lanyuanxiaoyao
bcfac52112
- failure actual 截断格式改为 …(共 N 字符)，标量不序列化直接返回 - 新增 redos.ts 实现 ReDoS 静态检测（嵌套量词/重叠交替），启动期拒绝危险正则 - JSON body rules 共享同一次 JSON.parse 结果，避免重复解析 - checkCssRule 重构为线性流程，消除 exist:true 与无 operator 的冗余分支 - extract checkEarlyTimeout 辅助函数，明确提前 duration 检查意图 - 补充 303/307/308 重定向、相对路径 Location、混合 body rules 集成测试
82 lines
3.0 KiB
TypeScript
82 lines
3.0 KiB
TypeScript
import type { ConfigValidationIssue } from "../schema/issues";
|
|
import type { JsonValue } from "../types";
|
|
|
|
import { OperatorKeys } from "../schema/fragments";
|
|
import { issue, joinPath } from "../schema/issues";
|
|
import { isUnsafeRegex } from "./redos";
|
|
|
|
const OPERATOR_KEY_SET = new Set<string>(OperatorKeys);
|
|
|
|
export function isJsonValue(value: unknown): value is JsonValue {
|
|
if (value === null) return true;
|
|
if (typeof value === "string" || typeof value === "boolean") return true;
|
|
if (typeof value === "number") return Number.isFinite(value);
|
|
if (Array.isArray(value)) return value.every(isJsonValue);
|
|
if (typeof value === "object") {
|
|
return Object.values(value as Record<string, unknown>).every(isJsonValue);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
export function isPlainRecord(value: unknown): value is Record<string, unknown> {
|
|
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
}
|
|
|
|
export function validateOperatorObject(
|
|
operators: unknown,
|
|
path: string,
|
|
targetName?: string,
|
|
options: { requireAtLeastOne: boolean } = { requireAtLeastOne: true },
|
|
): ConfigValidationIssue[] {
|
|
if (!isPlainRecord(operators)) return [issue("invalid-type", path, "必须为操作符对象", targetName)];
|
|
const issues: ConfigValidationIssue[] = [];
|
|
let found = 0;
|
|
for (const [key, value] of Object.entries(operators)) {
|
|
if (!OPERATOR_KEY_SET.has(key)) {
|
|
issues.push(issue("unknown-operator", joinPath(path, key), "是未知 operator", targetName));
|
|
continue;
|
|
}
|
|
if (value === undefined) continue;
|
|
found++;
|
|
issues.push(...validateOperatorValue(key, value, joinPath(path, key), targetName));
|
|
}
|
|
if (options.requireAtLeastOne && found === 0) {
|
|
issues.push(issue("empty-operator", path, "必须包含至少一个合法 operator", targetName));
|
|
}
|
|
return issues;
|
|
}
|
|
|
|
export function validateOperatorValue(
|
|
key: string,
|
|
value: unknown,
|
|
path: string,
|
|
targetName?: string,
|
|
): ConfigValidationIssue[] {
|
|
switch (key) {
|
|
case "contains":
|
|
return typeof value === "string" ? [] : [issue("invalid-type", path, "必须为字符串", targetName)];
|
|
case "empty":
|
|
case "exists":
|
|
return typeof value === "boolean" ? [] : [issue("invalid-type", path, "必须为布尔值", targetName)];
|
|
case "equals":
|
|
return isJsonValue(value) ? [] : [issue("invalid-type", path, "必须为 JSON value", targetName)];
|
|
case "gt":
|
|
case "gte":
|
|
case "lt":
|
|
case "lte":
|
|
return typeof value === "number" && Number.isFinite(value)
|
|
? []
|
|
: [issue("invalid-type", path, "必须为有限数字", targetName)];
|
|
case "match":
|
|
if (typeof value !== "string") return [issue("invalid-type", path, "必须为字符串", targetName)];
|
|
try {
|
|
new RegExp(value);
|
|
} catch {
|
|
return [issue("invalid-regex", path, "正则不合法", targetName)];
|
|
}
|
|
return isUnsafeRegex(value) ? [issue("unsafe-regex", path, "正则存在 ReDoS 风险", targetName)] : [];
|
|
default:
|
|
return [issue("unknown-operator", path, "是未知 operator", targetName)];
|
|
}
|
|
}
|