mirror of
https://github.com/zarzet/SpotiFLAC-Mobile.git
synced 2026-09-03 00:30:54 +02:00
646 lines
15 KiB
Go
646 lines
15 KiB
Go
package gobackend
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"sync"
|
|
|
|
"github.com/dop251/goja"
|
|
)
|
|
|
|
var (
|
|
allowedDownloadDirs []string
|
|
allowedDownloadDirsMu sync.RWMutex
|
|
)
|
|
|
|
func AddAllowedDownloadDir(dir string) {
|
|
absDir, err := filepath.Abs(dir)
|
|
if err != nil {
|
|
return
|
|
}
|
|
absDir = filepath.Clean(absDir)
|
|
|
|
allowedDownloadDirsMu.Lock()
|
|
defer allowedDownloadDirsMu.Unlock()
|
|
for _, existing := range allowedDownloadDirs {
|
|
if existing == absDir {
|
|
return
|
|
}
|
|
}
|
|
allowedDownloadDirs = append(allowedDownloadDirs, absDir)
|
|
}
|
|
|
|
// SetAllowedDownloadDirs replaces the whole allow-list in one call (passing nil
|
|
// clears it). Used by tests to reset the sandbox between cases; production code
|
|
// appends via AddAllowedDownloadDir.
|
|
func SetAllowedDownloadDirs(dirs []string) {
|
|
allowedDownloadDirsMu.Lock()
|
|
defer allowedDownloadDirsMu.Unlock()
|
|
allowedDownloadDirs = nil
|
|
seen := make(map[string]struct{}, len(dirs))
|
|
for _, dir := range dirs {
|
|
absDir, err := filepath.Abs(dir)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
absDir = filepath.Clean(absDir)
|
|
if _, duplicate := seen[absDir]; duplicate {
|
|
continue
|
|
}
|
|
seen[absDir] = struct{}{}
|
|
allowedDownloadDirs = append(allowedDownloadDirs, absDir)
|
|
}
|
|
}
|
|
|
|
func isPathInAllowedDirs(absPath string) bool {
|
|
allowedDownloadDirsMu.RLock()
|
|
defer allowedDownloadDirsMu.RUnlock()
|
|
|
|
for _, allowedDir := range allowedDownloadDirs {
|
|
if isPathWithinBase(allowedDir, absPath) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func isPathWithinBase(baseDir, targetPath string) bool {
|
|
baseAbs, err := filepath.Abs(baseDir)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
targetAbs, err := filepath.Abs(targetPath)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
|
|
rel, err := filepath.Rel(baseAbs, targetAbs)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
rel = filepath.Clean(rel)
|
|
if rel == "." {
|
|
return true
|
|
}
|
|
|
|
prefix := ".." + string(filepath.Separator)
|
|
if rel == ".." || strings.HasPrefix(rel, prefix) {
|
|
return false
|
|
}
|
|
return true
|
|
}
|
|
|
|
func (r *extensionRuntime) validatePath(path string) (string, error) {
|
|
if !r.manifest.Permissions.File {
|
|
return "", fmt.Errorf("file access denied: extension does not have 'file' permission")
|
|
}
|
|
|
|
cleanPath := filepath.Clean(path)
|
|
|
|
if filepath.IsAbs(cleanPath) {
|
|
absPath, err := filepath.Abs(cleanPath)
|
|
if err != nil {
|
|
return "", fmt.Errorf("invalid path: %w", err)
|
|
}
|
|
|
|
if isPathInAllowedDirs(absPath) {
|
|
return absPath, nil
|
|
}
|
|
|
|
return "", fmt.Errorf("file access denied: absolute paths are not allowed. Use relative paths within extension sandbox")
|
|
}
|
|
|
|
fullPath := filepath.Join(r.dataDir, cleanPath)
|
|
|
|
absPath, err := filepath.Abs(fullPath)
|
|
if err != nil {
|
|
return "", fmt.Errorf("invalid path: %w", err)
|
|
}
|
|
|
|
absDataDir, _ := filepath.Abs(r.dataDir)
|
|
if !isPathWithinBase(absDataDir, absPath) {
|
|
return "", fmt.Errorf("file access denied: path '%s' is outside sandbox", path)
|
|
}
|
|
|
|
return absPath, nil
|
|
}
|
|
|
|
func (r *extensionRuntime) fileDownload(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 2 {
|
|
return r.jsError("URL and output path are required")
|
|
}
|
|
|
|
urlStr := call.Arguments[0].String()
|
|
outputPath := call.Arguments[1].String()
|
|
|
|
if err := r.validateDomain(urlStr); err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
fullPath, err := r.validatePath(outputPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
var onProgress goja.Callable
|
|
var headers map[string]string
|
|
var chunkedDownload bool
|
|
var resumeDownload bool
|
|
var resumeOptionSet bool
|
|
var persistentCheckpointOption *bool
|
|
var maxAttemptsOption int
|
|
trackItemBytes := true
|
|
var chunkSize int64
|
|
if len(call.Arguments) > 2 && !goja.IsUndefined(call.Arguments[2]) && !goja.IsNull(call.Arguments[2]) {
|
|
optionsObj := call.Arguments[2].Export()
|
|
if opts, ok := optionsObj.(map[string]any); ok {
|
|
if h, ok := opts["headers"].(map[string]any); ok {
|
|
headers = make(map[string]string)
|
|
for k, v := range h {
|
|
headers[k] = fmt.Sprintf("%v", v)
|
|
}
|
|
}
|
|
if progressVal, ok := opts["onProgress"]; ok {
|
|
if callable, ok := goja.AssertFunction(r.vm.ToValue(progressVal)); ok {
|
|
onProgress = callable
|
|
}
|
|
}
|
|
if trackBytes, ok := opts["trackItemBytes"]; ok {
|
|
if v, ok := trackBytes.(bool); ok {
|
|
trackItemBytes = v
|
|
}
|
|
} else if trackBytes, ok := opts["track_item_bytes"]; ok {
|
|
if v, ok := trackBytes.(bool); ok {
|
|
trackItemBytes = v
|
|
}
|
|
}
|
|
if chunked, ok := opts["chunked"]; ok {
|
|
switch v := chunked.(type) {
|
|
case bool:
|
|
chunkedDownload = v
|
|
case int64:
|
|
if v > 0 {
|
|
chunkedDownload = true
|
|
chunkSize = v
|
|
}
|
|
case float64:
|
|
if v > 0 {
|
|
chunkedDownload = true
|
|
chunkSize = int64(v)
|
|
}
|
|
}
|
|
}
|
|
if resume, ok := opts["resume"]; ok {
|
|
if v, ok := resume.(bool); ok {
|
|
resumeDownload = v
|
|
resumeOptionSet = true
|
|
}
|
|
}
|
|
if checkpoint, ok := opts["persistentCheckpoint"]; ok {
|
|
if v, ok := checkpoint.(bool); ok {
|
|
persistentCheckpointOption = &v
|
|
}
|
|
}
|
|
if attempts, ok := opts["maxAttempts"]; ok {
|
|
switch v := attempts.(type) {
|
|
case int64:
|
|
maxAttemptsOption = int(v)
|
|
case float64:
|
|
maxAttemptsOption = int(v)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Default chunk size: 1MB (YouTube CDN max without poToken)
|
|
if chunkedDownload && chunkSize <= 0 {
|
|
chunkSize = 1024 * 1024
|
|
}
|
|
|
|
dir := filepath.Dir(fullPath)
|
|
if err := os.MkdirAll(dir, 0755); err != nil {
|
|
return r.jsError("failed to create directory: %v", err)
|
|
}
|
|
|
|
client := r.downloadClient
|
|
if client == nil {
|
|
client = r.httpClient
|
|
}
|
|
|
|
ua := appUserAgent()
|
|
if h, ok := headers["User-Agent"]; ok && h != "" {
|
|
ua = h
|
|
}
|
|
|
|
policy := r.manifest.DownloadTransferPolicy()
|
|
if !resumeOptionSet {
|
|
resumeDownload = policy.ResumePolicy == "validated"
|
|
}
|
|
persistentCheckpoint := policy.PersistentCheckpoint
|
|
if persistentCheckpointOption != nil {
|
|
persistentCheckpoint = *persistentCheckpointOption && resumeDownload
|
|
}
|
|
if maxAttemptsOption > 0 {
|
|
policy.MaxAttempts = clampInt(maxAttemptsOption, 1, 8)
|
|
}
|
|
if chunkedDownload {
|
|
return r.fileDownloadChunked(
|
|
client,
|
|
urlStr,
|
|
fullPath,
|
|
headers,
|
|
ua,
|
|
chunkSize,
|
|
onProgress,
|
|
trackItemBytes,
|
|
persistentCheckpoint,
|
|
policy,
|
|
)
|
|
}
|
|
return r.reliableFileDownload(
|
|
client,
|
|
urlStr,
|
|
fullPath,
|
|
headers,
|
|
onProgress,
|
|
trackItemBytes,
|
|
resumeDownload,
|
|
persistentCheckpoint,
|
|
policy,
|
|
)
|
|
}
|
|
|
|
func (r *extensionRuntime) fileExists(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 1 {
|
|
return r.vm.ToValue(false)
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.vm.ToValue(false)
|
|
}
|
|
|
|
_, err = os.Stat(fullPath)
|
|
return r.vm.ToValue(err == nil)
|
|
}
|
|
|
|
func (r *extensionRuntime) fileDelete(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 1 {
|
|
return r.jsError("path is required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
if err := os.Remove(fullPath); err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
return r.jsSuccess(nil)
|
|
}
|
|
|
|
func (r *extensionRuntime) fileRead(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 1 {
|
|
return r.jsError("path is required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
file, err := os.Open(fullPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
defer file.Close()
|
|
|
|
data, err := io.ReadAll(io.LimitReader(file, maxExtensionFileReadBytes+1))
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
if int64(len(data)) > maxExtensionFileReadBytes {
|
|
return r.jsError(extensionFileReadLimitError)
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"data": string(data),
|
|
})
|
|
}
|
|
|
|
const (
|
|
maxExtensionFileReadBytes = int64(16 << 20)
|
|
extensionFileReadLimitError = "file read exceeds 16 MiB limit; use file.readBytes with offset and length to read it in chunks"
|
|
)
|
|
|
|
func extensionFileReadLength(size, offset, requested int64) (int64, error) {
|
|
remaining := size - offset
|
|
if remaining < 0 {
|
|
remaining = 0
|
|
}
|
|
|
|
if requested < 0 {
|
|
if remaining > maxExtensionFileReadBytes {
|
|
return 0, fmt.Errorf("%s", extensionFileReadLimitError)
|
|
}
|
|
return remaining, nil
|
|
}
|
|
if requested > maxExtensionFileReadBytes {
|
|
return 0, fmt.Errorf("%s", extensionFileReadLimitError)
|
|
}
|
|
return min(requested, remaining), nil
|
|
}
|
|
|
|
func (r *extensionRuntime) fileReadBytes(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 1 {
|
|
return r.jsError("path is required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
options := parseRuntimeOptionsArgument(call, 1)
|
|
offset := runtimeOptionInt64(options, "offset", 0)
|
|
length := runtimeOptionInt64(options, "length", -1)
|
|
encoding := runtimeOptionString(options, "encoding", "base64")
|
|
if offset < 0 {
|
|
return r.jsError("offset must be >= 0")
|
|
}
|
|
file, err := os.Open(fullPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
defer file.Close()
|
|
|
|
info, err := file.Stat()
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
size := info.Size()
|
|
if offset > size {
|
|
offset = size
|
|
}
|
|
if _, err := file.Seek(offset, io.SeekStart); err != nil {
|
|
return r.jsError("failed to seek file: %v", err)
|
|
}
|
|
|
|
readLength, err := extensionFileReadLength(size, offset, length)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
data := make([]byte, int(readLength))
|
|
if readLength > 0 {
|
|
n, readErr := io.ReadFull(file, data)
|
|
if readErr != nil && readErr != io.EOF && readErr != io.ErrUnexpectedEOF {
|
|
return r.jsError("failed to read file: %v", readErr)
|
|
}
|
|
data = data[:n]
|
|
}
|
|
|
|
if strings.EqualFold(strings.TrimSpace(encoding), "bytes") ||
|
|
strings.EqualFold(strings.TrimSpace(encoding), "raw") {
|
|
// Return raw bytes as an ArrayBuffer to avoid base64 encode/decode of
|
|
// large payloads under the goja interpreter.
|
|
return r.jsSuccess(map[string]any{
|
|
"data": r.vm.NewArrayBuffer(data),
|
|
"bytes_read": len(data),
|
|
"offset": offset,
|
|
"size": size,
|
|
"eof": offset+int64(len(data)) >= size,
|
|
})
|
|
}
|
|
|
|
encoded, err := encodeRuntimeBytes(data, encoding)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"data": encoded,
|
|
"bytes_read": len(data),
|
|
"offset": offset,
|
|
"size": size,
|
|
"eof": offset+int64(len(data)) >= size,
|
|
})
|
|
}
|
|
func (r *extensionRuntime) fileWrite(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 2 {
|
|
return r.jsError("path and data are required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
data := call.Arguments[1].String()
|
|
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
dir := filepath.Dir(fullPath)
|
|
if err := os.MkdirAll(dir, 0755); err != nil {
|
|
return r.jsError("failed to create directory: %v", err)
|
|
}
|
|
|
|
// Full-content write: stage and rename so a kill mid-write cannot leave
|
|
// a truncated file under the final name.
|
|
stagedPath := stagedDownloadPath(fullPath)
|
|
if err := os.WriteFile(stagedPath, []byte(data), 0644); err != nil {
|
|
os.Remove(stagedPath)
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
if err := os.Rename(stagedPath, fullPath); err != nil {
|
|
os.Remove(stagedPath)
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"path": fullPath,
|
|
})
|
|
}
|
|
|
|
func (r *extensionRuntime) fileWriteBytes(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 2 {
|
|
return r.jsError("path and data are required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
options := parseRuntimeOptionsArgument(call, 2)
|
|
appendMode := runtimeOptionBool(options, "append", false)
|
|
truncate := runtimeOptionBool(options, "truncate", false)
|
|
hasOffset := runtimeOptionHasKey(options, "offset")
|
|
offset := runtimeOptionInt64(options, "offset", 0)
|
|
encoding := runtimeOptionString(options, "encoding", "base64")
|
|
|
|
if appendMode && hasOffset {
|
|
return r.jsError("append and offset cannot be used together")
|
|
}
|
|
if offset < 0 {
|
|
return r.jsError("offset must be >= 0")
|
|
}
|
|
|
|
data, err := decodeRuntimeBytesValue(call.Arguments[1].Export(), encoding)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
dir := filepath.Dir(fullPath)
|
|
if err := os.MkdirAll(dir, 0755); err != nil {
|
|
return r.jsError("failed to create directory: %v", err)
|
|
}
|
|
|
|
flags := os.O_CREATE | os.O_WRONLY
|
|
if appendMode {
|
|
flags |= os.O_APPEND
|
|
}
|
|
if truncate {
|
|
flags |= os.O_TRUNC
|
|
}
|
|
|
|
file, err := os.OpenFile(fullPath, flags, 0644)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
defer file.Close()
|
|
|
|
if hasOffset && !appendMode {
|
|
if _, err := file.Seek(offset, io.SeekStart); err != nil {
|
|
return r.jsError("failed to seek file: %v", err)
|
|
}
|
|
}
|
|
|
|
written, err := file.Write(data)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
info, statErr := file.Stat()
|
|
size := int64(0)
|
|
if statErr == nil {
|
|
size = info.Size()
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"path": fullPath,
|
|
"bytes_written": written,
|
|
"size": size,
|
|
})
|
|
}
|
|
|
|
func (r *extensionRuntime) fileCopy(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 2 {
|
|
return r.jsError("source and destination paths are required")
|
|
}
|
|
|
|
srcPath := call.Arguments[0].String()
|
|
dstPath := call.Arguments[1].String()
|
|
|
|
fullSrc, err := r.validatePath(srcPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
fullDst, err := r.validatePath(dstPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
srcFile, err := os.Open(fullSrc)
|
|
if err != nil {
|
|
return r.jsError("failed to read source: %v", err)
|
|
}
|
|
defer srcFile.Close()
|
|
|
|
dir := filepath.Dir(fullDst)
|
|
if err := os.MkdirAll(dir, 0755); err != nil {
|
|
return r.jsError("failed to create directory: %v", err)
|
|
}
|
|
|
|
dstFile, err := os.OpenFile(fullDst, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0644)
|
|
if err != nil {
|
|
return r.jsError("failed to open destination: %v", err)
|
|
}
|
|
|
|
if _, err := io.Copy(dstFile, srcFile); err != nil {
|
|
_ = dstFile.Close()
|
|
return r.jsError("failed to copy file: %v", err)
|
|
}
|
|
|
|
if err := dstFile.Close(); err != nil {
|
|
return r.jsError("failed to finalize destination: %v", err)
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"path": fullDst,
|
|
})
|
|
}
|
|
|
|
func (r *extensionRuntime) fileMove(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 2 {
|
|
return r.jsError("source and destination paths are required")
|
|
}
|
|
|
|
srcPath := call.Arguments[0].String()
|
|
dstPath := call.Arguments[1].String()
|
|
|
|
fullSrc, err := r.validatePath(srcPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
fullDst, err := r.validatePath(dstPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
dir := filepath.Dir(fullDst)
|
|
if err := os.MkdirAll(dir, 0755); err != nil {
|
|
return r.jsError("failed to create directory: %v", err)
|
|
}
|
|
|
|
if err := os.Rename(fullSrc, fullDst); err != nil {
|
|
return r.jsError("failed to move file: %v", err)
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"path": fullDst,
|
|
})
|
|
}
|
|
|
|
func (r *extensionRuntime) fileGetSize(call goja.FunctionCall) goja.Value {
|
|
if len(call.Arguments) < 1 {
|
|
return r.jsError("path is required")
|
|
}
|
|
|
|
path := call.Arguments[0].String()
|
|
fullPath, err := r.validatePath(path)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
info, err := os.Stat(fullPath)
|
|
if err != nil {
|
|
return r.jsError("%s", err.Error())
|
|
}
|
|
|
|
return r.jsSuccess(map[string]any{
|
|
"size": info.Size(),
|
|
})
|
|
}
|