@blamejs/blamejs-shop 0.5.20 → 0.5.21

package/lib/webhook-subscriptions.js

@@ -68,10 +68,6 @@ var WILDCARD_EVENT = "*";
 // control bytes are a slipping-class for header injection + visual
 // spoofing downstream. Spelled with \u-escapes so ESLint's
 // no-irregular-whitespace stays happy.
-var CONTROL_BYTE_RE = /[\x00-\x1f\x7f]/;
-var ZERO_WIDTH_RE = new RegExp(
-  "[\\u200B-\\u200F\\u202A-\\u202E\\u2060-\\u2064\\u2066-\\u2069\\uFEFF\\u061C]"
-);
 
 // Event-type identifier shape — `domain.action[.qualifier]` segments
 // of ASCII letters / digits / underscore, joined by `.`. The wildcard
@@ -111,9 +107,7 @@ function _ownerId(s) {
   if (s.length > MAX_OWNER_ID_LEN) {
     throw new TypeError("webhookSubscriptions: owner_id must be <= " + MAX_OWNER_ID_LEN + " characters");
   }
-  if (CONTROL_BYTE_RE.test(s) || ZERO_WIDTH_RE.test(s)) {
-    throw new TypeError("webhookSubscriptions: owner_id contains control / zero-width bytes");
-  }
+  textGuard.freeText(s, "webhookSubscriptions: owner_id", { singleLine: "reject", zeroWidth: "reject" });
   return s;
 }
 
@@ -191,9 +185,7 @@ function _name(s) {
   if (s.length > MAX_NAME_LEN) {
     throw new TypeError("webhookSubscriptions: name must be <= " + MAX_NAME_LEN + " characters");
   }
-  if (CONTROL_BYTE_RE.test(s) || ZERO_WIDTH_RE.test(s)) {
-    throw new TypeError("webhookSubscriptions: name contains control / zero-width bytes");
-  }
+  textGuard.freeText(s, "webhookSubscriptions: name", { singleLine: "reject", zeroWidth: "reject" });
   return s;
 }
 
@@ -219,9 +211,7 @@ function _signingSecret(s) {
   if (s.length > 512) {
     throw new TypeError("webhookSubscriptions: signing_secret must be <= 512 characters");
   }
-  if (CONTROL_BYTE_RE.test(s) || ZERO_WIDTH_RE.test(s)) {
-    throw new TypeError("webhookSubscriptions: signing_secret contains control / zero-width bytes");
-  }
+  textGuard.freeText(s, "webhookSubscriptions: signing_secret", { singleLine: "reject", zeroWidth: "reject" });
   return s;
 }
 

package/lib/wishlist-sharing.js

@@ -63,6 +63,7 @@
  */
 
 var b = require("./vendor/blamejs");
+var textGuard = require("./text-guard");
 var wishlistModule = require("./wishlist");
 
 // ---- constants ----------------------------------------------------------
@@ -82,8 +83,6 @@ var MAX_REASON_LEN             = 500;
 var MAX_EMAIL_LEN              = 254;
 var MAX_MEMBER_EMAILS          = 50;
 
-var CONTROL_BYTE_RE            = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/;
-var CONTROL_BYTE_STRICT_RE     = /[\x00-\x1f\x7f]/;
 
 // Conservative single-line email shape — defence in depth against
 // header-injection / control-byte smuggling when the operator
@@ -127,7 +126,7 @@ function _title(s, label) {
   if (typeof s !== "string" || s.length > MAX_TITLE_LEN) {
     throw new TypeError("wishlistSharing: " + label + " must be a string <= " + MAX_TITLE_LEN + " chars");
   }
-  if (CONTROL_BYTE_RE.test(s)) {
+  if (textGuard.hasCodepointThreat(s)) {
     throw new TypeError("wishlistSharing: " + label + " must not contain control bytes");
   }
   return s;
@@ -137,7 +136,7 @@ function _requiredTitle(s, label) {
   if (typeof s !== "string" || !s.length || s.length > MAX_TITLE_LEN) {
     throw new TypeError("wishlistSharing: " + label + " must be a non-empty string <= " + MAX_TITLE_LEN + " chars");
   }
-  if (CONTROL_BYTE_RE.test(s)) {
+  if (textGuard.hasCodepointThreat(s)) {
     throw new TypeError("wishlistSharing: " + label + " must not contain control bytes");
   }
   return s;
@@ -162,9 +161,7 @@ function _reason(s) {
   if (typeof s !== "string" || !s.length || s.length > MAX_REASON_LEN) {
     throw new TypeError("wishlistSharing: reason must be a non-empty string <= " + MAX_REASON_LEN + " chars");
   }
-  if (CONTROL_BYTE_RE.test(s)) {
-    throw new TypeError("wishlistSharing: reason must not contain control bytes");
-  }
+  textGuard.freeText(s, "wishlistSharing: reason");
   return s;
 }
 
@@ -205,9 +202,7 @@ function _viewerSessionId(s) {
   // Session ids are opaque to this primitive; refuse control bytes
   // so the hashed breadcrumb has no log-injection vector even if a
   // downstream tool ever rendered the raw value.
-  if (CONTROL_BYTE_STRICT_RE.test(s)) {
-    throw new TypeError("wishlistSharing: viewer_session_id must not contain control bytes");
-  }
+  textGuard.freeText(s, "wishlistSharing: viewer_session_id", { singleLine: "reject" });
   return s;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.5.20",
+  "version": "0.5.21",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {