mirror of
https://github.com/nodejs/node.git
synced 2025-05-09 01:30:25 +00:00
b4c2ff5a3b
PR-URL: https://github.com/nodejs/node/pull/36210 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com> Reviewed-By: Rich Trott <rtrott@gmail.com> Reviewed-By: Bradley Farias <bradley.meck@gmail.com>
74 lines
2.0 KiB
JavaScript
74 lines
2.0 KiB
JavaScript
'use strict';
|
|
// Utility to parse the value of
|
|
// https://w3c.github.io/webappsec-subresource-integrity/#the-integrity-attribute
|
|
|
|
const {
|
|
ArrayPrototype,
|
|
ObjectDefineProperty,
|
|
ObjectFreeze,
|
|
ObjectSeal,
|
|
ObjectSetPrototypeOf,
|
|
RegExp,
|
|
RegExpPrototypeExec,
|
|
RegExpPrototypeTest,
|
|
StringPrototypeSlice,
|
|
} = primordials;
|
|
|
|
const {
|
|
ERR_SRI_PARSE
|
|
} = require('internal/errors').codes;
|
|
const kWSP = '[\\x20\\x09]';
|
|
const kVCHAR = '[\\x21-\\x7E]';
|
|
const kHASH_ALGO = 'sha(?:256|384|512)';
|
|
// Base64
|
|
const kHASH_VALUE = '[A-Za-z0-9+/]+[=]{0,2}';
|
|
const kHASH_EXPRESSION = `(${kHASH_ALGO})-(${kHASH_VALUE})`;
|
|
// Ungrouped since unused
|
|
const kOPTION_EXPRESSION = `(?:${kVCHAR}*)`;
|
|
const kHASH_WITH_OPTIONS = `${kHASH_EXPRESSION}(?:[?](${kOPTION_EXPRESSION}))?`;
|
|
const kSRIPattern = RegExp(`(${kWSP}*)(?:${kHASH_WITH_OPTIONS})`, 'g');
|
|
ObjectSeal(kSRIPattern);
|
|
const kAllWSP = RegExp(`^${kWSP}*$`);
|
|
ObjectSeal(kAllWSP);
|
|
|
|
const BufferFrom = require('buffer').Buffer.from;
|
|
|
|
// Returns {algorithm, value (in base64 string), options,}[]
|
|
const parse = (str) => {
|
|
let prevIndex = 0;
|
|
let match;
|
|
const entries = [];
|
|
while (match = RegExpPrototypeExec(kSRIPattern, str)) {
|
|
if (match.index !== prevIndex) {
|
|
throw new ERR_SRI_PARSE(str, str[prevIndex], prevIndex);
|
|
}
|
|
if (entries.length > 0 && match[1] === '') {
|
|
throw new ERR_SRI_PARSE(str, str[prevIndex], prevIndex);
|
|
}
|
|
|
|
// Avoid setters being fired
|
|
ObjectDefineProperty(entries, entries.length, {
|
|
enumerable: true,
|
|
configurable: true,
|
|
value: ObjectFreeze({
|
|
__proto__: null,
|
|
algorithm: match[2],
|
|
value: BufferFrom(match[3], 'base64'),
|
|
options: match[4] === undefined ? null : match[4],
|
|
})
|
|
});
|
|
prevIndex += match[0].length;
|
|
}
|
|
|
|
if (prevIndex !== str.length) {
|
|
if (!RegExpPrototypeTest(kAllWSP, StringPrototypeSlice(str, prevIndex))) {
|
|
throw new ERR_SRI_PARSE(str, str[prevIndex], prevIndex);
|
|
}
|
|
}
|
|
return ObjectSetPrototypeOf(entries, ArrayPrototype);
|
|
};
|
|
|
|
module.exports = {
|
|
parse,
|
|
};
|