29397915687

Committed 15 Jul 2026 07:36AM UTC coverage: 58.511% (-20.9%) from 79.363%

Build # 29397915687

Build Type

Pull #1230

github

Committed by

web-flow

Commit Message

Merge 9b3616757 into 5e9d4227f

Pull Request Pull Request #1230: feat: Added separate Database application.

Coverage Stats

3563 of 6966 branches covered (51.15%)

Branch coverage included in aggregate %.

11 of 127 new or added lines in 4 files covered. (8.66%)

2373 existing lines in 100 files now uncovered.

7519 of 11974 relevant lines covered (62.79%)

383.06 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

54.05

/src/http/plugins/header-validator.ts

import { ERRORS } from '@internal/errors'
import { hasInvalidHeaderValueChars } from '@internal/http/header'
import { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify'
import fastifyPlugin from 'fastify-plugin'

interface HeaderValidatorOptions {
  excludeUrls?: Set<string>
}

/**
 * Validates response headers before they're sent to prevent ERR_INVALID_CHAR crashes.
 *
 * Node.js throws ERR_INVALID_CHAR during writeHead() if headers contain control characters.
 * This hook validates headers in onSend (before writeHead) and throws InvalidHeaderChar error
 */
export const headerValidator = (options: HeaderValidatorOptions = {}) =>
  fastifyPlugin(
    async function headerValidatorPlugin(fastify: FastifyInstance) {
      const excludeUrls = options.excludeUrls?.size ? options.excludeUrls : undefined

      fastify.addHook('onSend', (request: FastifyRequest, reply: FastifyReply, payload, done) => {
        if (excludeUrls?.has(request.url)) {
          done(null, payload)
          return
        }

        const headers = reply.getHeaders()
        for (const key in headers) {
          if (!Object.prototype.hasOwnProperty.call(headers, key)) {
            continue
          }
          const value = headers[key]
          if (typeof value === 'string') {
            if (hasInvalidHeaderValueChars(value)) {
              throw ERRORS.InvalidHeaderChar(key, value)
            }
          } else if (Array.isArray(value)) {
            for (let j = 0; j < value.length; j++) {
              const item = value[j]
              if (typeof item === 'string' && hasInvalidHeaderValueChars(item)) {
                throw ERRORS.InvalidHeaderChar(key, item)
              }
            }
          }
        }

        done(null, payload)
      })
    },
    { name: 'header-validator' }
  )

1	import { ERRORS } from '@internal/errors'
2	import { hasInvalidHeaderValueChars } from '@internal/http/header'
3	import { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify'
4	import fastifyPlugin from 'fastify-plugin'
5
6	interface HeaderValidatorOptions {
7	excludeUrls?: Set<string>
8	}
9
10	/**
11	* Validates response headers before they're sent to prevent ERR_INVALID_CHAR crashes.
12	*
13	* Node.js throws ERR_INVALID_CHAR during writeHead() if headers contain control characters.
14	* This hook validates headers in onSend (before writeHead) and throws InvalidHeaderChar error
15	*/
16	export const headerValidator = (options: HeaderValidatorOptions = {}) =>	285✔
17	fastifyPlugin(
18	async function headerValidatorPlugin(fastify: FastifyInstance) {
19	const excludeUrls = options.excludeUrls?.size ? options.excludeUrls : undefined	285!
20
21	fastify.addHook('onSend', (request: FastifyRequest, reply: FastifyReply, payload, done) => {	285✔
22	if (excludeUrls?.has(request.url)) {	1,318!
23	done(null, payload)	×
24	return	×
25	}
26
27	const headers = reply.getHeaders()	1,318✔
28	for (const key in headers) {	1,318✔
29	if (!Object.prototype.hasOwnProperty.call(headers, key)) {	1,534!
30	continue	×
31	}
32	const value = headers[key]	1,534✔
33	if (typeof value === 'string') {	1,534✔
34	if (hasInvalidHeaderValueChars(value)) {	1,494!
UNCOV 35	throw ERRORS.InvalidHeaderChar(key, value)	×
36	}
37	} else if (Array.isArray(value)) {	40!
UNCOV 38	for (let j = 0; j < value.length; j++) {	×
UNCOV 39	const item = value[j]	×
UNCOV 40	if (typeof item === 'string' && hasInvalidHeaderValueChars(item)) {	×
UNCOV 41	throw ERRORS.InvalidHeaderChar(key, item)	×
42	}
43	}
44	}
45	}
46
47	done(null, payload)	1,318✔
48	})
49	},
50	{ name: 'header-validator' }
51	)

supabase / storage / 29397915687

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous