static.js 2.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263
  1. 'use strict';
  2. // 静态前端:精确路径白名单(新增 public 文件需在 STATIC_MAP 登记)+ /assets/ 单段文件
  3. const fs = require('fs');
  4. const path = require('path');
  5. const STATIC_MAP = {
  6. '/': ['index.html', 'text/html; charset=utf-8'],
  7. '/index.html': ['index.html', 'text/html; charset=utf-8'],
  8. '/app.js': ['app.js', 'application/javascript; charset=utf-8'],
  9. '/crawl.js': ['crawl.js', 'application/javascript; charset=utf-8'],
  10. '/gen.js': ['gen.js', 'application/javascript; charset=utf-8'],
  11. '/history.js': ['history.js', 'application/javascript; charset=utf-8'],
  12. '/tasks.js': ['tasks.js', 'application/javascript; charset=utf-8'],
  13. '/analysis-templates.js': ['analysis-templates.js', 'application/javascript; charset=utf-8'],
  14. '/reports.js': ['reports.js', 'application/javascript; charset=utf-8'],
  15. '/lake.js': ['lake.js', 'application/javascript; charset=utf-8'],
  16. '/ops.js': ['ops.js', 'application/javascript; charset=utf-8'],
  17. '/schools.js': ['schools.js', 'application/javascript; charset=utf-8'],
  18. '/vendor/china-map.json': ['vendor/china-map.json', 'application/json; charset=utf-8'],
  19. '/vendor/cn-universities.json': ['vendor/cn-universities.json', 'application/json; charset=utf-8'],
  20. '/vendor/cn-cities.json': ['vendor/cn-cities.json', 'application/json; charset=utf-8'],
  21. '/ask.js': ['ask.js', 'application/javascript; charset=utf-8'],
  22. '/vendor/echarts.min.js': ['vendor/echarts.min.js', 'application/javascript; charset=utf-8'],
  23. '/style.css': ['style.css', 'text/css; charset=utf-8'],
  24. };
  25. const STATIC_TYPES = {
  26. '.png': 'image/png', '.jpg': 'image/jpeg', '.svg': 'image/svg+xml',
  27. '.ico': 'image/x-icon', '.css': 'text/css', '.js': 'application/javascript',
  28. };
  29. function serveStatic(publicDir, pathname, res) {
  30. const entry = STATIC_MAP[pathname];
  31. if (entry) {
  32. const full = path.join(publicDir, entry[0]);
  33. fs.readFile(full, (err, data) => {
  34. if (err) { res.writeHead(404); return res.end('Not found'); }
  35. res.writeHead(200, { 'Content-Type': entry[1], 'Cache-Control': 'no-cache' });
  36. res.end(data);
  37. });
  38. return;
  39. }
  40. if (pathname.startsWith('/assets/')) {
  41. const rel = pathname.replace('/assets/', '');
  42. if (rel.includes('..') || rel.includes('/')) { res.writeHead(403); return res.end('Forbidden'); }
  43. const full = path.join(publicDir, 'assets', rel);
  44. if (!fs.existsSync(full) || !fs.statSync(full).isFile()) { res.writeHead(404); return res.end('Not found'); }
  45. const ext = path.extname(full).toLowerCase();
  46. res.writeHead(200, { 'Content-Type': STATIC_TYPES[ext] || 'application/octet-stream', 'Cache-Control': 'no-cache' });
  47. fs.createReadStream(full).pipe(res);
  48. return;
  49. }
  50. res.writeHead(404);
  51. res.end('Not found');
  52. }
  53. function register(app, ctx) {
  54. app.fallback((pathname, res) => serveStatic(ctx.PUBLIC_DIR, pathname, res));
  55. }
  56. module.exports = { register };