Access restriction & Server push by mruby for H2O HTTP/2 server.

access-restriction.rb

class H2oServerHeader
  def call(env)
    path = env["PATH_INFO"]
    method = env['REQUEST_METHOD']
    exclude = [
      "/php.ini",
      "/readme.html",
      "/readme-ja.html",
      "/wp-config.php",
      "/wp-config-sample.php",
      "/wp-admin/install.php",
      "/wp-admin/includes/comment.php",
      "/wp-admin/network/menu.php",
      "/wp-admin/user/menu.php",
      "/wp-includes/admin-bar.php",
      "/wp-includes/version.php"
    ]

    if ["GET","POST","HEAD"].include? method
      if exclude.include? path
        return [403,{"content-type" => "text/plain;charset=utf-8"},["Forbidden.\n"]]
      else
        return [399,{},[]]
      end
    else
      return [405,{"content-type" => "text/plain;charset=utf-8"},["Method Not Allowed.\n"]]
    end
  end
end

H2oServerHeader.new

serverpush.rb

class H2oServerHeader
  def call(env)
    path = env["PATH_INFO"]
    method = env['REQUEST_METHOD']
    exclude = [
      "/php.ini",
      "/readme.html",
      "/readme-ja.html",
      "/wp-config.php",
      "/wp-config-sample.php",
      "/wp-admin/install.php",
      "/wp-admin/includes/comment.php",
      "/wp-admin/network/menu.php",
      "/wp-admin/user/menu.php",
      "/wp-includes/admin-bar.php",
      "/wp-includes/version.php"
    ]
    push_paths = []

    if ["GET","POST","HEAD"].include? method
      if exclude.include? path
        return [403,{"content-type" => "text/plain;charset=utf-8"},["Forbidden.\n"]]
      else
        if /^(?!.*(wp\-admin|wp\-login)).+$/.match(path)
          push_paths << "/wp-content/themes/kuck1u/assets/css/style.css"
          push_paths << "/wp-content/themes/kuck1u/assets/js/script.js"
        end
    
        return [399, push_paths.empty? ? {} : {"link" => push_paths.map{|p| "<#{p}>; rel=preload"}.join("\n")}, []]
      end
    else
      return [405,{"content-type" => "text/plain;charset=utf-8"},["Method Not Allowed.\n"]]
    end
  end
end

H2oServerHeader.new