├── test ├── files │ ├── file1.txt │ ├── blank.gif │ ├── image.png │ └── large.png ├── esm.js └── index.js ├── .gitignore ├── README.md ├── .github └── workflows │ └── ci-module.yml ├── package.json ├── LICENSE.md └── lib └── index.js /test/files/file1.txt: -------------------------------------------------------------------------------- 1 | I am a plain text file -------------------------------------------------------------------------------- /test/files/blank.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hapijs/pez/HEAD/test/files/blank.gif -------------------------------------------------------------------------------- /test/files/image.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hapijs/pez/HEAD/test/files/image.png -------------------------------------------------------------------------------- /test/files/large.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hapijs/pez/HEAD/test/files/large.png -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | **/node_modules 2 | **/package-lock.json 3 | 4 | coverage.* 5 | 6 | **/.DS_Store 7 | **/._* 8 | 9 | **/*.pem 10 | 11 | **/.vs 12 | **/.vscode 13 | **/.idea 14 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | 2 | 3 | # @hapi/pez 4 | 5 | #### Multipart parser. 6 | -------------------------------------------------------------------------------- /.github/workflows/ci-module.yml: -------------------------------------------------------------------------------- 1 | name: ci 2 | 3 | on: 4 | push: 5 | branches: 6 | - master 7 | pull_request: 8 | workflow_dispatch: 9 | 10 | jobs: 11 | test: 12 | uses: hapijs/.github/.github/workflows/ci-module.yml@master 13 | with: 14 | min-node-version: 14 15 | -------------------------------------------------------------------------------- /test/esm.js: -------------------------------------------------------------------------------- 1 | 'use strict'; 2 | 3 | const Code = require('@hapi/code'); 4 | const Lab = require('@hapi/lab'); 5 | 6 | 7 | const { before, describe, it } = exports.lab = Lab.script(); 8 | const expect = Code.expect; 9 | 10 | 11 | describe('import()', () => { 12 | 13 | let Pez; 14 | 15 | before(async () => { 16 | 17 | Pez = await import('../lib/index.js'); 18 | }); 19 | 20 | it('exposes all methods and classes as named imports', () => { 21 | 22 | expect(Object.keys(Pez)).to.equal([ 23 | 'Dispenser', 24 | 'default' 25 | ]); 26 | }); 27 | }); 28 | -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "@hapi/pez", 3 | "description": "Multipart parser", 4 | "version": "6.1.0", 5 | "repository": "git://github.com/hapijs/pez", 6 | "main": "lib/index.js", 7 | "files": [ 8 | "lib" 9 | ], 10 | "keywords": [ 11 | "HTTP", 12 | "multipart", 13 | "parser" 14 | ], 15 | "eslintConfig": { 16 | "extends": [ 17 | "plugin:@hapi/module" 18 | ] 19 | }, 20 | "dependencies": { 21 | "@hapi/b64": "^6.0.1", 22 | "@hapi/boom": "^10.0.1", 23 | "@hapi/content": "^6.0.0", 24 | "@hapi/hoek": "^11.0.2", 25 | "@hapi/nigel": "^5.0.1" 26 | }, 27 | "devDependencies": { 28 | "@hapi/code": "^9.0.3", 29 | "@hapi/eslint-plugin": "^6.0.0", 30 | "@hapi/lab": "^25.0.1", 31 | "@hapi/teamwork": "^6.0.0", 32 | "@hapi/wreck": "^18.0.0", 33 | "form-data": "4.x.x" 34 | }, 35 | "scripts": { 36 | "test": "lab -t 100 -L -a @hapi/code", 37 | "test-cov-html": "lab -a @hapi/code -r html -o coverage.html" 38 | }, 39 | "license": "BSD-3-Clause" 40 | } 41 | -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- 1 | Copyright (c) 2014-2022, Project contributors 2 | Copyright (c) 2014-2020, Sideway Inc 3 | Copyright (c) 2014, Walmart. 4 | Copyright (c) 2011-2013 Felix Geisendörfer, Andrew Kelley 5 | All rights reserved. 6 | 7 | Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 8 | * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 9 | * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 10 | * The names of any contributors may not be used to endorse or promote products derived from this software without specific prior written permission. 11 | 12 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS AND CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS OFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 13 | -------------------------------------------------------------------------------- /lib/index.js: -------------------------------------------------------------------------------- 1 | 'use strict'; 2 | 3 | const Stream = require('stream'); 4 | 5 | const B64 = require('@hapi/b64'); 6 | const Boom = require('@hapi/boom'); 7 | const Content = require('@hapi/content'); 8 | const Hoek = require('@hapi/hoek'); 9 | const Nigel = require('@hapi/nigel'); 10 | 11 | 12 | const internals = {}; 13 | 14 | 15 | /* 16 | RFC 2046 (http://tools.ietf.org/html/rfc2046) 17 | 18 | multipart-body = [preamble CRLF] 19 | dash-boundary *( SPACE / HTAB ) CRLF body-part 20 | *( CRLF dash-boundary *( SPACE / HTAB ) CRLF body-part ) 21 | CRLF dash-boundary "--" *( SPACE / HTAB ) 22 | [CRLF epilogue] 23 | 24 | boundary = 0*69 bcharsnospace 25 | bchars = bcharsnospace / " " 26 | bcharsnospace = DIGIT / ALPHA / "'" / "(" / ")" / "+" / "_" / "," / "-" / "." / "/" / ":" / "=" / "?" 27 | dash-boundary = "--" boundary 28 | 29 | preamble = discard-text 30 | epilogue = discard-text 31 | discard-text = *(*text CRLF) *text 32 | 33 | body-part = MIME-part-headers [CRLF *OCTET] 34 | OCTET = 35 | 36 | SPACE = 32 37 | HTAB = 9 38 | CRLF = 13 10 39 | */ 40 | 41 | 42 | internals.state = { 43 | preamble: 0, // Until the first boundary is received 44 | boundary: 1, // After a boundary, waiting for first line with optional linear-whitespace 45 | header: 2, // Receiving part headers 46 | payload: 3, // Receiving part payload 47 | epilogue: 4 48 | }; 49 | 50 | 51 | internals.defaults = { 52 | maxBytes: Infinity, 53 | maxParts: Infinity 54 | }; 55 | 56 | 57 | exports.Dispenser = class extends Stream.Writable { 58 | 59 | constructor(options) { 60 | 61 | super({ autoDestroy: false }); 62 | 63 | Hoek.assert(options !== null && typeof options === 'object', 'options must be an object'); 64 | const settings = Hoek.applyToDefaults(internals.defaults, options); 65 | 66 | this._boundary = settings.boundary; 67 | this._state = internals.state.preamble; 68 | this._held = ''; 69 | 70 | this._stream = null; 71 | this._headers = {}; 72 | this._name = ''; 73 | this._pendingHeader = ''; 74 | this._error = null; 75 | this._bytesCount = 0; 76 | this._partsCount = 0; 77 | this._maxBytes = settings.maxBytes; 78 | this._maxParts = settings.maxParts; 79 | 80 | this._parts = new Nigel.Stream(Buffer.from('--' + settings.boundary)); 81 | this._lines = new Nigel.Stream(Buffer.from('\r\n')); 82 | 83 | this._parts.on('needle', () => this.#onPartEnd()); 84 | this._parts.on('haystack', (chunk) => this.#onPart(chunk)); 85 | this._lines.on('needle', () => this.#onLineEnd()); 86 | this._lines.on('haystack', (chunk) => this.#onLine(chunk)); 87 | this.once('finish', () => this._parts.end()); 88 | this._parts.once('close', () => this._lines.end()); 89 | 90 | let piper = null; 91 | let finish = (err) => { 92 | 93 | if (piper) { 94 | piper.removeListener('data', onReqData); 95 | piper.removeListener('error', finish); 96 | piper.removeListener('aborted', onReqAborted); 97 | } 98 | 99 | if (err) { 100 | return this.#abort(err); 101 | } 102 | 103 | this.#emit('close'); 104 | }; 105 | 106 | finish = Hoek.once(finish); 107 | 108 | this._lines.once('close', () => { 109 | 110 | if (this._state === internals.state.epilogue) { 111 | if (this._held) { 112 | this.#emit('epilogue', this._held); 113 | this._held = ''; 114 | } 115 | } 116 | else if (this._state === internals.state.boundary) { 117 | if (!this._held) { 118 | this.#abort(Boom.badRequest('Missing end boundary')); 119 | } 120 | else if (this._held !== '--') { 121 | this.#abort(Boom.badRequest('Only white space allowed after boundary at end')); 122 | } 123 | } 124 | else { 125 | this.#abort(Boom.badRequest('Incomplete multipart payload')); 126 | } 127 | 128 | setImmediate(finish); // Give pending events a chance to fire 129 | }); 130 | 131 | const onReqAborted = () => { 132 | 133 | finish(Boom.badRequest('Client request aborted')); 134 | }; 135 | 136 | const onReqData = (data) => { 137 | 138 | this._bytesCount += Buffer.byteLength(data); 139 | 140 | if (this._bytesCount > this._maxBytes) { 141 | finish(Boom.entityTooLarge('Maximum size exceeded')); 142 | } 143 | }; 144 | 145 | this.once('pipe', (req) => { 146 | 147 | piper = req; 148 | req.on('data', onReqData); 149 | req.once('error', finish); 150 | req.once('aborted', onReqAborted); 151 | }); 152 | } 153 | 154 | _write(buffer, encoding, next) { 155 | 156 | if (this._error) { 157 | return next(); 158 | } 159 | 160 | this._parts.write(buffer); 161 | return next(); 162 | } 163 | 164 | #emit(...args) { 165 | 166 | if (this._error) { 167 | return; 168 | } 169 | 170 | this.emit(...args); 171 | } 172 | 173 | #abort(err) { 174 | 175 | this.#emit('error', err); 176 | this._error = err; 177 | } 178 | 179 | #onPartEnd() { 180 | 181 | this._lines.flush(); 182 | 183 | if (this._state === internals.state.preamble) { 184 | if (this._held) { 185 | const last = this._held.length - 1; 186 | 187 | if (this._held[last] !== '\n' || 188 | this._held[last - 1] !== '\r') { 189 | 190 | return this.#abort(Boom.badRequest('Preamble missing CRLF terminator')); 191 | } 192 | 193 | this.#emit('preamble', this._held.slice(0, -2)); 194 | this._held = ''; 195 | } 196 | 197 | this._parts.needle(Buffer.from('\r\n--' + this._boundary)); // CRLF no longer optional 198 | } 199 | else { 200 | this._partsCount++; 201 | if (this._partsCount > this._maxParts) { 202 | return this.#abort(Boom.badRequest('Maximum parts exceeded')); 203 | } 204 | } 205 | 206 | this._state = internals.state.boundary; 207 | 208 | if (this._stream) { 209 | this._stream.end(); 210 | this._stream = null; 211 | } 212 | else if (this._name) { 213 | this.#emit('field', this._name, this._held); 214 | this._name = ''; 215 | this._held = ''; 216 | } 217 | } 218 | 219 | #onPart(chunk) { 220 | 221 | if (this._state === internals.state.preamble) { 222 | this._held = this._held + chunk.toString(); 223 | } 224 | else if (this._state === internals.state.payload) { 225 | if (this._stream) { 226 | this._stream.write(chunk); // Stream payload 227 | } 228 | else { 229 | this._held = this._held + chunk.toString(); 230 | } 231 | } 232 | else { 233 | this._lines.write(chunk); // Look for boundary 234 | } 235 | } 236 | 237 | #onLineEnd() { 238 | 239 | // Boundary whitespace 240 | 241 | if (this._state === internals.state.boundary) { 242 | if (this._held) { 243 | this._held = this._held.replace(/[\t ]/g, ''); // trim() removes new lines 244 | if (this._held) { 245 | if (this._held === '--') { 246 | this._state = internals.state.epilogue; 247 | this._held = ''; 248 | 249 | return; 250 | } 251 | 252 | return this.#abort(Boom.badRequest('Only white space allowed after boundary')); 253 | } 254 | } 255 | 256 | this._state = internals.state.header; 257 | 258 | return; 259 | } 260 | 261 | // Part headers 262 | 263 | if (this._state === internals.state.header) { 264 | 265 | // Header 266 | 267 | if (this._held) { 268 | 269 | // Header continuation 270 | 271 | if (this._held[0] === ' ' || 272 | this._held[0] === '\t') { 273 | 274 | if (!this._pendingHeader) { 275 | return this.#abort(Boom.badRequest('Invalid header continuation without valid declaration on previous line')); 276 | } 277 | 278 | this._pendingHeader = this._pendingHeader + ' ' + this._held.slice(1); // Drop tab 279 | this._held = ''; 280 | return; 281 | } 282 | 283 | // Start of new header 284 | 285 | this.#flushHeader(); 286 | this._pendingHeader = this._held; 287 | this._held = ''; 288 | 289 | return; 290 | } 291 | 292 | // End of headers 293 | 294 | this.#flushHeader(); 295 | 296 | this._state = internals.state.payload; 297 | 298 | let disposition; 299 | 300 | try { 301 | disposition = Content.disposition(this._headers['content-disposition']); 302 | } 303 | catch (err) { 304 | return this.#abort(err); 305 | } 306 | 307 | if (disposition.filename !== undefined) { 308 | const stream = new Stream.PassThrough(); 309 | const transferEncoding = this._headers['content-transfer-encoding']; 310 | 311 | if (transferEncoding && 312 | transferEncoding.toLowerCase() === 'base64') { 313 | 314 | this._stream = new B64.Decoder(); 315 | this._stream.pipe(stream); 316 | } 317 | else { 318 | this._stream = stream; 319 | } 320 | 321 | stream.name = disposition.name; 322 | stream.filename = disposition.filename; 323 | stream.headers = this._headers; 324 | this._headers = {}; 325 | this.#emit('part', stream); 326 | } 327 | else { 328 | this._name = disposition.name; 329 | } 330 | 331 | this._lines.flush(); 332 | return; 333 | } 334 | 335 | // Epilogue 336 | 337 | this._held = this._held + '\r\n'; // Put the new line back 338 | } 339 | 340 | #onLine(chunk) { 341 | 342 | if (this._stream) { 343 | this._stream.write(chunk); // Stream payload 344 | } 345 | else { 346 | this._held = this._held + chunk.toString(); // Reading header or field 347 | } 348 | } 349 | 350 | #flushHeader() { 351 | 352 | if (!this._pendingHeader) { 353 | return; 354 | } 355 | 356 | const sep = this._pendingHeader.indexOf(':'); 357 | 358 | if (sep === -1) { 359 | return this.#abort(Boom.badRequest('Invalid header missing colon separator')); 360 | } 361 | 362 | if (!sep) { 363 | return this.#abort(Boom.badRequest('Invalid header missing field name')); 364 | } 365 | 366 | const name = this._pendingHeader.slice(0, sep).toLowerCase(); 367 | if (name === '__proto__') { 368 | return this.#abort(Boom.badRequest('Invalid header')); 369 | } 370 | 371 | this._headers[name] = this._pendingHeader.slice(sep + 1).trim(); 372 | this._pendingHeader = ''; 373 | } 374 | }; 375 | -------------------------------------------------------------------------------- /test/index.js: -------------------------------------------------------------------------------- 1 | 'use strict'; 2 | 3 | const Fs = require('fs'); 4 | const Http = require('http'); 5 | const Stream = require('stream'); 6 | 7 | const B64 = require('@hapi/b64'); 8 | const Code = require('@hapi/code'); 9 | const Content = require('@hapi/content'); 10 | const FormData = require('form-data'); 11 | const Lab = require('@hapi/lab'); 12 | const Pez = require('..'); 13 | const Teamwork = require('@hapi/teamwork'); 14 | const Wreck = require('@hapi/wreck'); 15 | 16 | 17 | const internals = {}; 18 | 19 | 20 | const { describe, it } = exports.lab = Lab.script(); 21 | const expect = Code.expect; 22 | 23 | 24 | describe('Dispenser', () => { 25 | 26 | const simulate = function (payload, boundary, contentType) { 27 | 28 | contentType = contentType || 'multipart/form-data; boundary="' + boundary + '"'; 29 | const req = new internals.Payload(payload); 30 | req.headers = { 'content-type': contentType }; 31 | return internals.interceptor(req, boundary); 32 | }; 33 | 34 | it('throws on invalid options', () => { 35 | 36 | const fail = (options) => { 37 | 38 | expect(() => { 39 | 40 | return new Pez.Dispenser(options); 41 | }).to.throw(Error, 'options must be an object'); 42 | }; 43 | 44 | fail(); 45 | fail(null); 46 | fail('foo'); 47 | fail(1); 48 | fail(false); 49 | }); 50 | 51 | it('parses RFC1867 payload', async () => { 52 | 53 | const payload = 54 | 'pre\r\nemble\r\n' + 55 | '--AaB03x\r\n' + 56 | 'content-disposition: form-data; name="field1"\r\n' + 57 | '\r\n' + 58 | 'one\r\ntwo\r\n' + 59 | '--AaB03x\r\n' + 60 | 'content-disposition: form-data; name="pics"; filename="file1.txt"\r\n' + 61 | 'content-transfer-encoding: 7bit\r\n' + 62 | 'Content-Type: text/plain\r\n' + 63 | '\r\n' + 64 | 'some content\r\nwith \rnewline\r\r\n' + 65 | '--AaB03x--\r\n' + 66 | 'epi\r\nlogue'; 67 | 68 | const data = await simulate(payload, 'AaB03x'); 69 | expect(data).to.equal({ 70 | preamble: { 71 | value: 'pre\r\nemble' 72 | }, 73 | field1: { 74 | value: 'one\r\ntwo' 75 | }, 76 | epilogue: { 77 | value: 'epi\r\nlogue' 78 | }, 79 | pics: { 80 | value: 'some content\r\nwith \rnewline\r', 81 | headers: { 82 | 'content-disposition': 'form-data; name=\"pics\"; filename=\"file1.txt\"', 83 | 'content-transfer-encoding': '7bit', 84 | 'content-type': 'text/plain' 85 | }, 86 | filename: 'file1.txt' 87 | } 88 | }); 89 | }); 90 | 91 | it('parses payload in chunks', async () => { 92 | 93 | const payload = [ 94 | 'pre\r\nemble\r\n', 95 | '--AaB03x\r\n', 96 | 'content-disposition: form-data; name="field1"\r\n', 97 | '\r\n', 98 | 'one\r\ntwo\r\n', 99 | '--AaB03x\r\n', 100 | 'content-disposition: form-data; name="pics"; filename="file.bin"\r\n', 101 | 'Content-Type: text/plain\r\n', 102 | '\r\n', 103 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 104 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 105 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 106 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 107 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 108 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 109 | 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc\r\n', 110 | '--AaB03x--' 111 | ]; 112 | 113 | const data = await simulate(payload, 'AaB03x'); 114 | expect(data).to.equal({ 115 | preamble: { 116 | value: 'pre\r\nemble' 117 | }, 118 | field1: { 119 | value: 'one\r\ntwo' 120 | }, 121 | pics: { 122 | value: 'aliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxcaliuexrnhfaliuerxnhfaiuerhfxnlaiuerhfxnlaiuerhfxnliaeruhxnfaieruhfnxc', 123 | headers: { 124 | 'content-disposition': 'form-data; name=\"pics\"; filename=\"file.bin\"', 125 | 'content-type': 'text/plain' 126 | }, 127 | filename: 'file.bin' 128 | } 129 | }); 130 | }); 131 | 132 | it('parses payload without trailing crlf', async () => { 133 | 134 | const payload = 135 | '--AaB03x\r\n' + 136 | 'content-disposition: form-data; name="field1"\r\n' + 137 | '\r\n' + 138 | 'one\r\ntwo\r\n' + 139 | '--AaB03x\r\n' + 140 | 'content-disposition: form-data; name="pics"; filename="file1.txt"\r\n' + 141 | 'Content-Type: text/plain\r\n' + 142 | '\r\n' + 143 | 'some content\r\r\n' + 144 | '--AaB03x--'; 145 | 146 | const data = await simulate(payload, 'AaB03x'); 147 | expect(data).to.equal({ 148 | field1: { 149 | value: 'one\r\ntwo' 150 | }, 151 | pics: { 152 | value: 'some content\r', 153 | headers: { 154 | 'content-disposition': 'form-data; name=\"pics\"; filename=\"file1.txt\"', 155 | 'content-type': 'text/plain' 156 | }, 157 | filename: 'file1.txt' 158 | } 159 | }); 160 | }); 161 | 162 | it('ignores whitespace after boundary', async () => { 163 | 164 | const payload = 165 | '--AaB03x \r\n' + 166 | 'content-disposition: form-data; name="field"\r\n' + 167 | '\r\n' + 168 | 'value\r\n' + 169 | '--AaB03x--'; 170 | 171 | const data = await simulate(payload, 'AaB03x'); 172 | expect(data).to.equal({ 173 | field: { 174 | value: 'value' 175 | } 176 | }); 177 | }); 178 | 179 | it('parses single part without epilogue', async () => { 180 | 181 | const payload = 182 | '--AaB03x \r\n' + 183 | 'content-disposition: form-data; name="field"\r\n' + 184 | '\r\n' + 185 | 'value\r\n' + 186 | '--AaB03x--\r\n'; 187 | 188 | const data = await simulate(payload, 'AaB03x'); 189 | expect(data).to.equal({ 190 | field: { 191 | value: 'value' 192 | } 193 | }); 194 | }); 195 | 196 | it('reads header over multiple lines', async () => { 197 | 198 | const payload = 199 | '--AaB03x\r\n' + 200 | 'content-disposition:\r\n form-data; name="field"\r\n' + 201 | '\r\n' + 202 | 'value\r\n' + 203 | '--AaB03x--'; 204 | 205 | const data = await simulate(payload, 'AaB03x'); 206 | expect(data).to.equal({ 207 | field: { 208 | value: 'value' 209 | } 210 | }); 211 | }); 212 | 213 | it('reads header over multiple lines including tabs', async () => { 214 | 215 | const payload = 216 | '--AaB03x\r\n' + 217 | 'content-disposition:\r\n\tform-data; name="field"\r\n' + 218 | '\r\n' + 219 | 'value\r\n' + 220 | '--AaB03x--'; 221 | 222 | const data = await simulate(payload, 'AaB03x'); 223 | expect(data).to.equal({ 224 | field: { 225 | value: 'value' 226 | } 227 | }); 228 | }); 229 | 230 | it('parses b64 file', async () => { 231 | 232 | const payload = 233 | '--AaB03x\r\n' + 234 | 'content-disposition: form-data; name="field"; filename="file.txt"\r\n' + 235 | 'content-transfer-encoding: base64\r\n' + 236 | '\r\n' + 237 | B64.encode(Buffer.from('this is the content of the file')) + '\r\n' + 238 | '--AaB03x--'; 239 | 240 | const data = await simulate(payload, 'AaB03x'); 241 | expect(data).to.equal({ 242 | field: { 243 | value: 'this is the content of the file', 244 | headers: { 245 | 'content-disposition': 'form-data; name="field"; filename="file.txt"', 246 | 'content-transfer-encoding': 'base64' 247 | }, 248 | filename: 'file.txt' 249 | } 250 | }); 251 | }); 252 | 253 | it('errors on partial header over multiple lines', async () => { 254 | 255 | const payload = 256 | '--AaB03x\r\n' + 257 | ' form-data; name="field"\r\n' + 258 | '\r\n' + 259 | 'value\r\n' + 260 | '--AaB03x--'; 261 | 262 | await expect(simulate(payload, 'AaB03x')).to.reject('Invalid header continuation without valid declaration on previous line'); 263 | }); 264 | 265 | it('errors on missing terminator', async () => { 266 | 267 | const payload = 268 | '--AaB03x\r\n' + 269 | 'content-disposition: form-data; name="field"\r\n' + 270 | '\r\n' + 271 | 'value\r\n' + 272 | '--AaB03x'; 273 | 274 | await expect(simulate(payload, 'AaB03x')).to.reject('Missing end boundary'); 275 | }); 276 | 277 | it('errors on missing preamble terminator (\\n)', async () => { 278 | 279 | const payload = 280 | 'preamble--AaB03x\r\n' + 281 | 'content-disposition: form-data; name="field"\r\n' + 282 | '\r\n' + 283 | 'value\r\n' + 284 | '--AaB03x--'; 285 | 286 | await expect(simulate(payload, 'AaB03x')).to.reject('Preamble missing CRLF terminator'); 287 | }); 288 | 289 | it('errors on missing preamble terminator (\\r)', async () => { 290 | 291 | const payload = 292 | 'preamble\n--AaB03x\r\n' + 293 | 'content-disposition: form-data; name="field"\r\n' + 294 | '\r\n' + 295 | 'value\r\n' + 296 | '--AaB03x--'; 297 | 298 | await expect(simulate(payload, 'AaB03x')).to.reject('Preamble missing CRLF terminator'); 299 | }); 300 | 301 | it('errors on incomplete part', async () => { 302 | 303 | const payload = 304 | '--AaB03x\r\n' + 305 | 'content-disposition: form-data; name="field"\r\n' + 306 | '\r\n' + 307 | 'value\r\n'; 308 | 309 | await expect(simulate(payload, 'AaB03x')).to.reject('Incomplete multipart payload'); 310 | }); 311 | 312 | it('errors on invalid part header (missing field name)', async () => { 313 | 314 | const payload = 315 | '--AaB03x\r\n' + 316 | 'content-disposition: form-data; name="field"\r\n' + 317 | ': invalid\r\n' + 318 | '\r\n' + 319 | 'content\r\n' + 320 | '--AaB03x--'; 321 | 322 | await expect(simulate(payload, 'AaB03x')).to.reject('Invalid header missing field name'); 323 | }); 324 | 325 | it('errors on invalid part header (missing colon)', async () => { 326 | 327 | const payload = 328 | '--AaB03x\r\n' + 329 | 'content-disposition: form-data; name="field"\r\n' + 330 | 'invalid\r\n' + 331 | '\r\n' + 332 | 'content\r\n' + 333 | '--AaB03x--'; 334 | 335 | await expect(simulate(payload, 'AaB03x')).to.reject('Invalid header missing colon separator'); 336 | }); 337 | 338 | it('errors on missing content-disposition', async () => { 339 | 340 | const payload = 341 | '--AaB03x\r\n' + 342 | '\r\n' + 343 | 'content\r\n' + 344 | '--AaB03x--'; 345 | 346 | await expect(simulate(payload, 'AaB03x')).to.reject('Missing content-disposition header'); 347 | }); 348 | 349 | it('errors on invalid text after boundary', async () => { 350 | 351 | const payload = 352 | '--AaB03x\r\n' + 353 | 'content-disposition: form-data; name="field"\r\n' + 354 | '\r\n' + 355 | 'content\r\n' + 356 | '--AaB03xc\r\n' + 357 | 'content-disposition: form-data; name="field"\r\n' + 358 | '\r\n' + 359 | 'content\r\n' + 360 | '--AaB03x--\r\n'; 361 | 362 | await expect(simulate(payload, 'AaB03x')).to.reject('Only white space allowed after boundary'); 363 | }); 364 | 365 | it('errors on invalid text after boundary at end', async () => { 366 | 367 | const payload = 368 | '--AaB03x\r\n' + 369 | 'content-disposition: form-data; name="field"\r\n' + 370 | '\r\n' + 371 | 'content\r\n' + 372 | '--AaB03xc'; 373 | 374 | await expect(simulate(payload, 'AaB03x')).to.reject('Only white space allowed after boundary at end'); 375 | }); 376 | 377 | it('errors on aborted request', async () => { 378 | 379 | const req = new internals.Payload('--AaB03x\r\n', true); 380 | req.headers = { 'content-type': 'multipart/form-data; boundary="AaB03x"' }; 381 | 382 | const dispenser = new Pez.Dispenser({ boundary: 'AaB03x' }); 383 | 384 | const team = new Teamwork.Team(); 385 | dispenser.once('error', (err) => { 386 | 387 | expect(err).to.exist(); 388 | expect(err.message).to.equal('Client request aborted'); 389 | team.attend(); 390 | }); 391 | 392 | req.pipe(dispenser); 393 | req.emit('aborted'); 394 | await team.work; 395 | }); 396 | 397 | it('parses direct write', async () => { 398 | 399 | const dispenser = new Pez.Dispenser({ boundary: 'AaB03x' }); 400 | 401 | const team = new Teamwork.Team(); 402 | dispenser.on('field', (name, value) => { 403 | 404 | expect(name).to.equal('field1'); 405 | expect(value).to.equal('value'); 406 | team.attend(); 407 | }); 408 | 409 | dispenser.write('--AaB03x\r\n' + 410 | 'content-disposition: form-data; name="field1"\r\n' + 411 | '\r\n' + 412 | 'value\r\n' + 413 | '--AaB03x--'); 414 | 415 | dispenser.end(); 416 | await team.work; 417 | }); 418 | 419 | it('ignores write after error', async () => { 420 | 421 | const dispenser = new Pez.Dispenser({ boundary: 'AaB03x' }); 422 | 423 | dispenser.on('field', (name, value) => { 424 | 425 | dispenser.write('--AaB03x\r\n' + 426 | 'content-disposition: form-data; name="field1"\r\n' + 427 | '\r\n' + 428 | 'value\r\n' + 429 | '--AaB03x*'); 430 | 431 | dispenser.write('--AaB03x\r\n' + 432 | 'content-disposition: form-data; name="field1"\r\n' + 433 | '\r\n' + 434 | 'value\r\n' + 435 | '--AaB03x*'); 436 | }); 437 | 438 | const team = new Teamwork.Team(); 439 | dispenser.once('error', (err) => { 440 | 441 | expect(err instanceof Error).to.equal(true); 442 | team.attend(); 443 | }); 444 | 445 | dispenser.write('--AaB03x\r\n' + 446 | 'content-disposition: form-data; name="field1"\r\n' + 447 | '\r\n' + 448 | 'value\r\n' + 449 | '--AaB03x*'); 450 | 451 | await team.work; 452 | }); 453 | 454 | it('parses a standard text file', async () => { 455 | 456 | const payload = 457 | '--AaB03x\r\n' + 458 | 'content-disposition: form-data; name="file"; filename="file1.txt"\r\n' + 459 | 'content-transfer-encoding: 7bit\r\n' + 460 | 'Content-Type: text/plain\r\n' + 461 | '\r\n' + 462 | 'I am a plain text file\r\n' + 463 | '--AaB03x--\r\n'; 464 | 465 | const data = await simulate(payload, 'AaB03x'); 466 | expect(data).to.equal({ 467 | file: { 468 | filename: 'file1.txt', 469 | value: 'I am a plain text file', 470 | headers: { 471 | 'content-disposition': 'form-data; name="file"; filename="file1.txt"', 472 | 'content-transfer-encoding': '7bit', 473 | 'content-type': 'text/plain' 474 | } 475 | } 476 | }); 477 | }); 478 | 479 | it('parses an uploaded standard text file', async () => { 480 | 481 | let port = 0; 482 | const team = new Teamwork.Team(); 483 | const server = Http.createServer(async (req, res) => { 484 | 485 | const contentType = Content.type(req.headers['content-type']); 486 | const result = await internals.interceptor(req, contentType.boundary); 487 | expect(result).to.equal({ 488 | file1: { 489 | filename: 'file1.txt', 490 | headers: { 491 | 'content-disposition': 'form-data; name="file1"; filename="file1.txt"', 492 | 'content-type': 'text/plain' 493 | }, 494 | value: 'I am a plain text file' 495 | } 496 | }); 497 | team.attend(); 498 | }).listen(port, '127.0.0.1'); 499 | 500 | server.once('listening', () => { 501 | 502 | port = server.address().port; 503 | 504 | const form = new FormData(); 505 | form.append('file1', Fs.createReadStream('./test/files/file1.txt')); 506 | 507 | Wreck.post('http://127.0.0.1:' + port, { 508 | payload: form, headers: form.getHeaders() 509 | }, (err, res, payload) => { 510 | 511 | expect(err).to.not.exist(); 512 | }); 513 | }); 514 | 515 | await team.work; 516 | }); 517 | 518 | it('errors if the payload size exceeds the byte limit', async () => { 519 | 520 | const payload = 521 | '--AaB03x\r\n' + 522 | 'content-disposition: form-data; name="file"; filename="file1.txt"\r\n' + 523 | 'Content-Type: text/plain\r\n' + 524 | '\r\n' + 525 | 'I am a plain text file\r\n' + 526 | '--AaB03x--\r\n'; 527 | 528 | const req = new internals.Payload(payload, true); 529 | req.headers = { 'content-type': 'multipart/form-data; boundary="AaB03x"' }; 530 | 531 | const dispenser = new Pez.Dispenser({ boundary: 'AaB03x', maxBytes: payload.length - 1 }); 532 | 533 | const team = new Teamwork.Team(); 534 | dispenser.once('error', (err) => { 535 | 536 | expect(err).to.exist(); 537 | expect(err.message).to.equal('Maximum size exceeded'); 538 | expect(err.output.statusCode).to.equal(413); 539 | team.attend(); 540 | }); 541 | 542 | req.pipe(dispenser); 543 | await team.work; 544 | }); 545 | 546 | it('errors if the payload size exceeds the part limit', async () => { 547 | 548 | const createParts = (n) => { 549 | 550 | return [ 551 | '--AaB03x\r\n', 552 | `content-disposition: form-data; name="field${n}"\r\n`, 553 | '\r\n', 554 | 'one\r\ntwo\r\n', 555 | '--AaB03x\r\n', 556 | `content-disposition: form-data; name="file${n}"; filename="file${n}.txt"\r\n`, 557 | 'Content-Type: text/plain\r\n', 558 | '\r\n', 559 | 'hello world\r\n' 560 | ].join(''); 561 | }; 562 | 563 | const endParts = () => '--AaB03x--\r\n'; 564 | 565 | const payload = [ 566 | createParts(2), 567 | createParts(4), 568 | createParts(6), 569 | createParts(8), 570 | createParts(10), 571 | endParts() 572 | ].join(''); 573 | 574 | const req = new internals.Payload(payload, true); 575 | req.headers = { 'content-type': 'multipart/form-data; boundary="AaB03x"' }; 576 | 577 | const dispenser = new Pez.Dispenser({ boundary: 'AaB03x', maxParts: 9 }); 578 | 579 | const team = new Teamwork.Team(); 580 | dispenser.once('error', (err) => { 581 | 582 | expect(err).to.exist(); 583 | expect(err.message).to.equal('Maximum parts exceeded'); 584 | expect(err.output.statusCode).to.equal(400); 585 | team.attend(); 586 | }); 587 | 588 | req.pipe(dispenser); 589 | await team.work; 590 | }); 591 | 592 | it('parses a request with "=" in the boundary', async () => { 593 | 594 | const payload = 595 | '--AaB=03x\r\n' + 596 | 'content-disposition: form-data; name="file"; filename="file1.txt"\r\n' + 597 | 'content-transfer-encoding: 7bit\r\n' + 598 | 'Content-Type: text/plain\r\n' + 599 | '\r\n' + 600 | 'I am a plain text file\r\n' + 601 | '--AaB=03x--\r\n'; 602 | 603 | const data = await simulate(payload, 'AaB=03x'); 604 | expect(data).to.equal({ 605 | file: { 606 | filename: 'file1.txt', 607 | value: 'I am a plain text file', 608 | headers: { 609 | 'content-disposition': 'form-data; name="file"; filename="file1.txt"', 610 | 'content-transfer-encoding': '7bit', 611 | 'content-type': 'text/plain' 612 | } 613 | } 614 | }); 615 | }); 616 | 617 | it('parses a request with non-standard contentType', async () => { 618 | 619 | const payload = 620 | '--AaB03x\r\n' + 621 | 'content-disposition: form-data; name="file"; filename="file1.txt"\r\n' + 622 | 'content-transfer-encoding: 7bit\r\n' + 623 | 'Content-Type: text/plain\r\n' + 624 | '\r\n' + 625 | 'I am a plain text file\r\n' + 626 | '--AaB03x--\r\n'; 627 | const contentType = 'multipart/form-data; boundary="--AaB03x"; charset=utf-8; random=foobar'; 628 | 629 | const data = await simulate(payload, 'AaB03x', contentType); 630 | expect(data).to.equal({ 631 | file: { 632 | filename: 'file1.txt', 633 | value: 'I am a plain text file', 634 | headers: { 635 | 'content-disposition': 'form-data; name="file"; filename="file1.txt"', 636 | 'content-transfer-encoding': '7bit', 637 | 'content-type': 'text/plain' 638 | } 639 | } 640 | }); 641 | }); 642 | 643 | it('parses a png file', async () => { 644 | 645 | const png = Fs.readFileSync('./test/files/image.png'); 646 | 647 | const payload = 648 | '--AaB03x\r\n' + 649 | 'content-disposition: form-data; name="sticker"; filename="image.png"\r\n' + 650 | 'content-transfer-encoding: base64\r\n' + 651 | 'Content-Type: image/png\r\n' + 652 | '\r\n' + 653 | B64.encode(png) + '\r\n' + 654 | '--AaB03x--\r\n'; 655 | 656 | const data = await simulate(payload, 'AaB03x'); 657 | expect(data).to.equal({ 658 | sticker: { 659 | value: png.toString(), 660 | headers: { 661 | 'content-disposition': 'form-data; name="sticker"; filename="image.png"', 662 | 'content-transfer-encoding': 'base64', 663 | 'content-type': 'image/png' 664 | }, 665 | filename: 'image.png' 666 | } 667 | }); 668 | }); 669 | 670 | it('parses an uploaded png file', async () => { 671 | 672 | const team = new Teamwork.Team(); 673 | const server = Http.createServer(async (req, res) => { 674 | 675 | const contentType = Content.type(req.headers['content-type']); 676 | const result = await internals.interceptor(req, contentType.boundary); 677 | expect(result).to.equal({ 678 | sticker: { 679 | value: Fs.readFileSync('./test/files/image.png').toString(), 680 | headers: { 681 | 'content-disposition': 'form-data; name="sticker"; filename="image.png"', 682 | 'content-type': 'image/png' 683 | }, 684 | filename: 'image.png' 685 | } 686 | }); 687 | team.attend(); 688 | }).listen(0, '127.0.0.1'); 689 | 690 | server.once('listening', () => { 691 | 692 | const form = new FormData(); 693 | form.append('sticker', Fs.createReadStream('./test/files/image.png')); 694 | Wreck.request('POST', 'http://127.0.0.1:' + server.address().port, { payload: form, headers: form.getHeaders() }); 695 | }); 696 | 697 | await team.work; 698 | }); 699 | 700 | it('parses a large uploaded png file', async () => { 701 | 702 | const team = new Teamwork.Team(); 703 | const server = Http.createServer(async (req, res) => { 704 | 705 | const contentType = Content.type(req.headers['content-type']); 706 | const result = await internals.interceptor(req, contentType.boundary); 707 | expect(result).to.equal({ 708 | sticker: { 709 | value: Fs.readFileSync('./test/files/large.png').toString(), 710 | headers: { 711 | 'content-disposition': 'form-data; name="sticker"; filename="large.png"', 712 | 'content-type': 'image/png' 713 | }, 714 | filename: 'large.png' 715 | } 716 | }); 717 | team.attend(); 718 | }).listen(0, '127.0.0.1'); 719 | 720 | server.once('listening', () => { 721 | 722 | const form = new FormData(); 723 | form.append('sticker', Fs.createReadStream('./test/files/large.png')); 724 | Wreck.request('POST', 'http://127.0.0.1:' + server.address().port, { payload: form, headers: form.getHeaders() }); 725 | }); 726 | 727 | await team.work; 728 | }); 729 | 730 | it('parses a blank gif file', async () => { 731 | 732 | const blankgif = Fs.readFileSync('./test/files/blank.gif'); 733 | 734 | const payload = 735 | '--AaB03x\r\n' + 736 | 'content-disposition: form-data; name="file"; filename="blank.gif"\r\n' + 737 | 'content-transfer-encoding: base64\r\n' + 738 | 'Content-Type: image/gif\r\n' + 739 | '\r\n' + 740 | B64.encode(blankgif) + '\r\n' + 741 | '--AaB03x--\r\n'; 742 | 743 | const data = await simulate(payload, 'AaB03x'); 744 | expect(data).to.equal({ 745 | file: { 746 | filename: 'blank.gif', 747 | value: blankgif.toString(), 748 | headers: { 749 | 'content-disposition': 'form-data; name="file"; filename="blank.gif"', 750 | 'content-transfer-encoding': 'base64', 751 | 'content-type': 'image/gif' 752 | } 753 | } 754 | }); 755 | }); 756 | 757 | it('parses an uploaded blank gif file', async () => { 758 | 759 | const team = new Teamwork.Team(); 760 | const server = Http.createServer(async (req, res) => { 761 | 762 | const contentType = Content.type(req.headers['content-type']); 763 | const result = await internals.interceptor(req, contentType.boundary); 764 | expect(result).to.equal({ 765 | file: { 766 | value: Fs.readFileSync('./test/files/blank.gif').toString(), 767 | headers: { 768 | 'content-disposition': 'form-data; name="file"; filename="blank.gif"', 769 | 'content-type': 'image/gif' 770 | }, 771 | filename: 'blank.gif' 772 | } 773 | }); 774 | team.attend(); 775 | }).listen(0, '127.0.0.1'); 776 | 777 | server.once('listening', () => { 778 | 779 | const form = new FormData(); 780 | form.append('file', Fs.createReadStream('./test/files/blank.gif')); 781 | Wreck.request('POST', 'http://127.0.0.1:' + server.address().port, { payload: form, headers: form.getHeaders() }); 782 | }); 783 | 784 | await team.work; 785 | }); 786 | 787 | it('parses an empty file without a filename', async () => { 788 | 789 | const payload = 790 | '--AaB03x\r\n' + 791 | 'content-disposition: form-data; name="file"; filename=""\r\n' + 792 | '\r\n' + 793 | '\r\n' + 794 | '--AaB03x--\r\n'; 795 | 796 | const data = await simulate(payload, 'AaB03x'); 797 | expect(data).to.equal({ 798 | file: { 799 | value: '', 800 | headers: { 801 | 'content-disposition': 'form-data; name="file"; filename=""' 802 | } 803 | } 804 | }); 805 | }); 806 | 807 | it('parses a file without a filename', async () => { 808 | 809 | const blankgif = Fs.readFileSync('./test/files/blank.gif'); 810 | 811 | const payload = 812 | '--AaB03x\r\n' + 813 | 'content-disposition: form-data; name="file"; filename=""\r\n' + 814 | 'content-transfer-encoding: base64\r\n' + 815 | 'Content-Type: image/gif\r\n' + 816 | '\r\n' + 817 | B64.encode(blankgif) + '\r\n' + 818 | '--AaB03x--\r\n'; 819 | 820 | const data = await simulate(payload, 'AaB03x'); 821 | expect(data).to.equal({ 822 | file: { 823 | value: blankgif.toString(), 824 | headers: { 825 | 'content-disposition': 'form-data; name="file"; filename=""', 826 | 'content-transfer-encoding': 'base64', 827 | 'content-type': 'image/gif' 828 | } 829 | } 830 | }); 831 | }); 832 | 833 | it('handles unusual filename', async () => { 834 | 835 | const blankgif = Fs.readFileSync('./test/files/blank.gif'); 836 | const filename = ': \\ ? % * | %22 < > . ? ; \' @ # $ ^ & ( ) - _ = + { } [ ] ` ~.txt'; 837 | 838 | const payload = 839 | '--AaB03x\r\n' + 840 | 'content-disposition: form-data; name="file"; filename="' + filename + '"\r\n' + 841 | 'content-transfer-encoding: base64\r\n' + 842 | 'Content-Type: image/gif\r\n' + 843 | '\r\n' + 844 | B64.encode(blankgif) + '\r\n' + 845 | '--AaB03x--\r\n'; 846 | 847 | const data = await simulate(payload, 'AaB03x'); 848 | expect(data).to.equal({ 849 | file: { 850 | value: blankgif.toString(), 851 | headers: { 852 | 'content-disposition': 'form-data; name="file"; filename="' + filename + '"', 853 | 'content-transfer-encoding': 'base64', 854 | 'content-type': 'image/gif' 855 | }, 856 | filename 857 | } 858 | }); 859 | }); 860 | 861 | it('errors on __proto__ header', async () => { 862 | 863 | const payload = 864 | 'pre\r\nemble\r\n' + 865 | '--AaB03x\r\n' + 866 | 'content-disposition: form-data; name="field1"\r\n' + 867 | '__proto__: bad\r\n' + 868 | '\r\n' + 869 | 'one\r\ntwo\r\n' + 870 | '--AaB03x\r\n' + 871 | 'content-disposition: form-data; name="pics"; filename="file1.txt"\r\n' + 872 | 'content-transfer-encoding: 7bit\r\n' + 873 | 'Content-Type: text/plain\r\n' + 874 | '\r\n' + 875 | 'some content\r\nwith \rnewline\r\r\n' + 876 | '--AaB03x--\r\n' + 877 | 'epi\r\nlogue'; 878 | 879 | await expect(simulate(payload, 'AaB03x')).to.reject('Invalid header'); 880 | }); 881 | }); 882 | 883 | 884 | internals.Payload = class extends Stream.Readable { 885 | 886 | constructor(payload, err) { 887 | 888 | super(); 889 | 890 | this._data = [].concat(payload); 891 | this._position = 0; 892 | this._err = err; 893 | } 894 | 895 | _read(size) { 896 | 897 | const chunk = this._data[this._position++]; 898 | 899 | if (chunk) { 900 | this.push(chunk); 901 | } 902 | else if (!this._err) { 903 | this.push(null); 904 | } 905 | } 906 | }; 907 | 908 | 909 | internals.Recorder = class extends Stream.Writable { 910 | 911 | constructor() { 912 | 913 | super(); 914 | 915 | this.buffers = []; 916 | this.nexts = []; 917 | this.length = 0; 918 | } 919 | 920 | _write(chunk, encoding, next) { 921 | 922 | this.length = this.length + chunk.length; 923 | this.buffers.push(chunk); 924 | this.nexts.push(next); 925 | this.emit('ping'); 926 | } 927 | 928 | collect() { 929 | 930 | const buffer = (this.buffers.length === 0 ? Buffer.alloc(0) : (this.buffers.length === 1 ? this.buffers[0] : Buffer.concat(this.buffers, this.length))); 931 | return buffer; 932 | } 933 | 934 | next() { 935 | 936 | for (let i = 0; i < this.nexts.length; ++i) { 937 | this.nexts[i](); 938 | } 939 | 940 | this.nexts = []; 941 | } 942 | }; 943 | 944 | 945 | internals.interceptor = function (req, boundary) { 946 | 947 | const dispenser = new Pez.Dispenser({ boundary }); 948 | const data = {}; 949 | const set = function (name, value, headers, filename) { 950 | 951 | const item = { value }; 952 | 953 | if (headers) { 954 | item.headers = headers; 955 | } 956 | 957 | if (filename) { 958 | item.filename = filename; 959 | } 960 | 961 | if (!data.hasOwnProperty(name)) { 962 | data[name] = item; 963 | } 964 | else if (Array.isArray(data[name])) { 965 | data[name].push(item); 966 | } 967 | else { 968 | data[name] = [data[name], item]; 969 | } 970 | }; 971 | 972 | dispenser.on('preamble', (chunk) => { 973 | 974 | set('preamble', chunk.toString()); 975 | }); 976 | 977 | dispenser.on('epilogue', (value) => { 978 | 979 | set('epilogue', value); 980 | }); 981 | 982 | dispenser.on('part', async (part) => { 983 | 984 | const payload = await Wreck.read(part); 985 | set(part.name, payload.toString(), part.headers, part.filename); 986 | }); 987 | 988 | dispenser.on('field', (name, value) => { 989 | 990 | set(name, value); 991 | }); 992 | 993 | return new Promise((resolve, reject) => { 994 | 995 | dispenser.once('close', () => resolve(data)); 996 | dispenser.once('error', reject); 997 | req.pipe(dispenser); 998 | }); 999 | }; 1000 | --------------------------------------------------------------------------------