Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 14 additions & 13 deletions lib/XMLHttpRequest.js
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@
var fs = require('fs');
var os = require('os');
var path = require('path');
var fileURLToPath = require('url').fileURLToPath;
var spawn = require('child_process').spawn;
/**
* Constants
Expand Down Expand Up @@ -675,7 +676,7 @@ function XMLHttpRequest(opts) {
}

if (settings.async) {
fs.readFile(unescape(url.pathname), function(error, data) {
fs.readFile(fileURLToPath(url), function(error, data) {
if (error) {
handleError(error, error.errno || -1);
} else {
Expand All @@ -689,7 +690,7 @@ function XMLHttpRequest(opts) {
} else {
try {
dataMap.status = 200;
const syncData = fs.readFileSync(unescape(url.pathname));
const syncData = fs.readFileSync(fileURLToPath(url));
// Use self.responseType to create the correct self.responseType, self.response.
dataMap.responseURL = settings.url;
createResponse(syncData, "");
Expand Down Expand Up @@ -931,17 +932,17 @@ function XMLHttpRequest(opts) {
+ " response.destroy();"
+ " ++redirects_count;"
+ " if (redirects_count > maxRedirects) {"
+ " fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR-REDIRECT: Too many redirects', 'utf8');"
+ " fs.unlinkSync('" + syncFile + "');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile) + ", 'NODE-XMLHTTPREQUEST-ERROR-REDIRECT: Too many redirects', 'utf8');"
+ " fs.unlinkSync(" + JSON.stringify(syncFile) + ");"
Comment on lines +935 to +936
Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better to put these into consts instead of calling stringify every time.

+ " return;"
+ " }"
+ " try {"
+ " url = new URL(response.headers.location, url);"
+ " if (url.protocol !== 'https:' && url.protocol !== 'http:') throw 'bad protocol';"
+ " }"
+ " catch (e) {"
+ " fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR-REDIRECT: Unsafe redirect', 'utf8');"
+ " fs.unlinkSync('" + syncFile + "');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile) + ", 'NODE-XMLHTTPREQUEST-ERROR-REDIRECT: Unsafe redirect', 'utf8');"
+ " fs.unlinkSync(" + JSON.stringify(syncFile) + ");"
+ " return;"
+ " };"
+ " isSsl = url.protocol === 'https:';"
Expand All @@ -964,17 +965,17 @@ function XMLHttpRequest(opts) {
+ " });"
+ " response.on('end', function() {"
+ " responseData = concat(buffers);"
+ " fs.writeFileSync('" + contentFile + "', JSON.stringify({err: null, data: { url: url.href, statusCode: response.statusCode, statusText: response.statusMessage, headers: response.headers }}), 'utf8');"
+ " fs.writeFileSync('" + contentFile + ".bin', responseData);"
+ " fs.unlinkSync('" + syncFile + "');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile) + ", JSON.stringify({err: null, data: { url: url.href, statusCode: response.statusCode, statusText: response.statusMessage, headers: response.headers }}), 'utf8');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile + '.bin') + ", responseData);"
+ " fs.unlinkSync(" + JSON.stringify(syncFile) + ");"
+ " });"
+ " response.on('error', function(error) {"
+ " fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');"
+ " fs.unlinkSync('" + syncFile + "');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile) + ", 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');"
+ " fs.unlinkSync(" + JSON.stringify(syncFile) + ");"
+ " });"
+ " }).on('error', function(error) {"
+ " fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');"
+ " fs.unlinkSync('" + syncFile + "');"
+ " fs.writeFileSync(" + JSON.stringify(contentFile) + ", 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');"
+ " fs.unlinkSync(" + JSON.stringify(syncFile) + ");"
+ " });"
+ " " + (data ? "req.write('" + JSON.stringify(data).slice(1,-1).replace(/'/g, "\\'") + "');":"")
+ " req.end();"
Expand Down
7 changes: 6 additions & 1 deletion tests/test-disallow-fs-resources.js
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
var assert = require("assert")
, path = require("path")
, XMLHttpRequest = require("../lib/XMLHttpRequest").XMLHttpRequest
, xhr;

Expand All @@ -19,7 +20,11 @@ xhr.onreadystatechange = function() {
};

// Async
var url = "file://" + __dirname + "/testdata.txt";
var p = (__dirname + "/testdata.txt").replaceAll(path.sep, path.posix.sep);
Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think replaceAll is available on Node.js 13 (the minimum supported Node.js version for this project). MDN states it's available from Node.js 15 onwards. Is there a simple alternative?

if (!p.startsWith('/')) {
p = "/" + p;
}
var url = "file://" + p;
xhr.open("GET", url);
xhr.send();

Expand Down
10 changes: 5 additions & 5 deletions tests/test-max-redirects.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,11 @@ var runTest = function () {
let xhr = new XMLHttpRequest({ maxRedirects: 10 });
xhr.open("GET", "http://localhost:8888/redirectingResource/10", false);
xhr.onreadystatechange = function() {
if (xhr.readyState === 4) {
// assert.equal(xhr.getRequestHeader('Location'), '');
assert.equal(xhr.responseText, "Hello World");
console.log("safe redirects count: done");
}
if (xhr.readyState === 4) {
// assert.equal(xhr.getRequestHeader('Location'), '');
assert.equal(xhr.responseText, "Hello World");
console.log("safe redirects count: done");
}
};
xhr.send();
} catch(e) {
Expand Down
2 changes: 1 addition & 1 deletion tests/test-request-protocols-binary-data.js
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
* Use xhr.responseType = "arraybuffer".
*/
'use strict';
var XMLHttpRequest = require("../lib/XMLHttpRequest").XMLHttpRequest
var XMLHttpRequest = require("../lib/XMLHttpRequest").XMLHttpRequest;

const supressConsoleOutput = true;
function log (_) {
Expand Down
Loading