@blamejs/core 0.18.43 → 0.18.45

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/CHANGELOG.md +142 -0
  2. package/NOTICE +1 -1
  3. package/README.md +3 -2
  4. package/index.js +2 -0
  5. package/lib/chain-writer.js +103 -4
  6. package/lib/file-type.js +19 -2
  7. package/lib/framework-error.js +10 -0
  8. package/lib/gate-contract.js +255 -12
  9. package/lib/guard-all.js +1 -0
  10. package/lib/guard-archive.js +14 -0
  11. package/lib/guard-auth.js +1 -3
  12. package/lib/guard-country.js +480 -0
  13. package/lib/guard-csv.js +5 -0
  14. package/lib/guard-email.js +7 -7
  15. package/lib/guard-filename.js +11 -9
  16. package/lib/guard-graphql.js +1 -3
  17. package/lib/guard-html.js +6 -7
  18. package/lib/guard-image.js +15 -1
  19. package/lib/guard-json.js +3 -7
  20. package/lib/guard-jwt.js +8 -3
  21. package/lib/guard-markdown.js +946 -2
  22. package/lib/guard-oauth.js +1 -3
  23. package/lib/guard-pdf.js +8 -0
  24. package/lib/guard-regex.js +5 -4
  25. package/lib/guard-smtp-command.js +4 -2
  26. package/lib/guard-sql.js +10 -0
  27. package/lib/guard-svg.js +2 -1
  28. package/lib/guard-text.js +10 -0
  29. package/lib/guard-yaml.js +13 -2
  30. package/lib/mail-auth.js +12 -14
  31. package/lib/middleware/index.js +3 -0
  32. package/lib/middleware/shared-secret-header.js +334 -0
  33. package/lib/public-suffix.js +57 -0
  34. package/lib/time.js +282 -0
  35. package/lib/vendor/MANIFEST.json +13 -13
  36. package/lib/vendor/blamejs-pki.cjs +4069 -3138
  37. package/package.json +1 -1
  38. package/sbom.cdx.json +6 -6
package/lib/guard-jwt.js CHANGED
@@ -439,9 +439,9 @@ function _detectIssues(input, opts) {
439
439
  * allowedAlgs: string[],
440
440
  * requiredClaims: string[],
441
441
  * knownCrit: string[],
442
- * algNonePolicy: "reject"|"audit"|"allow",
442
+ * algNonePolicy: "reject", // alg=none is always critical
443
443
  * algAllowlistPolicy: "reject"|"audit"|"allow",
444
- * kidTraversalPolicy: "reject"|"audit"|"allow",
444
+ * kidTraversalPolicy: "reject", // kid traversal is always critical
445
445
  * typConfusionPolicy: "reject"|"audit"|"allow",
446
446
  * expSanityPolicy: "reject"|"audit"|"allow",
447
447
  * nbfSanityPolicy: "reject"|"audit"|"allow",
@@ -587,8 +587,13 @@ module.exports = gateContract.defineGuard({
587
587
  integrationFixtures: INTEGRATION_FIXTURES,
588
588
  detect: _detectIssues,
589
589
  sanitizeTransform: _sanitizeTransform,
590
+ // The byte caps only. nbfFutureSlackMs and iatFutureSlackMs are TOLERANCES,
591
+ // not caps: zero means "allow no clock slack", which is a stricter setting an
592
+ // operator may legitimately want, and declaring them here refused it. They
593
+ // are still held to being non-negative integers by the derived check, so a
594
+ // slack given as a string or an Infinity is refused exactly as before.
590
595
  intOpts: ["maxBytes", "maxHeaderBytes", "maxPayloadBytes",
591
- "maxSignatureBytes", "nbfFutureSlackMs", "iatFutureSlackMs"],
596
+ "maxSignatureBytes"],
592
597
  extra: {
593
598
  kidSafe: kidSafe,
594
599
  },