Browse Source

fix(xhr-request): Make sure to also allow strings as url

Our utility to add `X-Requested-With` headers on API calls intercepts
calls to `window.fetch`, so we must ensure we allow all parameters that the default
browser provided `window.fetch` allows.
In this case make sure to allow all stringify-able objects.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
pull/40951/head
Ferdinand Thiessen 2 years ago
parent
commit
0414ca35c0
No known key found for this signature in database GPG Key ID: 45FAE7268762B400
  1. 29
      core/src/utils/xhr-request.js
  2. 4
      dist/core-main.js
  3. 2
      dist/core-main.js.map

29
core/src/utils/xhr-request.js

@ -21,6 +21,10 @@
import { getRootUrl } from '@nextcloud/router'
/**
* @param {string} url The URL to check
* @return {boolean} true if the URL points to this nextcloud instance
*/
const isNextcloudUrl = (url) => {
const nextcloudBaseUrl = window.location.protocol + '//' + window.location.host + getRootUrl()
// try with relative and absolute URL
@ -43,24 +47,25 @@ export const interceptRequests = () => {
})(XMLHttpRequest.prototype.open)
window.fetch = (function(fetch) {
return (input, init) => {
if (!isNextcloudUrl(input.url)) {
return fetch(input, init)
return (resource, options) => {
// fetch allows the `input` to be either a Request object or any stringifyable value
if (!isNextcloudUrl(resource.url ?? resource.toString())) {
return fetch(resource, options)
}
if (!init) {
init = {}
if (!options) {
options = {}
}
if (!init.headers) {
init.headers = new Headers()
if (!options.headers) {
options.headers = new Headers()
}
if (init.headers instanceof Headers && !init.headers.has('X-Requested-With')) {
init.headers.append('X-Requested-With', 'XMLHttpRequest')
} else if (init.headers instanceof Object && !init.headers['X-Requested-With']) {
init.headers['X-Requested-With'] = 'XMLHttpRequest'
if (options.headers instanceof Headers && !options.headers.has('X-Requested-With')) {
options.headers.append('X-Requested-With', 'XMLHttpRequest')
} else if (options.headers instanceof Object && !options.headers['X-Requested-With']) {
options.headers['X-Requested-With'] = 'XMLHttpRequest'
}
return fetch(input, init)
return fetch(resource, options)
}
})(window.fetch)
}

4
dist/core-main.js
File diff suppressed because it is too large
View File

2
dist/core-main.js.map
File diff suppressed because it is too large
View File

Loading…
Cancel
Save