Spaces:

TianTianr
/

sy

Paused

sy / src /middleware /validateFileName.js

吴松泽

main

c120a1c 11 months ago

1.64 kB

import path from 'node:path';

/**
 * Checks if an object has a toString method.
 * @param {object} o Object to check
 * @returns {boolean} True if the object has a toString method, false otherwise
 */
function hasToString(o) {
    return o != null && typeof o.toString === 'function';
}

/**
 * Gets a middleware function that validates the field in the request body.
 * @param {string} fieldName Field name
 * @returns {import('express').RequestHandler} Middleware function
 */
export function getFileNameValidationFunction(fieldName) {
    /**
    * Validates the field in the request body.
    * @param {import('express').Request} req Request object
    * @param {import('express').Response} res Response object
    * @param {import('express').NextFunction} next Next middleware
    */
    return function validateAvatarUrlMiddleware(req, res, next) {
        if (req.body && fieldName in req.body && (typeof req.body[fieldName] === 'string' || hasToString(req.body[fieldName]))) {
            const forbiddenRegExp = path.sep === '/' ? /[/\x00]/ : /[/\x00\\]/;
            if (forbiddenRegExp.test(req.body[fieldName])) {
                console.error('An error occurred while validating the request body', {
                    handle: req.user.profile.handle,
                    path: req.originalUrl,
                    field: fieldName,
                    value: req.body[fieldName],
                });
                return res.sendStatus(400);
            }
        }

        next();
    };
}

const avatarUrlValidationFunction = getFileNameValidationFunction('avatar_url');
export default avatarUrlValidationFunction;

	import path from 'node:path';

	/**
	* Checks if an object has a toString method.
	* @param {object} o Object to check
	* @returns {boolean} True if the object has a toString method, false otherwise
	*/
	function hasToString(o) {
	return o != null && typeof o.toString === 'function';
	}

	/**
	* Gets a middleware function that validates the field in the request body.
	* @param {string} fieldName Field name
	* @returns {import('express').RequestHandler} Middleware function
	*/
	export function getFileNameValidationFunction(fieldName) {
	/**
	* Validates the field in the request body.
	* @param {import('express').Request} req Request object
	* @param {import('express').Response} res Response object
	* @param {import('express').NextFunction} next Next middleware
	*/
	return function validateAvatarUrlMiddleware(req, res, next) {
	if (req.body && fieldName in req.body && (typeof req.body[fieldName] === 'string' \|\| hasToString(req.body[fieldName]))) {
	const forbiddenRegExp = path.sep === '/' ? /[/\x00]/ : /[/\x00\\]/;
	if (forbiddenRegExp.test(req.body[fieldName])) {
	console.error('An error occurred while validating the request body', {
	handle: req.user.profile.handle,
	path: req.originalUrl,
	field: fieldName,
	value: req.body[fieldName],
	});
	return res.sendStatus(400);
	}
	}

	next();
	};
	}

	const avatarUrlValidationFunction = getFileNameValidationFunction('avatar_url');
	export default avatarUrlValidationFunction;