RenderContext Class — astro Architecture

Source Code

packages/astro/src/core/render-context.ts lines 64–872

export class RenderContext {
	private constructor(
		readonly pipeline: Pipeline,
		public locals: App.Locals,
		readonly middleware: MiddlewareHandler,
		readonly actions: SSRActions,
		readonly serverIslands: ServerIslandMappings,
		// It must be a DECODED pathname
		public pathname: string,
		public request: Request,
		public routeData: RouteData,
		public status: number,
		public clientAddress: string | undefined,
		protected cookies = new AstroCookies(request),
		public params = getParams(routeData, pathname),
		protected url = RenderContext.#createNormalizedUrl(request.url),
		public props: Props = {},
		public partial: undefined | boolean = undefined,
		public shouldInjectCspMetaTags = pipeline.manifest.shouldInjectCspMetaTags,
		public session: AstroSession | undefined = undefined,
		public skipMiddleware = false,
	) {}

	static #createNormalizedUrl(requestUrl: string): URL {
		const url = new URL(requestUrl);
		try {
			// Decode and validate pathname to prevent multi-level encoding bypass attacks
			url.pathname = validateAndDecodePathname(url.pathname);
		} catch {
			// If validation fails, return URL with pathname as-is
			// This will be caught elsewhere in the request handling pipeline
			// For now, just decode without validation to maintain compatibility
			try {
				url.pathname = decodeURI(url.pathname);
			} catch {
				// If even basic decoding fails, return URL as-is
			}
		}
		return url;
	}

	/**
	 * A flag that tells the render content if the rewriting was triggered
	 */
	isRewriting = false;
	/**
	 * A safety net in case of loops
	 */
	counter = 0;

	result: SSRResult | undefined = undefined;

	static async create({
		locals = {},
		pathname,
		pipeline,
		request,
		routeData,
		clientAddress,
		status = 200,
		props,
		partial = undefined,
		shouldInjectCspMetaTags,
		skipMiddleware = false,
	}: CreateRenderContext): Promise<RenderContext> {
		const pipelineMiddleware = await pipeline.getMiddleware();
		const pipelineActions = await pipeline.getActions();
		const pipelineSessionDriver = await pipeline.getSessionDriver();
		const serverIslands = await pipeline.getServerIslands();
		setOriginPathname(
			request,
			pathname,
			pipeline.manifest.trailingSlash,
			pipeline.manifest.buildFormat,
		);
		const cookies = new AstroCookies(request);
		const session =
			pipeline.manifest.sessionConfig && pipelineSessionDriver
				? new AstroSession({
						cookies,
						config: pipeline.manifest.sessionConfig,