tbenandClaude Opus 5.5
74103a19c9
- Move page cache out of the publicly served .bunext/public dir and hash cache keys - Skip caching credentialed requests, non-2xx and Set-Cookie responses; cap entries - Enforce API body size limit while reading; keep req body readable for handlers - Hide error messages from clients in production - Escape inline script JSON; strip cookies from HMR payloads - Only trust X-Forwarded-Proto with trust_proxy config - Fix console race in SSR, dotted page paths, middleware rewrites, excluded path status, encoded static file names, symlinked dirs - Upgrade vulnerable deps, remove micromatch, pin bun versions, delete dead code Co-Authored-By: Claude Opus 5.5 <[email protected]>
80 lines
2.1 KiB
TypeScript
80 lines
2.1 KiB
TypeScript
import _ from "lodash";
|
|
import type {
|
|
BunextPageModule,
|
|
BunextPageModuleServerReturn,
|
|
BunxRouteParams,
|
|
} from "../../../types";
|
|
import { log } from "../../../utils/log";
|
|
import writeCache from "../../cache/write-cache";
|
|
|
|
type Params = {
|
|
html: string;
|
|
module?: BunextPageModule;
|
|
root_module?: BunextPageModule;
|
|
routeParams?: BunxRouteParams;
|
|
serverRes?: BunextPageModuleServerReturn<any, any>;
|
|
};
|
|
|
|
export default async function generateWebPageGetCachePage({
|
|
module,
|
|
routeParams,
|
|
serverRes,
|
|
root_module,
|
|
html,
|
|
}: Params) {
|
|
const config = _.merge(root_module?.config, module?.config);
|
|
|
|
const cache_page = config?.cachePage || serverRes?.cache_page || false;
|
|
const expiry_seconds = config?.cacheExpiry || serverRes?.cache_expiry;
|
|
|
|
if (cache_page && routeParams?.url) {
|
|
try {
|
|
const status = serverRes?.response_options?.status;
|
|
|
|
if (status && (status < 200 || status >= 300)) {
|
|
return false;
|
|
}
|
|
|
|
const res_headers = new Headers(
|
|
serverRes?.response_options?.headers,
|
|
);
|
|
|
|
if (res_headers.has("set-cookie")) {
|
|
return false;
|
|
}
|
|
|
|
const req_headers = routeParams.req.headers;
|
|
|
|
if (
|
|
!global.BUNEXT_CONFIG?.cache_credentialed_requests &&
|
|
(req_headers.has("cookie") || req_headers.has("authorization"))
|
|
) {
|
|
return false;
|
|
}
|
|
|
|
const is_cache =
|
|
typeof cache_page == "boolean"
|
|
? cache_page
|
|
: await cache_page({ ctx: routeParams, serverRes });
|
|
|
|
if (!is_cache) {
|
|
return false;
|
|
}
|
|
|
|
const key =
|
|
routeParams.url.pathname + (routeParams.url.search || "");
|
|
|
|
writeCache({
|
|
key,
|
|
value: html,
|
|
paradigm: "html",
|
|
expiry_seconds,
|
|
});
|
|
} catch (error: any) {
|
|
log.error(`Error writing Cache => ${error.message}\n`, error);
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|