diff --git a/README.md b/README.md index 8915134..e230d9e 100644 --- a/README.md +++ b/README.md @@ -24,11 +24,11 @@ $ yarn build To install it globally from npm use yarn or npm: -- yarn, `yarn -g add wetty.js` +- yarn, `yarn global add wetty.js` - npm, `npm i -g wetty.js` -For auto-login feature you'll need sshpass installed(NOT required for rest of -the program". +For auto-login feature you'll need sshpass installed (NOT required for rest of +the program). - `apt-get install sshpass` (debian eg. Ubuntu) - `yum install sshpass` (red hat flavours eg. CentOs) diff --git a/index.js b/index.js index 526d775..3caa5f9 100755 --- a/index.js +++ b/index.js @@ -94,6 +94,12 @@ if (require.main === module) { type: 'string', default: process.env.COMMAND || 'login', }, + bypasshelmet: { + demand: false, + description: 'disable helmet from placing security restrictions', + type: 'boolean', + default: false, + }, help: { demand: false, alias: 'h', diff --git a/package.json b/package.json index 4ec2b22..bf7ce9d 100644 --- a/package.json +++ b/package.json @@ -94,7 +94,7 @@ "eslint-plugin-typescript": "^1.0.0-rc.1", "file-loader": "^3.0.1", "husky": "^1.3.1", - "lint-staged": "^6.1.1", + "lint-staged": "~8.2.0", "mini-css-extract-plugin": "^0.5.0", "node-sass": "^4.11.0", "nodemon": "^1.14.10", diff --git a/src/client/index.ts b/src/client/index.ts index ed454ef..81f8cf4 100644 --- a/src/client/index.ts +++ b/src/client/index.ts @@ -15,8 +15,46 @@ const socket = io(window.location.origin, { socket.on('connect', () => { const term = new Terminal(); term.open(document.getElementById('terminal')); - term.setOption('fontSize', 14); + const defaultOptions = { fontSize: 14 }; + let options: any; + try { + if (localStorage.options === undefined) { + options = defaultOptions; + } else { + options = JSON.parse(localStorage.options); + } + } catch { + options = defaultOptions; + } + Object.keys(options).forEach(key => { + const value = options[key]; + term.setOption(key, value); + }); + const code = JSON.stringify(options, null, 2); + const editor = document.querySelector('#options .editor'); + editor.value = code; + editor.addEventListener('keyup', e => { + try { + const updated = JSON.parse(editor.value); + const updatedCode = JSON.stringify(updated, null, 2); + editor.value = updatedCode; + editor.classList.remove('error'); + localStorage.options = updatedCode; + Object.keys(updated).forEach(key => { + const value = updated[key]; + term.setOption(key, value); + }); + resize(); + } catch { + // skip + editor.classList.add('error'); + } + }); document.getElementById('overlay').style.display = 'none'; + document.querySelector('#options .toggler').addEventListener('click', e => { + document.getElementById('options').classList.toggle('opened'); + e.preventDefault(); + }); window.addEventListener('beforeunload', handler, false); /* term.scrollPort_.screen_.setAttribute('contenteditable', 'false'); diff --git a/src/client/wetty.scss b/src/client/wetty.scss index 2a5c131..c8ae18c 100644 --- a/src/client/wetty.scss +++ b/src/client/wetty.scss @@ -3,6 +3,7 @@ $black: #000; $grey: rgba(0, 0, 0, 0.75); $white: #fff; +$lgrey: #ccc; html, body { @@ -44,4 +45,53 @@ body { position: relative; width: 100%; } + + #options { + position: absolute; + top: 1em; + right: 1em; + z-index: 20; + height: 16px; + width: 16px; + + a.toggler { + display: inline-block; + position: absolute; + right: 1em; + top: 0em; + font-size: 16px; + color: $lgrey; + z-index: 20; + + :hover { + color: $white; + } + } + + .editor { + background-color: rgba(0, 0, 0, 0.85); + padding: 0.5em; + border-radius: 0.3em; + border-color: rgba(255, 255, 255, 0.25); + display: none; + position: relative; + height: 100%; + width: 100%; + top: 1em; + right: 2em; + color: #eee; + font-size: 24px; + } + .editor.error { + color: red; + } + } + + #options.opened { + height: 50%; + width: 50%; + .editor { + display: flex; + } + } } diff --git a/src/server/index.ts b/src/server/index.ts index 2274339..408fe4c 100644 --- a/src/server/index.ts +++ b/src/server/index.ts @@ -17,6 +17,7 @@ export interface Options { port: number; title: string; command?: string; + bypasshelmet?: boolean; } interface CLI extends Options { @@ -38,6 +39,7 @@ export default class Server { command, sslkey, sslcert, + bypasshelmet, }: Options): Promise { wetty .on('exit', ({ code, msg }: { code: number; msg: string }) => { @@ -56,11 +58,11 @@ export default class Server { host: sshhost, auth: sshauth, port: sshport, - title: title, + title, pass: sshpass, key: sshkey, }, - { base, host, port, title }, + { base, host, port, title, bypasshelmet }, command, { key: sslkey, cert: sslcert } ); diff --git a/src/server/interfaces.ts b/src/server/interfaces.ts index 4674ecf..05b391c 100644 --- a/src/server/interfaces.ts +++ b/src/server/interfaces.ts @@ -21,4 +21,5 @@ export interface Server { port: number; host: string; base: string; + bypasshelmet: boolean; } diff --git a/src/server/server.ts b/src/server/server.ts index 556dbef..f2b18ab 100644 --- a/src/server/server.ts +++ b/src/server/server.ts @@ -17,7 +17,7 @@ const distDir = path.join(__dirname, 'client'); const trim = (str: string): string => str.replace(/\/*$/, ''); export default function createServer( - { base, port, host, title }: Server, + { base, port, host, title, bypasshelmet }: Server, { key, cert }: SSLBuffer ): SocketIO.Server { const basePath = trim(base); @@ -39,6 +39,7 @@ export default function createServer( ${title} +
@@ -47,6 +48,12 @@ export default function createServer(
+
+ + +
@@ -56,16 +63,22 @@ export default function createServer( const app = express(); app .use(morgan('combined', { stream: logger.stream })) - .use(helmet()) .use(compression()) .use(favicon(path.join(distDir, 'favicon.ico'))) .use(`${basePath}/public`, express.static(distDir)) .use((req, res, next) => { if (req.url === basePath) res.redirect(301, req.url + '/'); else next(); - }) - .get(basePath, html) - .get(`${basePath}/ssh/:user`, html); + }); + + // Allow helmet to be bypassed. + // Unfortunately, order matters with middleware + // which is why this is thrown in the middle + if (!bypasshelmet) { + app.use(helmet()); + } + + app.get(basePath, html).get(`${basePath}/ssh/:user`, html); return socket( !isUndefined(key) && !isUndefined(cert)