61 lines
1.2 KiB
Go
61 lines
1.2 KiB
Go
package api
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"gitlab.com/gitlab-org/gitlab/workhorse/internal/helper"
|
|
)
|
|
|
|
// Prevent internal API responses intended for gitlab-workhorse from
|
|
// leaking to the end user
|
|
func Block(h http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
rw := &blocker{rw: w, r: r}
|
|
defer rw.flush()
|
|
h.ServeHTTP(rw, r)
|
|
})
|
|
}
|
|
|
|
type blocker struct {
|
|
rw http.ResponseWriter
|
|
r *http.Request
|
|
hijacked bool
|
|
status int
|
|
}
|
|
|
|
func (b *blocker) Header() http.Header {
|
|
return b.rw.Header()
|
|
}
|
|
|
|
func (b *blocker) Write(data []byte) (int, error) {
|
|
if b.status == 0 {
|
|
b.WriteHeader(http.StatusOK)
|
|
}
|
|
if b.hijacked {
|
|
return len(data), nil
|
|
}
|
|
|
|
return b.rw.Write(data)
|
|
}
|
|
|
|
func (b *blocker) WriteHeader(status int) {
|
|
if b.status != 0 {
|
|
return
|
|
}
|
|
|
|
if helper.IsContentType(ResponseContentType, b.Header().Get("Content-Type")) {
|
|
b.status = 500
|
|
b.Header().Del("Content-Length")
|
|
b.hijacked = true
|
|
helper.Fail500(b.rw, b.r, fmt.Errorf("api.blocker: forbidden content-type: %q", ResponseContentType))
|
|
return
|
|
}
|
|
|
|
b.status = status
|
|
b.rw.WriteHeader(b.status)
|
|
}
|
|
|
|
func (b *blocker) flush() {
|
|
b.WriteHeader(http.StatusOK)
|
|
}
|