2 import { UploadFilesForCheck } from 'express'
3 import { sep } from 'path'
4 import validator from 'validator'
5 import { isShortUUID, shortToUUID } from '@shared/extra-utils'
7 function exists (value: any) {
8 return value !== undefined && value !== null
11 function isSafePath (p: string) {
13 (p + '').split(sep).every(part => {
14 return [ '..' ].includes(part) === false
18 function isSafeFilename (filename: string, extension?: string) {
19 const regex = extension
20 ? new RegExp(`^[a-z0-9-]+\\.${extension}$`)
21 : new RegExp(`^[a-z0-9-]+\\.[a-z0-9]{1,8}$`)
23 return typeof filename === 'string' && !!filename.match(regex)
26 function isSafePeerTubeFilenameWithoutExtension (filename: string) {
27 return filename.match(/^[a-z0-9-]+$/)
30 function isArray (value: any): value is any[] {
31 return Array.isArray(value)
34 function isNotEmptyIntArray (value: any) {
35 return Array.isArray(value) && value.every(v => validator.isInt('' + v)) && value.length !== 0
38 function isNotEmptyStringArray (value: any) {
39 return Array.isArray(value) && value.every(v => typeof v === 'string' && v.length !== 0) && value.length !== 0
42 function isArrayOf (value: any, validator: (value: any) => boolean) {
43 return isArray(value) && value.every(v => validator(v))
46 function isDateValid (value: string) {
47 return exists(value) && validator.isISO8601(value)
50 function isIdValid (value: string) {
51 return exists(value) && validator.isInt('' + value)
54 function isUUIDValid (value: string) {
55 return exists(value) && validator.isUUID('' + value, 4)
58 function areUUIDsValid (values: string[]) {
59 return isArray(values) && values.every(v => isUUIDValid(v))
62 function isIdOrUUIDValid (value: string) {
63 return isIdValid(value) || isUUIDValid(value)
66 function isBooleanValid (value: any) {
67 return typeof value === 'boolean' || (typeof value === 'string' && validator.isBoolean(value))
70 function isIntOrNull (value: any) {
71 return value === null || validator.isInt('' + value)
74 // ---------------------------------------------------------------------------
76 function isFileValid (options: {
77 files: UploadFilesForCheck
79 maxSize: number | null
80 mimeTypeRegex: string | null
84 optional?: boolean // Default false
86 const { files, mimeTypeRegex, field, maxSize, optional = false } = options
89 if (!files) return optional
91 const fileArray = isArray(files)
95 if (!fileArray || !isArray(fileArray) || fileArray.length === 0) {
100 const file = fileArray[0]
101 if (!file?.originalname) return false
104 if ((maxSize !== null) && file.size > maxSize) return false
106 if (mimeTypeRegex === null) return true
108 return checkMimetypeRegex(file.mimetype, mimeTypeRegex)
111 function checkMimetypeRegex (fileMimeType: string, mimeTypeRegex: string) {
112 return new RegExp(`^${mimeTypeRegex}$`, 'i').test(fileMimeType)
115 // ---------------------------------------------------------------------------
117 function toCompleteUUID (value: string) {
118 if (isShortUUID(value)) {
120 return shortToUUID(value)
129 function toCompleteUUIDs (values: string[]) {
130 return values.map(v => toCompleteUUID(v))
133 function toIntOrNull (value: string) {
134 const v = toValueOrNull(value)
136 if (v === null || v === undefined) return v
137 if (typeof v === 'number') return v
139 return validator.toInt('' + v)
142 function toBooleanOrNull (value: any) {
143 const v = toValueOrNull(value)
145 if (v === null || v === undefined) return v
146 if (typeof v === 'boolean') return v
148 return validator.toBoolean('' + v)
151 function toValueOrNull (value: string) {
152 if (value === 'null') return null
157 function toIntArray (value: any) {
158 if (!value) return []
159 if (isArray(value) === false) return [ validator.toInt(value) ]
161 return value.map(v => validator.toInt(v))
164 // ---------------------------------------------------------------------------
174 isNotEmptyStringArray,
187 isSafePeerTubeFilenameWithoutExtension,