webdesignio Secure rendering of components on the server side

service.js

'use strict'

const fs = require('fs')
const vm = require('vm')
const cluster = require('cluster')
const shortid = require('shortid')

if (cluster.isMaster) {
  // Act as master
  cluster.on('online', worker => {
    console.log('[master]: worker is online')
    const taskIds = [shortid()]
    const componentResults = []
    worker.on('message', ({ id, result }) => {
      console.log('[master]: message received')
      console.log(result)
      componentResults[taskIds.indexOf(id)] = result
      process.exit(0)
    })
    worker.send({ id: taskIds[0], component: 'component' })
  })
  cluster.fork()
} else {
  // Act as worker
  process.on('message', ({ id, component }) => {
    console.log('[worker]: message received')
    const componentPath = require.resolve(`./components/${component}`)
    const src = fs.readFileSync(componentPath)
    const module = { exports: {}, global: {} }
    const context = vm.createContext({ exports: module.exports, module })
    vm.runInContext(src + '\n\n__OUT__ = module.exports.renderToString()', context)
    console.log('[worker]: send back result')
    process.send({ id, result: context.__OUT__ })
  })
}