修复propfind depth问题

masx200 · Sep 2, 2020 · efc5e5f · efc5e5f
1 parent 9a2c4bb
commit efc5e5f
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 8 deletions.
diff --git a/dist/webdav-cli.server.js b/dist/webdav-cli.server.js
@@ -110,6 +110,16 @@ class WebdavCli {
             console.log({ method, url }, headers);
             next();
         });
+        server.beforeRequest((arg, next) => {
+            const { headers, method } = arg.request;
+            const { depth } = headers;
+            if (method === 'PROPFIND' && depth !== '0' && depth !== '1') {
+                arg.setCode(403);
+                arg.exit();
+            } else {
+                next();
+            }
+        });
         server.afterRequest((arg, next) => {
             const log = `>> ${arg.request.method} ${arg.requested.uri} > ${arg.response.statusCode} ${arg.response.statusMessage}`;
             console.log(log);

diff --git a/package.json b/package.json
@@ -4,7 +4,7 @@
         "registry": "https://registry.npmjs.com"
     },
     "name": "@masx200/webdav-cli",
-    "version": "2.0.0",
+    "version": "2.0.1",
     "description": "A simple zero-configuration command-line webdav server",
     "license": "MIT",
     "keywords": [
@@ -13,12 +13,6 @@
         "webdav",
         "server"
     ],
-    "files": [
-        "dist",
-        "certs",
-        "index.js",
-        "index.d.ts"
-    ],
     "bin": {
         "webdav-cli": "dist/webdav-cli.cli.js"
     },

diff --git a/src/webdav-cli.server.ts b/src/webdav-cli.server.ts
@@ -139,7 +139,16 @@ export class WebdavCli {
             console.log({ method, url }, headers);
             next();
         });
-
+        server.beforeRequest((arg, next) => {
+            const { headers, method } = arg.request;
+            const { depth } = headers;
+            if (method === 'PROPFIND' && depth !== '0' && depth !== '1') {
+                arg.setCode(403);
+                arg.exit();
+            } else {
+                next();
+            }
+        });
         server.afterRequest((arg, next) => {
             const log = `>> ${arg.request.method} ${arg.requested.uri} > ${arg.response.statusCode} ${arg.response.statusMessage}`;
             // server.emit('log', null, null, '/', log);