browsec/trustlab/ui/dev-server.js

55 lines
1.8 KiB
JavaScript

import { createServer } from "node:http";
import { readFile } from "node:fs/promises";
import { extname, resolve, sep } from "node:path";
import { fileURLToPath } from "node:url";
const trustlabRoot = resolve(fileURLToPath(new URL("..", import.meta.url)));
const host = "127.0.0.1";
const port = Number.parseInt(process.env.TRUSTLAB_PORT ?? "4173", 10);
const contentTypes = {
".css": "text/css; charset=utf-8",
".html": "text/html; charset=utf-8",
".js": "text/javascript; charset=utf-8",
".json": "application/json; charset=utf-8",
};
const server = createServer(async (request, response) => {
try {
const url = new URL(request.url ?? "/", `http://${host}:${port}`);
const relativePath = url.pathname === "/" ? "ui/index.html" : url.pathname.slice(1);
const requestedPath = resolve(trustlabRoot, relativePath);
if (!requestedPath.startsWith(`${trustlabRoot}${sep}`)) {
respond(response, 403, "Forbidden");
return;
}
const body = await readFile(requestedPath);
response.writeHead(200, {
"Content-Type": contentTypes[extname(requestedPath)] ?? "application/octet-stream",
"Cache-Control": "no-store",
"X-Content-Type-Options": "nosniff",
"Content-Security-Policy": "default-src 'self'; style-src 'self'; script-src 'self'; object-src 'none'; frame-ancestors 'none'",
});
response.end(body);
} catch (error) {
if (error?.code === "ENOENT" || error?.code === "EISDIR") {
respond(response, 404, "Not found");
return;
}
respond(response, 500, "Internal server error");
}
});
server.listen(port, host, () => {
console.log(`TrustLab UI: http://${host}:${port}`);
});
function respond(response, status, message) {
response.writeHead(status, {
"Content-Type": "text/plain; charset=utf-8",
"Cache-Control": "no-store",
});
response.end(message);
}