2018-02-13 11:17:05 -06:00
|
|
|
import 'multer'
|
2021-05-10 04:13:41 -05:00
|
|
|
import { UploadFilesForCheck } from 'express'
|
2019-07-05 06:54:32 -05:00
|
|
|
import { sep } from 'path'
|
2021-05-10 04:13:41 -05:00
|
|
|
import validator from 'validator'
|
2021-12-29 07:44:58 -06:00
|
|
|
import { isShortUUID, shortToUUID } from '@shared/extra-utils'
|
2017-09-07 08:27:35 -05:00
|
|
|
|
2017-06-10 15:15:25 -05:00
|
|
|
function exists (value: any) {
|
2016-07-31 13:58:43 -05:00
|
|
|
return value !== undefined && value !== null
|
|
|
|
}
|
|
|
|
|
2019-07-05 06:54:32 -05:00
|
|
|
function isSafePath (p: string) {
|
|
|
|
return exists(p) &&
|
|
|
|
(p + '').split(sep).every(part => {
|
2019-07-05 08:28:49 -05:00
|
|
|
return [ '..' ].includes(part) === false
|
2019-07-05 06:54:32 -05:00
|
|
|
})
|
|
|
|
}
|
|
|
|
|
2023-05-04 08:29:34 -05:00
|
|
|
function isSafeFilename (filename: string, extension?: string) {
|
|
|
|
const regex = extension
|
|
|
|
? new RegExp(`^[a-z0-9-]+\\.${extension}$`)
|
|
|
|
: new RegExp(`^[a-z0-9-]+\\.[a-z0-9]{1,8}$`)
|
|
|
|
|
|
|
|
return typeof filename === 'string' && !!filename.match(regex)
|
2023-04-21 07:55:10 -05:00
|
|
|
}
|
|
|
|
|
2023-02-27 02:44:03 -06:00
|
|
|
function isSafePeerTubeFilenameWithoutExtension (filename: string) {
|
|
|
|
return filename.match(/^[a-z0-9-]+$/)
|
|
|
|
}
|
|
|
|
|
2021-05-12 07:51:17 -05:00
|
|
|
function isArray (value: any): value is any[] {
|
2016-07-31 13:58:43 -05:00
|
|
|
return Array.isArray(value)
|
|
|
|
}
|
|
|
|
|
2019-01-08 04:26:41 -06:00
|
|
|
function isNotEmptyIntArray (value: any) {
|
|
|
|
return Array.isArray(value) && value.every(v => validator.isInt('' + v)) && value.length !== 0
|
2018-12-26 03:36:24 -06:00
|
|
|
}
|
|
|
|
|
2021-07-29 03:27:24 -05:00
|
|
|
function isNotEmptyStringArray (value: any) {
|
|
|
|
return Array.isArray(value) && value.every(v => typeof v === 'string' && v.length !== 0) && value.length !== 0
|
|
|
|
}
|
|
|
|
|
2019-01-29 01:37:25 -06:00
|
|
|
function isArrayOf (value: any, validator: (value: any) => boolean) {
|
|
|
|
return isArray(value) && value.every(v => validator(v))
|
|
|
|
}
|
|
|
|
|
2017-10-24 12:41:09 -05:00
|
|
|
function isDateValid (value: string) {
|
|
|
|
return exists(value) && validator.isISO8601(value)
|
|
|
|
}
|
|
|
|
|
|
|
|
function isIdValid (value: string) {
|
|
|
|
return exists(value) && validator.isInt('' + value)
|
|
|
|
}
|
|
|
|
|
|
|
|
function isUUIDValid (value: string) {
|
|
|
|
return exists(value) && validator.isUUID('' + value, 4)
|
|
|
|
}
|
|
|
|
|
2021-07-28 09:40:21 -05:00
|
|
|
function areUUIDsValid (values: string[]) {
|
|
|
|
return isArray(values) && values.every(v => isUUIDValid(v))
|
|
|
|
}
|
|
|
|
|
2017-10-24 12:41:09 -05:00
|
|
|
function isIdOrUUIDValid (value: string) {
|
|
|
|
return isIdValid(value) || isUUIDValid(value)
|
|
|
|
}
|
|
|
|
|
2018-05-09 04:23:14 -05:00
|
|
|
function isBooleanValid (value: any) {
|
2018-01-03 03:12:36 -06:00
|
|
|
return typeof value === 'boolean' || (typeof value === 'string' && validator.isBoolean(value))
|
|
|
|
}
|
|
|
|
|
2020-09-25 09:19:35 -05:00
|
|
|
function isIntOrNull (value: any) {
|
|
|
|
return value === null || validator.isInt('' + value)
|
|
|
|
}
|
|
|
|
|
2021-06-28 10:30:59 -05:00
|
|
|
// ---------------------------------------------------------------------------
|
2019-03-07 10:06:00 -06:00
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
function isFileValid (options: {
|
|
|
|
files: UploadFilesForCheck
|
2020-12-08 14:16:10 -06:00
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
maxSize: number | null
|
|
|
|
mimeTypeRegex: string | null
|
2020-12-08 14:16:10 -06:00
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
field?: string
|
2020-12-08 14:16:10 -06:00
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
optional?: boolean // Default false
|
|
|
|
}) {
|
|
|
|
const { files, mimeTypeRegex, field, maxSize, optional = false } = options
|
2020-12-08 14:16:10 -06:00
|
|
|
|
2018-02-13 11:17:05 -06:00
|
|
|
// Should have files
|
|
|
|
if (!files) return optional
|
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
const fileArray = isArray(files)
|
|
|
|
? files
|
|
|
|
: files[field]
|
|
|
|
|
|
|
|
if (!fileArray || !isArray(fileArray) || fileArray.length === 0) {
|
2018-02-13 11:17:05 -06:00
|
|
|
return optional
|
|
|
|
}
|
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
// The file exists
|
2020-01-31 09:56:52 -06:00
|
|
|
const file = fileArray[0]
|
2022-11-15 08:00:19 -06:00
|
|
|
if (!file?.originalname) return false
|
2018-02-13 11:17:05 -06:00
|
|
|
|
2018-06-22 08:42:55 -05:00
|
|
|
// Check size
|
2018-07-25 15:01:25 -05:00
|
|
|
if ((maxSize !== null) && file.size > maxSize) return false
|
2018-06-22 08:42:55 -05:00
|
|
|
|
2022-02-11 03:51:33 -06:00
|
|
|
if (mimeTypeRegex === null) return true
|
|
|
|
|
|
|
|
return checkMimetypeRegex(file.mimetype, mimeTypeRegex)
|
|
|
|
}
|
|
|
|
|
|
|
|
function checkMimetypeRegex (fileMimeType: string, mimeTypeRegex: string) {
|
|
|
|
return new RegExp(`^${mimeTypeRegex}$`, 'i').test(fileMimeType)
|
2018-02-13 11:17:05 -06:00
|
|
|
}
|
|
|
|
|
2016-07-31 13:58:43 -05:00
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
2021-06-28 10:30:59 -05:00
|
|
|
function toCompleteUUID (value: string) {
|
2022-12-28 07:42:48 -06:00
|
|
|
if (isShortUUID(value)) {
|
|
|
|
try {
|
|
|
|
return shortToUUID(value)
|
|
|
|
} catch {
|
2023-07-26 03:48:30 -05:00
|
|
|
return ''
|
2022-12-28 07:42:48 -06:00
|
|
|
}
|
|
|
|
}
|
2021-06-28 10:30:59 -05:00
|
|
|
|
|
|
|
return value
|
|
|
|
}
|
|
|
|
|
2021-07-28 09:40:21 -05:00
|
|
|
function toCompleteUUIDs (values: string[]) {
|
|
|
|
return values.map(v => toCompleteUUID(v))
|
|
|
|
}
|
|
|
|
|
2021-06-28 10:30:59 -05:00
|
|
|
function toIntOrNull (value: string) {
|
|
|
|
const v = toValueOrNull(value)
|
|
|
|
|
|
|
|
if (v === null || v === undefined) return v
|
|
|
|
if (typeof v === 'number') return v
|
|
|
|
|
|
|
|
return validator.toInt('' + v)
|
|
|
|
}
|
|
|
|
|
|
|
|
function toBooleanOrNull (value: any) {
|
|
|
|
const v = toValueOrNull(value)
|
|
|
|
|
|
|
|
if (v === null || v === undefined) return v
|
|
|
|
if (typeof v === 'boolean') return v
|
|
|
|
|
|
|
|
return validator.toBoolean('' + v)
|
|
|
|
}
|
|
|
|
|
|
|
|
function toValueOrNull (value: string) {
|
|
|
|
if (value === 'null') return null
|
|
|
|
|
|
|
|
return value
|
|
|
|
}
|
|
|
|
|
|
|
|
function toIntArray (value: any) {
|
|
|
|
if (!value) return []
|
|
|
|
if (isArray(value) === false) return [ validator.toInt(value) ]
|
|
|
|
|
|
|
|
return value.map(v => validator.toInt(v))
|
|
|
|
}
|
|
|
|
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
2017-05-15 15:22:03 -05:00
|
|
|
export {
|
|
|
|
exists,
|
2019-01-29 01:37:25 -06:00
|
|
|
isArrayOf,
|
2019-01-08 04:26:41 -06:00
|
|
|
isNotEmptyIntArray,
|
2017-10-24 12:41:09 -05:00
|
|
|
isArray,
|
2020-09-25 09:19:35 -05:00
|
|
|
isIntOrNull,
|
2017-10-24 12:41:09 -05:00
|
|
|
isIdValid,
|
2019-07-05 06:54:32 -05:00
|
|
|
isSafePath,
|
2021-07-29 03:27:24 -05:00
|
|
|
isNotEmptyStringArray,
|
2017-10-24 12:41:09 -05:00
|
|
|
isUUIDValid,
|
2021-07-28 09:40:21 -05:00
|
|
|
toCompleteUUIDs,
|
2021-06-28 10:30:59 -05:00
|
|
|
toCompleteUUID,
|
2017-10-24 12:41:09 -05:00
|
|
|
isIdOrUUIDValid,
|
2018-01-03 03:12:36 -06:00
|
|
|
isDateValid,
|
2018-05-16 02:28:18 -05:00
|
|
|
toValueOrNull,
|
2019-07-25 09:23:44 -05:00
|
|
|
toBooleanOrNull,
|
2018-02-13 11:17:05 -06:00
|
|
|
isBooleanValid,
|
2018-05-09 04:23:14 -05:00
|
|
|
toIntOrNull,
|
2021-07-28 09:40:21 -05:00
|
|
|
areUUIDsValid,
|
2019-03-07 10:06:00 -06:00
|
|
|
toIntArray,
|
2022-02-11 03:51:33 -06:00
|
|
|
isFileValid,
|
2023-02-27 02:44:03 -06:00
|
|
|
isSafePeerTubeFilenameWithoutExtension,
|
2023-04-21 07:55:10 -05:00
|
|
|
isSafeFilename,
|
2022-02-11 03:51:33 -06:00
|
|
|
checkMimetypeRegex
|
2017-05-15 15:22:03 -05:00
|
|
|
}
|