chubbyts / chubbyts-undici-static-file / 29862279984

100%

push

github

security fixes

- resolve public directory and requested file via realpath and only
    serve files strictly inside the public directory (rejects escaping
    symlinks, defense-in-depth against path traversal)
  - only serve regular files: directories, fifos, sockets and devices
    respond 404 instead of hanging the request
  - only handle GET and HEAD, other methods respond 405; HEAD returns
    headers without body
- quote the ETag per RFC 9110 and support "*", weak validators
(W/"...")
    and lists in If-None-Match
  - respond 404 instead of hanging or crashing on unreadable/unhashable
    files or a missing/invalid public directory
  - serve size, hash and body from a single file handle to avoid races
    with concurrent file changes

35 of 35 branches covered (100.0%)

Branch coverage included in aggregate %.

41 of 0 new or added lines in 0 files covered. (NaN%)

53 of 53 relevant lines covered (100.0%)

20.6 hits per line