snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/public/plugin/http.go

@@ -0,0 +1,119 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+package plugin
+
+import (
+	"bufio"
+	"errors"
+	"fmt"
+	"io"
+	"maps"
+	"net"
+	"net/http"
+	"net/rpc"
+
+	"github.com/mattermost/mattermost/server/public/shared/mlog"
+)
+
+type hijackedResponse struct {
+	conn    net.Conn
+	bufrw   *bufio.ReadWriter
+	readBuf []byte
+}
+
+type httpResponseWriterRPCServer struct {
+	w   http.ResponseWriter
+	log *mlog.Logger
+	hjr *hijackedResponse
+}
+
+func (w *httpResponseWriterRPCServer) Header(args struct{}, reply *http.Header) error {
+	*reply = w.w.Header()
+	return nil
+}
+
+func (w *httpResponseWriterRPCServer) Write(args []byte, reply *struct{}) error {
+	_, err := w.w.Write(args)
+	return err
+}
+
+func (w *httpResponseWriterRPCServer) WriteHeader(args int, reply *struct{}) error {
+	// Check if args is a valid http status code. This prevents plugins from crashing the server with a panic.
+	// This is a copy of the checkWriteHeaderCode function in net/http/server.go in the go source.
+	if args < 100 || args > 999 {
+		w.log.Error(fmt.Sprintf("Plugin tried to write an invalid http status code: %v. Did not write the invalid header.", args))
+		return errors.New("invalid http status code")
+	}
+	w.w.WriteHeader(args)
+	return nil
+}
+
+func (w *httpResponseWriterRPCServer) SyncHeader(args http.Header, reply *struct{}) error {
+	dest := w.w.Header()
+	for k := range dest {
+		if _, ok := args[k]; !ok {
+			delete(dest, k)
+		}
+	}
+	maps.Copy(dest, args)
+	return nil
+}
+
+func (w *httpResponseWriterRPCServer) Flush(args struct{}, reply *struct{}) error {
+	// Type assert to http.Flusher and flush if supported
+	if flusher, ok := w.w.(http.Flusher); ok {
+		flusher.Flush()
+	}
+	// If the underlying writer doesn't support Flusher, silently ignore
+	// This matches the HTTP spec's "best effort" semantics
+	return nil
+}
+
+type httpResponseWriterRPCClient struct {
+	client *rpc.Client
+	header http.Header
+}
+
+var _ http.ResponseWriter = (*httpResponseWriterRPCClient)(nil)
+var _ http.Flusher = (*httpResponseWriterRPCClient)(nil)
+
+func (w *httpResponseWriterRPCClient) Header() http.Header {
+	if w.header == nil {
+		w.client.Call("Plugin.Header", struct{}{}, &w.header)
+	}
+	return w.header
+}
+
+func (w *httpResponseWriterRPCClient) Write(b []byte) (int, error) {
+	if err := w.client.Call("Plugin.SyncHeader", w.header, nil); err != nil {
+		return 0, err
+	}
+	if err := w.client.Call("Plugin.Write", b, nil); err != nil {
+		return 0, err
+	}
+	return len(b), nil
+}
+
+func (w *httpResponseWriterRPCClient) WriteHeader(statusCode int) {
+	if err := w.client.Call("Plugin.SyncHeader", w.header, nil); err != nil {
+		return
+	}
+	w.client.Call("Plugin.WriteHeader", statusCode, nil)
+}
+
+// Flush implements http.Flusher interface
+func (w *httpResponseWriterRPCClient) Flush() {
+	// Best-effort flush - ignore errors per HTTP spec
+	w.client.Call("Plugin.Flush", struct{}{}, nil)
+}
+
+func (w *httpResponseWriterRPCClient) Close() error {
+	return w.client.Close()
+}
+
+func connectHTTPResponseWriter(conn io.ReadWriteCloser) *httpResponseWriterRPCClient {
+	return &httpResponseWriterRPCClient{
+		client: rpc.NewClient(conn),
+	}
+}