aboutsummaryrefslogtreecommitdiff
path: root/Jellyfin.Server/Middleware/UrlDecodeQueryFeature.cs
blob: 310a3d31ad143d208ba033fec4ddf229ef96526e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using MediaBrowser.Common.Extensions;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Http.Features;
using Microsoft.Extensions.Primitives;

namespace Jellyfin.Server.Middleware
{
    /// <summary>
    /// Defines the <see cref="UrlDecodeQueryFeature"/>.
    /// </summary>
    public class UrlDecodeQueryFeature : IQueryFeature
    {
        private IQueryCollection? _store;

        /// <summary>
        /// Initializes a new instance of the <see cref="UrlDecodeQueryFeature"/> class.
        /// </summary>
        /// <param name="feature">The <see cref="IQueryFeature"/> instance.</param>
        public UrlDecodeQueryFeature(IQueryFeature feature)
        {
            Query = feature.Query;
        }

        /// <summary>
        /// Gets or sets a value indicating the url decoded <see cref="IQueryCollection"/>.
        /// </summary>
        public IQueryCollection Query
        {
            get
            {
                return _store ?? QueryCollection.Empty;
            }

            set
            {
                // Only interested in where the querystring is encoded which shows up as one key with nothing in the value.
                if (value.Count != 1)
                {
                    _store = value;
                    return;
                }

                // Encoded querystrings have no value, so don't process anything if a value is present.
                var (key, stringValues) = value.First();
                if (!string.IsNullOrEmpty(stringValues))
                {
                    _store = value;
                    return;
                }

                // Unencode and re-parse querystring.
                var unencodedKey = HttpUtility.UrlDecode(key);

                if (string.Equals(unencodedKey, key, StringComparison.Ordinal))
                {
                    // Don't do anything if it's not encoded.
                    _store = value;
                    return;
                }

                var pairs = new Dictionary<string, StringValues>();
                var queryString = unencodedKey.SpanSplit('&');

                foreach (var pair in queryString)
                {
                    var i = pair.IndexOf('=');
                    if (i == -1)
                    {
                        // encoded is an equals.
                        // We use TryAdd so duplicate keys get ignored
                        pairs.TryAdd(pair.ToString(), StringValues.Empty);
                        continue;
                    }

                    var k = pair[..i].ToString();
                    var v = pair[(i + 1)..].ToString();
                    if (!pairs.TryAdd(k, new StringValues(v)))
                    {
                        pairs[k] = StringValues.Concat(pairs[k], v);
                    }
                }

                _store = new QueryCollection(pairs);
            }
        }
    }
}