Function serveFile

lib/API/Serve.js:250–290

(uri, request, response)

});

function serveFile(uri, request, response) {
  var file = decodeURIComponent(new URL(uri || request.url, 'http://localhost').pathname);

  var rootPath = path.resolve(options.path);
  var filePath = path.resolve(rootPath + file);

  // since we call filesystem directly so we need to verify that the
  // url doesn't go outside the serve path
  var relative = path.relative(rootPath, filePath);
  if (relative !== '' && (relative.startsWith('..') || path.isAbsolute(relative))) {
    response.writeHead(403, { 'Content-Type': 'text/html' });
    return response.end('403 Forbidden');
  }

  fs.stat(filePath, function (err, stats) {
    if (!err && stats.isDirectory()) {
      if (options.ftp) {
        // In ftp mode, try index.html first, fall back to directory listing
        var indexPath = path.join(filePath, 'index.html');
        fs.access(indexPath, fs.constants.R_OK, function (err) {
          if (!err) {
            return serveStaticFile(indexPath, file + '/index.html', request, response);
          }
          return serveDirectoryListing(filePath, file, response);
        });
        return;
      }
      // Not ftp mode: serve homepage
      if (file === '/' || file === '') {
        file = options.homepage;
        request.wantHomepage = true;
        filePath = path.resolve(options.path + file);
      }
    } else if (file === '/' || file === '') {
      file = options.homepage;
      request.wantHomepage = true;
      filePath = path.resolve(options.path + file);
    }
    serveStaticFile(filePath, file, request, response);
  });
}

function formatFileSize(bytes) {
  if (bytes < 1024) return bytes + 'B';