30105224435

Committed 24 Jul 2026 03:25PM UTC coverage: 59.634% (-20.8%) from 80.45%

Build # 30105224435

Build Type

Pull #1261

github

Committed by

web-flow

Commit Message

Merge 56e9321c4 into 42bb7886c

Pull Request Pull Request #1261: chore(deps): bump @opentelemetry/instrumentation-pg from 0.64.0 to 0.72.0

Coverage Stats

3705 of 7077 branches covered (52.35%)

Branch coverage included in aggregate %.

7681 of 12016 relevant lines covered (63.92%)

370.0 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

54.05

/src/http/plugins/header-validator.ts

import { ERRORS } from '@internal/errors'
import { hasInvalidHeaderValueChars } from '@internal/http/header'
import { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify'
import fastifyPlugin from 'fastify-plugin'

interface HeaderValidatorOptions {
  excludeUrls?: Set<string>
}

/**
 * Validates response headers before they're sent to prevent ERR_INVALID_CHAR crashes.
 *
 * Node.js throws ERR_INVALID_CHAR during writeHead() if headers contain control characters.
 * This hook validates headers in onSend (before writeHead) and throws InvalidHeaderChar error
 */
export const headerValidator = (options: HeaderValidatorOptions = {}) =>
  fastifyPlugin(
    async function headerValidatorPlugin(fastify: FastifyInstance) {
      const excludeUrls = options.excludeUrls?.size ? options.excludeUrls : undefined

      fastify.addHook('onSend', (request: FastifyRequest, reply: FastifyReply, payload, done) => {
        if (excludeUrls?.has(request.url)) {
          done(null, payload)
          return
        }

        const headers = reply.getHeaders()
        for (const key in headers) {
          if (!Object.prototype.hasOwnProperty.call(headers, key)) {
            continue
          }
          const value = headers[key]
          if (typeof value === 'string') {
            if (hasInvalidHeaderValueChars(value)) {
              throw ERRORS.InvalidHeaderChar(key, value)
            }
          } else if (Array.isArray(value)) {
            for (let j = 0; j < value.length; j++) {
              const item = value[j]
              if (typeof item === 'string' && hasInvalidHeaderValueChars(item)) {
                throw ERRORS.InvalidHeaderChar(key, item)
              }
            }
          }
        }

        done(null, payload)
      })
    },
    { name: 'header-validator' }
  )

1	import { ERRORS } from '@internal/errors'
2	import { hasInvalidHeaderValueChars } from '@internal/http/header'
3	import { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify'
4	import fastifyPlugin from 'fastify-plugin'
5
6	interface HeaderValidatorOptions {
7	excludeUrls?: Set<string>
8	}
9
10	/**
11	* Validates response headers before they're sent to prevent ERR_INVALID_CHAR crashes.
12	*
13	* Node.js throws ERR_INVALID_CHAR during writeHead() if headers contain control characters.
14	* This hook validates headers in onSend (before writeHead) and throws InvalidHeaderChar error
15	*/
16	export const headerValidator = (options: HeaderValidatorOptions = {}) =>	290✔
17	fastifyPlugin(
18	async function headerValidatorPlugin(fastify: FastifyInstance) {
19	const excludeUrls = options.excludeUrls?.size ? options.excludeUrls : undefined	290!
20
21	fastify.addHook('onSend', (request: FastifyRequest, reply: FastifyReply, payload, done) => {	290✔
22	if (excludeUrls?.has(request.url)) {	1,363!
23	done(null, payload)	×
24	return	×
25	}
26
27	const headers = reply.getHeaders()	1,363✔
28	for (const key in headers) {	1,363✔
29	if (!Object.prototype.hasOwnProperty.call(headers, key)) {	1,583!
30	continue	×
31	}
32	const value = headers[key]	1,583✔
33	if (typeof value === 'string') {	1,583✔
34	if (hasInvalidHeaderValueChars(value)) {	1,543!
35	throw ERRORS.InvalidHeaderChar(key, value)	×
36	}
37	} else if (Array.isArray(value)) {	40!
38	for (let j = 0; j < value.length; j++) {	×
39	const item = value[j]	×
40	if (typeof item === 'string' && hasInvalidHeaderValueChars(item)) {	×
41	throw ERRORS.InvalidHeaderChar(key, item)	×
42	}
43	}
44	}
45	}
46
47	done(null, payload)	1,363✔
48	})
49	},
50	{ name: 'header-validator' }
51	)

supabase / storage / 30105224435

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous