotiation.
Please contact with developer/administrator at {contact}.", - 507: "The server ran out of disk space neccessary to complete the request.", - 508: "The server detected an infinite loop while processing the request.", - 509: "The server has it's bandwidth limit exceeded.
Please contact with developer/administrator at {contact}.",
- 510: "The server requires an extended HTTP request. The request you made isn't an extended HTTP request.",
- 511: "You need to authenticate yourself in order to get network access.",
- 598: "The server couldn't get response in time, while it was acting as a proxy.",
- 599: "The server couldn't connect in time, while it was acting as a proxy."
- };
-
- // Server error calling method
- function callServerError(errorCode, extName, stack, ch) {
- if (typeof errorCode !== "number") {
- throw new TypeError("HTTP error code parameter needs to be an integer.");
- }
-
- // Handle optional parameters
- if (extName && typeof extName === "object") {
- ch = stack;
- stack = extName;
- extName = undefined;
- } else if (typeof extName !== "string" && extName !== null && extName !== undefined) {
- throw new TypeError("Extension name parameter needs to be a string.");
- }
-
- if (stack && typeof stack === "object" && Object.prototype.toString.call(stack) !== "[object Error]") {
- ch = stack;
- stack = undefined;
- } else if (typeof stack !== "object" && typeof stack !== "string" && stack) {
- throw new TypeError("Error stack parameter needs to be either a string or an instance of Error object.");
- }
-
- var errorFile = errorCode.toString() + ".html";
- var errorFile2 = "." + errorCode.toString();
- if (fs.existsSync(errorFile2)) errorFile = errorFile2;
- if (errorCode == 404 && fs.existsSync(page404)) errorFile = page404;
-
+ getErrorFileName(errorPages, function (errorFile) {
// Generate error stack if not provided
if (Object.prototype.toString.call(stack) === "[object Error]") stack = generateErrorStack(stack);
if (stack === undefined) stack = generateErrorStack(new Error("Unknown error"));
@@ -3099,7 +3183,7 @@ if (!cluster.isPrimary) {
if (stackHidden) stack = "[error stack hidden]";
// Validate the error code and handle unknown codes
- if (serverErrorDescs[errorCode] === undefined) {
+ if (serverHTTPErrorDescs[errorCode] === undefined) {
callServerError(501, extName, stack);
} else {
var cheaders = getCustomHeaders();
@@ -3107,17 +3191,16 @@ if (!cluster.isPrimary) {
// Process custom headers if provided
if (ch) {
var chon = Object.keys(cheaders);
- var chn = Object.keys(ch);
- for (var i = 0; i < chn.length; i++) {
- var nhn = chn[i];
+ Object.keys(ch).forEach(function (chnS) {
+ var nhn = chnS;
for (var j = 0; j < chon.length; j++) {
- if (chon[j].toLowerCase() == chn[i].toLowerCase()) {
+ if (chon[j].toLowerCase() == chnS.toLowerCase()) {
nhn = chon[j];
break;
}
}
- if (ch[chn[i]]) cheaders[nhn] = ch[chn[i]];
- }
+ if (ch[chnS]) cheaders[nhn] = ch[chnS];
+ });
}
cheaders["Content-Type"] = "text/html; charset=utf-8";
@@ -3129,513 +3212,831 @@ if (!cluster.isPrimary) {
fs.readFile(errorFile, function (err, data) {
try {
if (err) throw err;
- response.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders);
- fd += data.toString().replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, request.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")); // Replace placeholders in error response
- responseEnd();
- } catch (ex) {
+ res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders);
+ responseEnd(data.toString().replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverHTTPErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "
").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, req.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]"))); // Replace placeholders in error response
+ } catch (err) {
var additionalError = 500;
// Handle additional error cases
- if (ex.code == "ENOENT") {
+ if (err.code == "ENOENT") {
additionalError = 404;
- } else if (ex.code == "ENOTDIR") {
- additionalError = 404;
- } else if (ex.code == "EACCES") {
+ } else if (err.code == "ENOTDIR") {
+ additionalError = 404; // Assume that file doesn't exist
+ } else if (err.code == "EACCES") {
additionalError = 403;
- } else if (ex.code == "ENAMETOOLONG") {
+ } else if (err.code == "ENAMETOOLONG") {
additionalError = 414;
- } else if (ex.code == "EMFILE") {
+ } else if (err.code == "EMFILE") {
additionalError = 503;
- } else if (ex.code == "ELOOP") {
+ } else if (err.code == "ELOOP") {
additionalError = 508;
}
- response.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders);
- response.write(("
{errorMessage}
{errorDesc}
" + ((additionalError == 404) ? "" : "Additionally, a {additionalError} error occurred while loading an error page.
") + "{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, request.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")).replace(/{additionalError}/g, additionalError.toString())); // Replace placeholders in error response - response.end(); + res.writeHead(errorCode, http.STATUS_CODES[errorCode], cheaders); + res.write(("
{errorMessage}
{errorDesc}
" + ((additionalError == 404) ? "" : "Additionally, a {additionalError} error occurred while loading an error page.
") + "{server}
").replace(/{errorMessage}/g, errorCode.toString() + " " + http.STATUS_CODES[errorCode].replace(/&/g, "&").replace(//g, ">")).replace(/{errorDesc}/g, serverHTTPErrorDescs[errorCode]).replace(/{stack}/g, stack.replace(/&/g, "&").replace(//g, ">").replace(/\r\n/g, "").replace(/\n/g, "
").replace(/\r/g, "
").replace(/ {2}/g, " ")).replace(/{path}/g, req.url.replace(/&/g, "&").replace(//g, ">")).replace(/{server}/g, "" + ((exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS") + ((!exposeModsInErrorPages || extName == undefined) ? "" : " " + extName)).replace(/&/g, "&").replace(//g, ">") + ((req.headers.host == undefined || isProxy) ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">"))).replace(/{contact}/g, serverAdmin.replace(/&/g, "&").replace(//g, ">").replace(/\./g, "[dot]").replace(/@/g, "[at]")).replace(/{additionalError}/g, additionalError.toString())); // Replace placeholders in error response + res.end(); } }); } - } + }); + } - try { - head = fs.existsSync("./.head") ? fs.readFileSync("./.head").toString() : (fs.existsSync("./head.html") ? fs.readFileSync("./head.html").toString() : ""); // header - foot = fs.existsSync("./.foot") ? fs.readFileSync("./.foot").toString() : (fs.existsSync("./foot.html") ? fs.readFileSync("./foot.html").toString() : ""); // footer - } catch (err) { - callServerError(500, undefined, generateErrorStack(err)); - } - - function redirect(dest, isTemporary, headers) { - if (headers === undefined) headers = getCustomHeaders(); - headers["Location"] = dest; - var scode = isTemporary ? 302 : 301; - res.writeHead(scode, http.STATUS_CODES[scode], headers); - serverconsole.resmessage("Client redirected to " + dest); - res.end(); + try { + head = fs.existsSync("./.head") ? fs.readFileSync("./.head").toString() : (fs.existsSync("./head.html") ? fs.readFileSync("./head.html").toString() : ""); // header + foot = fs.existsSync("./.foot") ? fs.readFileSync("./.foot").toString() : (fs.existsSync("./foot.html") ? fs.readFileSync("./foot.html").toString() : ""); // footer + } catch (err) { + callServerError(500, err); + } + + // Function to perform HTTP redirection to a specified destination URL + function redirect(destination, isTemporary, keepMethod, customHeaders) { + // If keepMethod is a object, then save it to customHeaders + if (typeof keepMethod == "object") customHeaders = keepMethod; + + // If isTemporary is a object, then save it to customHeaders + if (typeof isTemporary == "object") customHeaders = isTemporary; + + // If customHeaders are not provided, get the default custom headers + if (customHeaders === undefined) customHeaders = getCustomHeaders(); + + // Set the "Location" header to the destination URL + customHeaders["Location"] = destination; + + // Determine the status code for redirection based on the isTemporary and keepMethod flags + var statusCode = keepMethod ? (isTemporary ? 307 : 308) : (isTemporary ? 302 : 301); + + // Write the response header with the appropriate status code and message + res.writeHead(statusCode, http.STATUS_CODES[statusCode], customHeaders); + + // Log the redirection message + serverconsole.resmessage("Client redirected to " + destination); + + // End the response + res.end(); + + // Return from the function + return; + } + + // Function to parse incoming POST data from the request + function parsePostData(options, callback) { + // If the request method is not POST, return a 405 Method Not Allowed error + if (req.method != "POST") { + // Get the default custom headers and add "Allow" header with value "POST" + var customHeaders = getCustomHeaders(); + customHeaders["Allow"] = "POST"; + + // Call the server error function with 405 status code and custom headers + callServerError(405, customHeaders); return; } - function parsePostData(options, callback) { - if (req.method != "POST") { - var h = getCustomHeaders(); - h["Allow"] = "POST"; - callServerError(405, undefined, undefined, h); + // Set formidableOptions to options, if provided; otherwise, set it to an empty object + var formidableOptions = options ? options : {}; + + // If no callback is provided, set the callback to options and reset formidableOptions + if (!callback) { + callback = options; + formidableOptions = {}; + } + + // If the formidable module had an error, call the server error function with 500 status code and error stack + if (formidable._errored) callServerError(500, formidable._errored); + + // Create a new formidable form + var form = formidable(formidableOptions); + + // Parse the request and process the fields and files + form.parse(req, function (err, fields, files) { + // If there was an error, call the server error function with status code determined by error + if (err) { + if (err.httpCode) callServerError(err.httpCode); + else callServerError(400); return; } - var formidableOptions = options; - if (!callback) { - callback = options; - formidableOptions = {}; - } - if (formidable._errored) callServerError(500, undefined, generateErrorStack(formidable._errored)); - var form = formidable(formidableOptions); - form.parse(req, function (err, fields, files) { - if (err) { - if(err.httpCode) callServerError(err.httpCode); - else callServerError(400); - return; + // Otherwise, call the provided callback function with the parsed fields and files + callback(fields, files); + }); + } + + + // Function to parse a URL string into a URL object + function parseURL(uri) { + // Prepare the path (remove multiple slashes) + var preparedURI = uri.replace(/^\/{2,}/,"/"); + // Check if the URL API is available (Node.js version >= 10) + if (typeof URL !== "undefined" && url.Url) { + try { + // Create a new URL object using the provided URI and base URL + var uobject = new URL(preparedURI, "http" + (req.socket.encrypted ? "s" : "") + "://" + (req.headers.host ? req.headers.host : (domain ? domain : "unknown.invalid"))); + + // Create a new URL object (similar to deprecated url.Url) + var nuobject = new url.Url(); + + // Set properties of the new URL object from the provided URL + if (preparedURI.indexOf("/") != -1) nuobject.slashes = true; + if (uobject.protocol != "") nuobject.protocol = uobject.protocol; + if (uobject.username != "" && uobject.password != "") nuobject.auth = uobject.username + ":" + uobject.password; + if (uobject.host != "") nuobject.host = uobject.host; + if (uobject.hostname != "") nuobject.hostname = uobject.hostname; + if (uobject.port != "") nuobject.port = uobject.port; + if (uobject.pathname != "") nuobject.pathname = uobject.pathname; + if (uobject.search != "") nuobject.search = uobject.search; + if (uobject.hash != "") nuobject.hash = uobject.hash; + if (uobject.href != "") nuobject.href = uobject.href; + + // Adjust the pathname and href properties if the URI doesn't start with "/" + if (preparedURI[0] != "/") { + if (nuobject.pathname) { + nuobject.pathname = nuobject.pathname.substring(1); + nuobject.href = nuobject.pathname + (nuobject.search ? nuobject.search : ""); + } } - callback(fields, files); + + // Set the path property as a combination of pathname and search + if (nuobject.pathname) { + nuobject.path = nuobject.pathname + (nuobject.search ? nuobject.search : ""); + } + + // Initialize the query object and copy URL search parameters to it + nuobject.query = {}; + uobject.searchParams.forEach(function (value, key) { + nuobject.query[key] = value; + }); + + // Return the created URL object + return nuobject; + } catch (err) { + // If there was an error using the URL API, fall back to deprecated url.parse + return url.parse(preparedURI, true); + } + } else { + // If the URL API is not available, fall back to deprecated url.parse + return url.parse(preparedURI, true); + } + } + + // Authenticated user variable + var authUser = null; + + // URL-related objects. + var uobject = {} + try { + uobject = parseURL(req.url); + } catch (err) { + // Return an 400 error + callServerError(400); + serverconsole.errmessage("Bad request!"); + return; + } + var search = uobject.search; + var href = uobject.pathname; + var ext = path.extname(href).toLowerCase(); + ext = ext.substring(1, ext.length + 1); + var decodedHref = ""; + try { + decodedHref = decodeURIComponent(href); + } catch (err) { + // Return an 400 error + callServerError(400); + serverconsole.errmessage("Bad request!"); + return; + } + + if (req.headers["expect"] && req.headers["expect"] != "100-continue") { + // Expectations not met. + callServerError(417); + return; + } + + // Mod execution function + function modExecute(mods, ffinals) { + // Prepare modFunction + var modFunction = ffinals; + var useMods = mods.slice(); + + if (isProxy) { + // Get list of forward proxy mods + useMods = []; + mods.forEach(function (mod) { + if (mod.proxyCallback !== undefined) useMods.push(mod); }); } - function urlParse(uri) { - if (typeof URL != "undefined" && url.Url) { - try { - var uobject = new URL(uri, "http" + (req.socket.encrypted ? "s" : "") + "://" + (req.headers.host ? req.headers.host : (domain ? domain : "unknown.invalid"))); - var nuobject = new url.Url(); - if (uri.indexOf("/") != -1) nuobject.slashes = true; - if (uobject.protocol != "") nuobject.protocol = uobject.protocol; - if (uobject.username != "" && uobject.password != "") nuobject.auth = uobject.username + ":" + uobject.password; - if (uobject.host != "") nuobject.host = uobject.host; - if (uobject.hostname != "") nuobject.hostname = uobject.hostname; - if (uobject.port != "") nuobject.port = uobject.port; - if (uobject.pathname != "") nuobject.pathname = uobject.pathname; - if (uobject.search != "") nuobject.search = uobject.search; - if (uobject.hash != "") nuobject.hash = uobject.hash; - if (uobject.href != "") nuobject.href = uobject.href; - if (uri.indexOf("/") != 0) { - if (nuobject.pathname) { - nuobject.pathname = nuobject.pathname.substr(1); - nuobject.href = nuobject.pathname + (nuobject.search ? nuobject.search : ""); - } - } - if (nuobject.pathname) { - nuobject.path = nuobject.pathname + (nuobject.search ? nuobject.search : ""); - } - nuobject.query = {}; - uobject.searchParams.forEach(function (value, key) { - nuobject.query[key] = value; - }); - return nuobject; - } catch (ex) { - return url.parse(uri, true); - } + useMods.reverse().forEach(function (modO) { + modFunction = modO.callback(req, res, serverconsole, responseEnd, href, ext, uobject, search, "index.html", users, page404, head, foot, "", modFunction, configJSON, callServerError, getCustomHeaders, origHref, redirect, parsePostData, authUser); + }); + + // Execute modFunction + modFunction(); + } + + var vresCalled = false; + + function vres(req, res, serverconsole, responseEnd, href, ext, uobject, search, defaultpage, users, page404, head, foot, fd, callServerError, getCustomHeaders, origHref, redirect, parsePostData, authUser) { + return function () { + if (vresCalled) { + process.emitWarning("elseCallback() invoked multiple times.", { + code: "WARN_SVRJS_MULTIPLE_ELSECALLBACK" + }); + return; } else { - return url.parse(uri, true); + vresCalled = true; } - } - var uobject = urlParse(req.url); - var search = uobject.search; - var href = uobject.pathname; - var ext = path.extname(href).toLowerCase(); - ext = ext.substr(1, ext.length); - var decodedHref = ""; - try { - decodedHref = decodeURIComponent(href); - } catch (ex) { - //Return 400 error - callServerError(400); - serverconsole.errmessage("Bad request!"); - return; - } + // Function to check the level of a path relative to the web root + function checkPathLevel(path) { + // Split the path into an array of components based on "/" + var pathComponents = path.split("/"); - if (req.headers["expect"] && req.headers["expect"] != "100-continue") { - callServerError(417); - return; - } + // Initialize counters for level up (..) and level down (.) + var levelUpCount = 0; + var levelDownCount = 0; - //MOD EXCECUTION FUNCTION - function modExecute(mods, ffinals) { - var modFunction = ffinals; - var useMods = mods; - - if(isProxy) { - useMods = []; - for (var i = 0; i < mods.length; i++) { - if (mods[i].proxyCallback !== undefined) proxyMods.push(mods[i]); - } - } - - for (var i = useMods.length - 1; i >= 0; i--) { - modFunction = useMods[i].callback(req, res, serverconsole, responseEnd, href, ext, uobject, search, "index.html", users, page404, head, foot, fd, modFunction, configJSON, callServerError, getCustomHeaders, origHref, redirect, parsePostData); - } - modFunction(); - } - - var vresCalled = false; - - function vres(req, res, serverconsole, responseEnd, href, ext, uobject, search, defaultpage, users, page404, head, foot, fd, callServerError, getCustomHeaders, origHref, redirect, parsePostData) { - return function () { - if (vresCalled) { - process.emitWarning("elseCallback() invoked multiple times.", { - code: "WARN_SVRJS_MULTIPLE_ELSECALLBACK" - }); - return; - } else { - vresCalled = true; - } - // function responseEndGzip(d) { - // if (d === undefined) d = fd; - // zlib.gzip(head + d + foot, function (err, buff) { - // if (err) { - // throw err; - // } else { - // res.write(buff); - // res.end(); - // } - // }); - // } - // - // function responseEndDeflate(d) { - // if (d === undefined) d = fd; - // zlib.deflateRaw(head + d + foot, function (err, buff) { - // if (err) { - // throw err; - // } else { - // res.write(buff); - // res.end(); - // } - // }); - // } - - function responseEnd(d) { - if (d === undefined) d = fd; - res.write(head + d + foot); - res.end(); - } - - if (req.socket == null) { - serverconsole.errmessage("Client socket is null!!!"); - return; - } - - var reqip = req.socket.remoteAddress; - var reqport = req.socket.remotePort; - var oldip = ""; - var oldport = ""; - var isForwardedValid = true; - if(enableIPSpoofing) { - if (req.headers["x-forwarded-for"] != undefined) { - var preparedReqIP = req.headers["x-forwarded-for"].split(",")[0].replace(/ /g, ""); - var preparedReqIPvalid = net.isIP(preparedReqIP); - if(preparedReqIPvalid) { - if (preparedReqIPvalid == 4 && req.socket.remoteAddress && req.socket.remoteAddress.indexOf(":") > -1) preparedReqIP = "::ffff:" + preparedReqIP; - reqip = preparedReqIP; - reqport = null; - try { - oldport = req.socket.remotePort; - oldip = req.socket.remoteAddress; - req.socket.realRemotePort = reqport; - req.socket.realRemoteAddress = reqip; - req.socket.originalRemotePort = oldport; - req.socket.originalRemoteAddress = oldip; - res.socket.realRemotePort = reqport; - res.socket.realRemoteAddress = reqip; - res.socket.originalRemotePort = oldport; - res.socket.originalRemoteAddress = oldip; - } catch (err) { - // Address setting failed - } - } else { - isForwardedValid = false; - } + // Loop through the path components + for (var i = 0; i < pathComponents.length; i++) { + // If the component is "..", decrement the levelUpCount + if (".." === pathComponents[i]) { + levelUpCount--; + } + // If the component is not "." or an empty string, increment the levelDownCount + else if ("." !== pathComponents[i] && "" !== pathComponents[i]) { + levelDownCount++; } } - function checkLevel(e) { - for (var n = e.split("/"), r = 0, t = 0; t < n.length; t += 1) ".." == n[t] ? r -= 1 : "." !== n[t] && "" !== n[t] && (r += 1); - return r; - } + // Calculate the overall level by subtracting levelUpCount from levelDownCount + var overallLevel = levelDownCount - levelUpCount; - if (isProxy) { - var eheaders = getCustomHeaders(); - eheaders["Content-Type"] = "text/html; charset=utf-8"; - res.writeHead(501, "Not implemented", eheaders); - res.write("
Proxy not implemented
SVR.JS doesn't support proxy without proxy mod. If you're administator of this server, then install this mod in order to use SVR.JS as a proxy.
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + "
"); - res.end(); - serverconsole.errmessage("SVR.JS doesn't support proxy without proxy mod."); - return; - } + // Return the overall level + return overallLevel; + } - if (req.method == "OPTIONS") { - var hdss = getCustomHeaders(); - hdss["Allow"] = "GET, POST, HEAD, OPTIONS"; - res.writeHead(204, "No Content", hdss); - res.end(); - return; - } else if (req.method != "GET" && req.method != "POST" && req.method != "HEAD") { - callServerError(405); - serverconsole.errmessage("Invaild method: " + req.method); - return; - } - if (allowStatus && (href == "/svrjsstatus.svr" || (os.platform() == "win32" && href.toLowerCase() == "/svrjsstatus.svr"))) { - function formatRelativeTime(relativeTime) { - var days = Math.floor(relativeTime / 60 / (60 * 24)); - var dateDiff = new Date(relativeTime * 1000); - return days + " days, " + dateDiff.getUTCHours() + " hours, " + dateDiff.getUTCMinutes() + " minutes, " + dateDiff.getUTCSeconds() + " seconds"; - } - var hdhds = getCustomHeaders(); - hdhds["Content-Type"] = "text/html; charset=utf-8"; - res.writeHead(200, "OK", hdhds); - res.end((head == "" ? "SVR.JS status" + (request.headers.host == undefined ? "" : " for " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
Server version: " + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + "Current time: " + new Date().toString() + "
Thread start time: " + new Date(new Date() - (process.uptime() * 1000)).toString() + "
Thread uptime: " + formatRelativeTime(Math.floor(process.uptime())) + "
OS uptime: " + formatRelativeTime(os.uptime()) + "
Total request count: " + reqcounter + "
Average request rate: " + (Math.round((reqcounter / process.uptime()) * 100) / 100) + " requests/s" + (process.memoryUsage ? ("
Memory usage of thread: " + sizify(process.memoryUsage().rss) + "B") : "") + (process.cpuUsage ? ("
Total CPU usage by thread: u" + (process.cpuUsage().user / 1000) + "ms s" + (process.cpuUsage().system / 1000) + "ms - " + (Math.round((((process.cpuUsage().user + process.cpuUsage().system) / 1000000) / process.uptime()) * 1000) / 1000) + "%") : "") + "
Thread PID: " + process.pid + "
" + (foot == "" ? "" : foot)); - return; - } + if (isProxy) { + var eheaders = getCustomHeaders(); + eheaders["Content-Type"] = "text/html; charset=utf-8"; + res.writeHead(501, http.STATUS_CODES[501], eheaders); + res.write("
Proxy not implemented
SVR.JS doesn't support proxy without proxy mod. If you're administator of this server, then install this mod in order to use SVR.JS as a proxy.
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + "
"); + res.end(); + serverconsole.errmessage("SVR.JS doesn't support proxy without proxy mod."); + return; + } - ///////////////////////////////////////////// - ////THERE IS NO MORE "THE BOOK OF ZSOIE"!//// - //// But it's in easteregg.tar.gz mod... //// - ///////////////////////////////////////////// - - var pth = decodeURIComponent(href).replace(/\/+/g, "/").substr(1); - fs.stat("./" + pth, function (err, stats) { - if (err) { - if (err.code == "ENOENT") { - callServerError(404); - serverconsole.errmessage("Resource not found."); - } else if (err.code == "ENOTDIR") { - callServerError(404); - serverconsole.errmessage("Resource not found."); - } else if (err.code == "EACCES") { - callServerError(403); - serverconsole.errmessage("Access denied."); - } else if (err.code == "ENAMETOOLONG") { - callServerError(414); - } else if (err.code == "EMFILE") { - callServerError(503); - } else if (err.code == "ELOOP") { - callServerError(508); + if (req.method == "OPTIONS") { + var hdss = getCustomHeaders(); + hdss["Allow"] = "GET, POST, HEAD, OPTIONS"; + res.writeHead(204, http.STATUS_CODES[204], hdss); + res.end(); + return; + } else if (req.method != "GET" && req.method != "POST" && req.method != "HEAD") { + callServerError(405); + serverconsole.errmessage("Invaild method: " + req.method); + return; + } + + if (allowStatus && (href == "/svrjsstatus.svr" || (os.platform() == "win32" && href.toLowerCase() == "/svrjsstatus.svr"))) { + function formatRelativeTime(relativeTime) { + var days = Math.floor(relativeTime / 60 / (60 * 24)); + var dateDiff = new Date(relativeTime * 1000); + return days + " days, " + dateDiff.getUTCHours() + " hours, " + dateDiff.getUTCMinutes() + " minutes, " + dateDiff.getUTCSeconds() + " seconds"; + } + var statusBody = ""; + statusBody += "Server version: " + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + ""; + + //Those entries are just dates and numbers converted/formatted to strings, so no escaping is needed. + statusBody += "Current time: " + new Date().toString() + "
Thread start time: " + new Date(new Date() - (process.uptime() * 1000)).toString() + "
Thread uptime: " + formatRelativeTime(Math.floor(process.uptime())) + "
"; + statusBody += "OS uptime: " + formatRelativeTime(os.uptime()) + "
"; + statusBody += "Total request count: " + reqcounter + "
"; + statusBody += "Average request rate: " + (Math.round((reqcounter / process.uptime()) * 100) / 100) + " requests/s
"; + statusBody += "Client errors (4xx): " + err4xxcounter + "
"; + statusBody += "Server errors (5xx): " + err5xxcounter + "
"; + statusBody += "Average error rate: " + (Math.round(((err4xxcounter + err5xxcounter) / reqcounter) * 10000) / 100) + "%
"; + statusBody += "Malformed HTTP requests: " + malformedcounter; + if (process.memoryUsage) statusBody += "
Memory usage of thread: " + sizify(process.memoryUsage().rss, true) + "B"; + if (process.cpuUsage) statusBody += "
Total CPU usage by thread: u" + (process.cpuUsage().user / 1000) + "ms s" + (process.cpuUsage().system / 1000) + "ms - " + (Math.round((((process.cpuUsage().user + process.cpuUsage().system) / 1000000) / process.uptime()) * 1000) / 1000) + "%"; + statusBody += "
Thread PID: " + process.pid + "
"; + + var hdhds = getCustomHeaders(); + hdhds["Content-Type"] = "text/html; charset=utf-8"; + res.writeHead(200, http.STATUS_CODES[200], hdhds); + res.end((head == "" ? "
SVR.JS status" + (req.headers.host == undefined ? "" : " for " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
" + statusBody + (foot == "" ? "" : foot)); + return; + } + + var pth = decodeURIComponent(href).replace(/\/+/g, "/").substring(1); + var readFrom = "./" + pth; + var dirImagesMissing = false; + fs.stat(readFrom, function (err, stats) { + if (err) { + if (err.code == "ENOENT") { + if (__dirname != process.cwd() && pth.match(/^\.dirimages\/(?:(?!\.png$).)+\.png$/)) { + dirImagesMissing = true; + readFrom = __dirname + "/" + pth; } else { - callServerError(500, undefined, generateErrorStack(err)); + callServerError(404); + serverconsole.errmessage("Resource not found."); + return; } + } else if (err.code == "ENOTDIR") { + callServerError(404); // Assume that file doesn't exist. + serverconsole.errmessage("Resource not found."); + return; + } else if (err.code == "EACCES") { + callServerError(403); + serverconsole.errmessage("Access denied."); + return; + } else if (err.code == "ENAMETOOLONG") { + callServerError(414); + return; + } else if (err.code == "EMFILE") { + callServerError(503); + return; + } else if (err.code == "ELOOP") { + callServerError(508); // The symbolic link loop is detected during file system operations. + serverconsole.errmessage("Symbolic link loop detected."); + return; + } else { + callServerError(500, err); return; } - - //Check if index file exists - if (req.url == "/" || stats.isDirectory()) { - fs.stat(("./" + pth + "/index.html").replace(/\/+/g, "/"), function (e, s) { - if (e || !s.isFile()) { - fs.stat(("./" + pth + "/index.htm").replace(/\/+/g, "/"), function (e, s) { - if (e || !s.isFile()) { - fs.stat(("./" + pth + "/index.xhtml").replace(/\/+/g, "/"), function (e, s) { - if (e || !s.isFile()) { - properServe() + } + + // Check if index file exists + if (!dirImagesMissing && (req.url == "/" || stats.isDirectory())) { + fs.stat((readFrom + "/index.html").replace(/\/+/g, "/"), function (e, s) { + if (e || !s.isFile()) { + fs.stat((readFrom + "/index.htm").replace(/\/+/g, "/"), function (e, s) { + if (e || !s.isFile()) { + fs.stat((readFrom + "/index.xhtml").replace(/\/+/g, "/"), function (e, s) { + if (e || !s.isFile()) { + properDirectoryListingAndStaticFileServe(); + } else { + stats = s; + pth = (pth + "/index.xhtml").replace(/\/+/g, "/"); + ext = "xhtml"; + readFrom = "./" + pth; + properDirectoryListingAndStaticFileServe(); + } + }); + } else { + stats = s; + pth = (pth + "/index.htm").replace(/\/+/g, "/"); + ext = "htm"; + readFrom = "./" + pth; + properDirectoryListingAndStaticFileServe(); + } + }); + } else { + stats = s; + pth = (pth + "/index.html").replace(/\/+/g, "/"); + ext = "html"; + readFrom = "./" + pth; + properDirectoryListingAndStaticFileServe(); + } + }); + } else if (dirImagesMissing) { + fs.stat(readFrom, function (e, s) { + if (e || !s.isFile()) { + properDirectoryListingAndStaticFileServe(); + } else { + stats = s; + properDirectoryListingAndStaticFileServe(); + } + }); + } else { + properDirectoryListingAndStaticFileServe(); + } + + function properDirectoryListingAndStaticFileServe() { + if (stats.isFile()) { + var acceptEncoding = req.headers["accept-encoding"]; + if (!acceptEncoding) acceptEncoding = ""; + + var filelen = stats.size; + + // ETag code + var fileETag = undefined; + if (configJSON.enableETag == undefined || configJSON.enableETag) { + fileETag = generateETag(href, stats); + // Check if the client's request matches the ETag value (If-None-Match) + var clientETag = req.headers["if-none-match"]; + if (clientETag === fileETag) { + var headers = getCustomHeaders(); + headers.ETag = clientETag; + res.writeHead(304, http.STATUS_CODES[304], headers); + res.end(); + return; + } + + // Check if the client's request doesn't match the ETag value (If-Match) + var ifMatchETag = req.headers["if-match"]; + if (ifMatchETag && ifMatchETag !== "*" && ifMatchETag !== fileETag) { + var headers = getCustomHeaders(); + headers.ETag = clientETag; + callServerError(412, headers); + return; + } + } + + // Handle partial content request + if (ext != "html" && req.headers["range"]) { + try { + var rhd = getCustomHeaders(); + rhd["Accept-Ranges"] = "bytes"; + rhd["Content-Range"] = "bytes */" + filelen; + var regexmatch = req.headers["range"].match(/bytes=([0-9]*)-([0-9]*)/); + if (!regexmatch) { + callServerError(416, rhd); + } else { + // Process the partial content request + var beginOrig = regexmatch[1]; + var endOrig = regexmatch[2]; + var begin = 0; + var end = filelen - 1; + if (beginOrig == "" && endOrig == "") { + callServerError(416, rhd); + return; + } else if (beginOrig == "") { + begin = end - parseInt(endOrig) + 1; + } else { + begin = parseInt(beginOrig); + if (endOrig != "") end = parseInt(endOrig); + } + if (begin > end || begin < 0 || begin > filelen - 1) { + callServerError(416, rhd); + return; + } + if (end > filelen - 1) end = filelen - 1; + rhd["Content-Range"] = "bytes " + begin + "-" + end + "/" + filelen; + rhd["Content-Length"] = end - begin + 1; + if (!(mime.contentType(ext) == false) && ext != "") rhd["Content-Type"] = mime.contentType(ext); + if (fileETag) rhd["ETag"] = fileETag; + + if (req.method != "HEAD") { + var readStream = fs.createReadStream(readFrom, { + start: begin, + end: end + }); + readStream.on("error", function (err) { + if (err.code == "ENOENT") { + callServerError(404); + serverconsole.errmessage("Resource not found."); + } else if (err.code == "ENOTDIR") { + callServerError(404); // Assume that file doesn't exist. + serverconsole.errmessage("Resource not found."); + } else if (err.code == "EACCES") { + callServerError(403); + serverconsole.errmessage("Access denied."); + } else if (err.code == "ENAMETOOLONG") { + callServerError(414); + } else if (err.code == "EMFILE") { + callServerError(503); + } else if (err.code == "ELOOP") { + callServerError(508); // The symbolic link loop is detected during file system operations. + serverconsole.errmessage("Symbolic link loop detected."); } else { - stats = s; - pth = (pth + "/index.xhtml").replace(/\/+/g, "/"); - ext = "xhtml"; - properServe(); + callServerError(500, err); + } + }).on("open", function () { + try { + res.writeHead(206, http.STATUS_CODES[206], rhd); + readStream.pipe(res); + serverconsole.resmessage("Client successfully received content."); + } catch (err) { + callServerError(500, err); } }); } else { - stats = s; - pth = (pth + "/index.htm").replace(/\/+/g, "/"); - ext = "htm"; - properServe(); + res.writeHead(206, http.STATUS_CODES[206], rhd); + res.end(); } - }); - } else { - stats = s; - pth = (pth + "/index.html").replace(/\/+/g, "/"); - ext = "html"; - properServe(); - } - }); - } else { - properServe(); - } - - function properServe() { - if (stats.isDirectory()) { - if (configJSON.enableDirectoryListing || configJSON.enableDirectoryListing === undefined) { - var dheaders = getCustomHeaders(); - dheaders["Content-Type"] = "text/html; charset=utf-8"; - res.writeHead(200, http.STATUS_CODES[200], dheaders); - var heada = fs.existsSync(("." + decodeURIComponent(href) + "/.dirhead").replace(/\/+/g, "/")) ? fs.readFileSync(("." + decodeURIComponent(href) + "/.dirhead").replace(/\/+/g, "/")).toString() : ((fs.existsSync(("." + decodeURIComponent(href) + "/HEAD.html").replace(/\/+/g, "/")) && (os.platform != "win32" || href != "/")) ? fs.readFileSync(("." + decodeURIComponent(href) + "/HEAD.html").replace(/\/+/g, "/")).toString() : ""); // header - var foota = fs.existsSync(("." + decodeURIComponent(href) + "/.dirfoot").replace(/\/+/g, "/")) ? fs.readFileSync(("." + decodeURIComponent(href) + "/.dirfoot").replace(/\/+/g, "/")).toString() : ((fs.existsSync(("." + decodeURIComponent(href) + "/FOOT.html").replace(/\/+/g, "/")) && (os.platform != "win32" || href != "/")) ? fs.readFileSync(("." + decodeURIComponent(href) + "/FOOT.html").replace(/\/+/g, "/")).toString() : ""); // footer - //Check if header has HTML tag - var headerHasHTMLTag = heada.replace(/|$)/gs, "").match(/Directory: " + decodeURIComponent(origHref).replace(/&/g, "&").replace(//g, ">") + "
| Filename | Size | Date | |
|---|---|---|---|
![\"[RET]\"](\"/.dirimages/return.png\") | Return |
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + (req.headers.host == undefined ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
" + foota + (configJSON.enableDirectoryListingWithDefaultHead == undefined || configJSON.enableDirectoryListingWithDefaultHead == false || (fs.existsSync("./foot.html") == false && fs.existsSync("./.foot") == false) || foot == "" || foot == " " || foot == "\r\n" || foot == "\n" ? "" : foot); - if (fs.existsSync(("." + req.url.split("?")[0] + "/.maindesc").replace(/\/+/g, "/"))) { - htmlFoot = "" + fs.readFileSync(("." + req.url.split("?")[0] + "/.maindesc").replace(/\/+/g, "/")) + htmlFoot; } - fs.readdir("." + decodeURIComponent(href), function (err, list) { - try { - if (err) throw err; - list = list.sort(); + } catch (err) { + callServerError(500, err); + } + } else { + // Helper function to check if compression is allowed for the file + function canCompress(path, list) { + var canCompress = true; + for (var i = 0; i < list.length; i++) { + if (createRegex(list[i], true).test(path)) { + canCompress = false; + break; + } + } + return canCompress; + } - function getStatsForAllFilesI(fileList, callback, prefix, pushArray, index) { - if (fileList.length == 0) { - callback(pushArray); - return; - } - fs.stat((prefix + "/" + fileList[index]).replace(/\/+/g, "/"), function (err, stats) { - if (err) { - fs.lstat((prefix + "/" + fileList[index]).replace(/\/+/g, "/"), function (err, stats) { - if (err) { - pushArray.push({ - name: fileList[index], - stats: null, - errored: true - }); - if (index < fileList.length - 1) { - getStatsForAllFilesI(fileList, callback, prefix, pushArray, index + 1); - } else { - callback(pushArray); - } - } else { - pushArray.push({ - name: fileList[index], - stats: stats, - errored: true - }); - if (index < fileList.length - 1) { - getStatsForAllFilesI(fileList, callback, prefix, pushArray, index + 1); - } else { - callback(pushArray); - } - } - }); - } else { - pushArray.push({ - name: fileList[index], - stats: stats, - errored: false - }); - if (index < fileList.length - 1) { - getStatsForAllFilesI(fileList, callback, prefix, pushArray, index + 1); - } else { - callback(pushArray); - } - } - }); - } + var useBrotli = (ext != "br" && filelen > 256 && zlib.createBrotliCompress && acceptEncoding.match(/\bbr\b/)); + var useDeflate = (ext != "zip" && filelen > 256 && acceptEncoding.match(/\bdeflate\b/)); + var useGzip = (ext != "gz" && filelen > 256 && acceptEncoding.match(/\bgzip\b/)); - function getStatsForAllFiles(fileList, prefix, callback) { - if (!prefix) prefix = ""; - getStatsForAllFilesI(fileList, callback, prefix, [], 0); - } + var isCompressable = true; + try { + // Check for files not to compressed and compression enabling setting. Also check for browser quirks and adjust compression accordingly + if((!useBrotli && !useDeflate && !useGzip) || configJSON.enableCompression !== true || !canCompress(href, dontCompress)) { + isCompressable = false; // Compression is disabled + } else if (ext != "html" && ext != "htm" && ext != "xhtml" && ext != "xht" && ext != "shtml") { + if (/^Mozilla\/4\.[0-9]+(( *\[[^)]*\] *| *)\([^)\]]*\))? *$/.test(req.headers["user-agent"]) && !(/https?:\/\/|[bB][oO][tT]|[sS][pP][iI][dD][eE][rR]|[sS][uU][rR][vV][eE][yY]|MSIE/.test(req.headers["user-agent"]))) { + isCompressable = false; // Netscape 4.x doesn't handle compressed data properly outside of HTML documents. + } else if (/^w3m\/[^ ]*$/.test(req.headers["user-agent"])) { + isCompressable = false; // w3m doesn't handle compressed data properly outside of HTML documents. + } + } else { + if (/^Mozilla\/4\.0[6-8](( *\[[^)]*\] *| *)\([^)\]]*\))? *$/.test(req.headers["user-agent"]) && !(/https?:\/\/|[bB][oO][tT]|[sS][pP][iI][dD][eE][rR]|[sS][uU][rR][vV][eE][yY]|MSIE/.test(req.headers["user-agent"]))) { + isCompressable = false; // Netscape 4.06-4.08 doesn't handle compressed data properly. + } + } + } catch (err) { + callServerError(500, err); + return; + } - getStatsForAllFiles(list, "." + decodeURIComponent(href), function (filelist) { - function checkEXT(filename, ext) { - if (filename.length < ext.length) return false; - return (filename.toLowerCase().indexOf(ext) == (filename.length - ext.length)); - } - var statsa = []; - for (var i = 0; i < filelist.length; i++) { - if (filelist[i].name[0] !== ".") { - var estats = filelist[i].stats; - var ename = filelist[i].name; - if (filelist[i].errored) { - if (estats) { - statsa.push("
![[BAD]](\"/.dirimages/bad.png\")
Directory: " + decodeURIComponent(origHref).replace(/&/g, "&").replace(//g, ">") + "
| Filename | Size | Date | |
|---|---|---|---|
| Return |
" + (exposeServerVersion ? "SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" : "SVR.JS").replace(/&/g, "&").replace(//g, ">") + (req.headers.host == undefined ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
" + customDirListingFooter + (!configJSON.enableDirectoryListingWithDefaultHead || foot == "" ? "" : foot); + + if (fs.existsSync("." + decodeURIComponent(href) + "/.maindesc".replace(/\/+/g, "/"))) { + htmlFoot = "" + fs.readFileSync("." + decodeURIComponent(href) + "/.maindesc".replace(/\/+/g, "/")) + htmlFoot; + } + + fs.readdir("." + decodeURIComponent(href), function (err, list) { + try { + if (err) throw err; + list = list.sort(); + + // Function to get stats for all files in the directory + function getStatsForAllFilesI(fileList, callback, prefix, pushArray, index) { + if (fileList.length == 0) { + callback(pushArray); + return; + } + + fs.stat((prefix + "/" + fileList[index]).replace(/\/+/g, "/"), function (err, stats) { + if (err) { + fs.lstat((prefix + "/" + fileList[index]).replace(/\/+/g, "/"), function (err, stats) { + pushArray.push({ + name: fileList[index], + stats: err ? null : stats, + errored: true + }); + if (index < fileList.length - 1) { + getStatsForAllFilesI(fileList, callback, prefix, pushArray, index + 1); + } else { + callback(pushArray); + } + }); + } else { + pushArray.push({ + name: fileList[index], + stats: stats, + errored: false + }); + if (index < fileList.length - 1) { + getStatsForAllFilesI(fileList, callback, prefix, pushArray, index + 1); + } else { + callback(pushArray); + } + } + }); + } + + // Wrapper function to get stats for all files + function getStatsForAllFiles(fileList, prefix, callback) { + if (!prefix) prefix = ""; + getStatsForAllFilesI(fileList, callback, prefix, [], 0); + } + + // Get stats for all files in the directory and generate the listing + getStatsForAllFiles(list, "." + decodeURIComponent(href), function (filelist) { + var directoryListingRows = []; + for (var i = 0; i < filelist.length; i++) { + if (filelist[i].name[0] !== ".") { + var estats = filelist[i].stats; + var ename = filelist[i].name; + var eext = ename.match(/\.([^.]+)$/); + eext = eext ? eext[1] : ""; + var emime = eext ? mime.contentType(eext) : false; + if (filelist[i].errored) { + directoryListingRows.push( + "
ACCESS DENIED
Request from " + reqip + " is denied. The client is now in the blacklist.
SVR.JS/" + version + " (" + getOS() + "; " + (process.isBun ? ("Bun/v" + process.versions.bun + "; like Node.JS/" + process.version) : ("Node.JS/" + process.version)) + ")" + (req.headers.host == undefined ? "" : " on " + String(req.headers.host).replace(/&/g, "&").replace(//g, ">")) + "
SVR.JS 3.4.42 Tests
-Directory
+SVR.JS 3.14.16 Tests
+Directory (without trailing slash)
Directory (with query)
- +Directory (personalized)
404 Error
- -500 Error
-Server Side Javascript
Proxy test
-URL rewriting test (/invoke500/aprilfools => /invoke500.svr?aprilfools)
- +URL rewriting test (/testdir_rewritten => /testdir)
+