overleaf-cep/services/web/app/src/infrastructure/UnsupportedBrowserMiddleware.mjs

import Bowser from 'bowser'
import Settings from '@overleaf/settings'
import Url from 'node:url'
import UrlHelper from '../Features/Helpers/UrlHelper.mjs'

const { getSafeRedirectPath } = UrlHelper

function unsupportedBrowserMiddleware(req, res, next) {
  if (!Settings.unsupportedBrowsers) return next()

  // Prevent redirect loop
  const path = req.path
  if (path === '/unsupported-browser') return next()

  const userAgent = req.headers['user-agent']

  if (!userAgent) return next()

  const parser = Bowser.getParser(userAgent)

  // Allow bots through by only ignoring bots or unrecognised UA strings
  const isBot = parser.isPlatform('bot') || !parser.getBrowserName()
  if (isBot) return next()

  const isUnsupported = parser.satisfies(Settings.unsupportedBrowsers)
  if (isUnsupported) {
    return res.redirect(
      Url.format({
        pathname: '/unsupported-browser',
        query: { fromURL: req.originalUrl },
      })
    )
  }

  next()
}

function renderUnsupportedBrowserPage(req, res) {
  let fromURL
  if (typeof req.query.fromURL === 'string') {
    try {
      fromURL =
        Settings.siteUrl + (getSafeRedirectPath(req.query.fromURL) || '/')
    } catch (e) {}
  }
  res.render('general/unsupported-browser', { fromURL })
}

export default {
  renderUnsupportedBrowserPage,
  unsupportedBrowserMiddleware,
}