@bgord/bun 1.23.9 → 1.23.11

package/src/redactor-url-query.strategy.ts

@@ -1,12 +1,15 @@
 import * as tools from "@bgord/tools";
 import type { RedactorStrategy } from "./redactor.strategy";
+import { RedactorKey } from "./redactor-key.vo";
 import { RedactorMask } from "./redactor-mask.strategy";
 
 export class RedactorUrlQuery implements RedactorStrategy {
   private readonly keys: Set<string>;
 
   constructor(keys?: ReadonlyArray<string>) {
-    this.keys = new Set((keys?.length ? keys : RedactorMask.DEFAULT_KEYS).map((key) => key.toLowerCase()));
+    this.keys = new Set(
+      (keys?.length ? keys : RedactorMask.DEFAULT_KEYS).map((key) => RedactorKey.fromString(key).get()),
+    );
   }
 
   redact<T>(input: T): T {
@@ -24,7 +27,7 @@ export class RedactorUrlQuery implements RedactorStrategy {
     const masked = new URLSearchParams(
       Array.from(new URLSearchParams(query), ([key, value]) => [
         key,
-        this.keys.has(key.toLowerCase()) ? "***" : value,
+        this.keys.has(RedactorKey.fromString(key).get()) ? "***" : value,
       ]),
     );
 

package/src/shield-body-limit.strategy.ts

@@ -12,6 +12,7 @@ export class ShieldBodyLimitStrategy {
   evaluate(context: HasRequestHeader): boolean {
     const header = context.request.header("content-length");
 
+    // Header-only check: bodies without Content-Length (chunked/streamed) are bounded by Bun.serve's maxRequestBodySize instead.
     if (header === undefined) return true;
 
     const contentLength = v.safeParse(tools.SizeBytes, Number(header));

package/src/trailing-slash.middleware.ts

@@ -1,22 +1,20 @@
-import type { HasRequestPath } from "./request-context.port";
+import type { HasRequestUrl } from "./request-context.port";
 
 export type TrailingSlashResult = { redirect: false } | { redirect: true; pathname: string; status: 308 };
 
-const TRAILING_SLASHES = /\/+$/;
-const LEADING_SLASHES = /^\/+/;
+const EDGE_SLASHES = /^\/+|\/+$/g;
 
 export class TrailingSlashMiddleware {
   // RFC 7231 6.4.7 - 308 preserves the request method and body, unlike 301.
   static readonly STATUS = 308;
 
-  evaluate(context: HasRequestPath): TrailingSlashResult {
-    if (!context.request.path.endsWith("/")) return { redirect: false };
-    if (context.request.path === "/") return { redirect: false };
+  evaluate(context: HasRequestUrl): TrailingSlashResult {
+    const path = new URL(context.request.url()).pathname;
 
-    const pathname = (context.request.path.replace(TRAILING_SLASHES, "") || "/").replace(
-      LEADING_SLASHES,
-      "/",
-    );
+    if (!path.endsWith("/")) return { redirect: false };
+    if (path === "/") return { redirect: false };
+
+    const pathname = `/${path.replace(EDGE_SLASHES, "")}`;
 
     return { redirect: true, pathname, status: TrailingSlashMiddleware.STATUS };
   }