@arcis/node 1.6.1 → 1.6.3

package/dist/nestjs/index.mjs

@@ -938,9 +938,10 @@ function detectXxe(input) {
 // src/sanitizers/ldap.ts
 var LDAP_DETECT_PATTERN = /[*()\\\x00]/;
 var LDAP_INJECTION_PATTERN = /\)\s*\(|\*\s*\)\s*\(/;
+var LDAP_NOT_BYPASS_PATTERN = /\)\s*\(\s*!|&\s*\(\s*!|\|\s*\(\s*!/;
 function detectLdapInjection(input) {
   if (typeof input !== "string") return false;
-  return LDAP_DETECT_PATTERN.test(input) || LDAP_INJECTION_PATTERN.test(input);
+  return LDAP_DETECT_PATTERN.test(input) || LDAP_INJECTION_PATTERN.test(input) || LDAP_NOT_BYPASS_PATTERN.test(input);
 }
 
 // src/sanitizers/xpath.ts
@@ -1747,6 +1748,54 @@ var ArcisMiddleware = class {
     this.handlers.close();
   }
 };
+var ArcisGuard = class {
+  constructor(options = {}) {
+    this.handlers = arcis(options);
+  }
+  canActivate(context) {
+    const http = context.switchToHttp();
+    const req = http.getRequest();
+    const res = http.getResponse();
+    return new Promise((resolve, reject) => {
+      const handlers = this.handlers;
+      let i = 0;
+      const run = (err) => {
+        if (err !== void 0) {
+          reject(err);
+          return;
+        }
+        if (res.headersSent) {
+          resolve(false);
+          return;
+        }
+        const handler = handlers[i++];
+        if (!handler) {
+          resolve(!res.headersSent);
+          return;
+        }
+        let advanced = false;
+        const wrappedNext = (innerErr) => {
+          advanced = true;
+          run(innerErr);
+        };
+        try {
+          handler(req, res, wrappedNext);
+        } catch (caught) {
+          reject(caught);
+          return;
+        }
+        if (!advanced && res.headersSent) {
+          resolve(false);
+        }
+      };
+      run();
+    });
+  }
+  /** Release rate-limiter intervals etc. Call from `OnApplicationShutdown`. */
+  close() {
+    this.handlers.close();
+  }
+};
 var ArcisModule = class _ArcisModule {
   static forRoot(options = {}) {
     return {
@@ -1757,14 +1806,19 @@ var ArcisModule = class _ArcisModule {
           provide: ArcisMiddleware,
           useFactory: (opts) => new ArcisMiddleware(opts),
           inject: [ARCIS_OPTIONS]
+        },
+        {
+          provide: ArcisGuard,
+          useFactory: (opts) => new ArcisGuard(opts),
+          inject: [ARCIS_OPTIONS]
         }
       ],
-      exports: [ArcisMiddleware]
+      exports: [ArcisMiddleware, ArcisGuard]
     };
   }
 };
 var nestjs_default = ArcisModule;
 
-export { ARCIS_OPTIONS, ArcisMiddleware, ArcisModule, nestjs_default as default };
+export { ARCIS_OPTIONS, ArcisGuard, ArcisMiddleware, ArcisModule, nestjs_default as default };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map