pincers 0.2.0

A more secure way to run scripts from the web
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use failure::Error;
use reqwest;

use std::collections::HashSet;
use std::fs::File;
use std::io::{self, Read};

lazy_static! {
    static ref REMOTE_SCHEMES: HashSet<&'static str> = hashset! {
        "https", "http", "ftps", "ftp"
    };
}

fn is_remote(url: &str) -> bool {
    if let Ok(url) = reqwest::Url::parse(url) {
        return REMOTE_SCHEMES.contains(&url.scheme());
    }
    false
}

pub fn download(url: &str) -> Result<Vec<u8>, Error> {
    info!("Getting script: {}", url);
    let mut body = Vec::<u8>::new();

    if url == "-" {
        debug!("Trying to read from stdin");
        io::stdin().read_to_end(&mut body)?;
    } else if is_remote(&url) {
        debug!("Trying to read from remote {}", &url);
        reqwest::get(url)?
            .error_for_status()?
            .read_to_end(&mut body)?;
    } else {
        debug!("Trying to read from local {}", &url);
        File::open(url)?.read_to_end(&mut body)?;
    };
    debug!("Read contents\n{}", std::str::from_utf8(&body)?);
    Ok(body)
}