@dwp/govuk-casa 8.12.0 → 8.14.0

package/dist/routes/static.js

@@ -53,8 +53,10 @@ function staticRouter({ maxAge = 3600000, } = {}) {
     // The CASA CSS source contains the placeholder `~~~CASA_MOUNT_URL~~~` which
     // must be replaced with the dynamic `mountUrl` to ensure govuk-frontend
     // assets are served from the correct location.
+    /* eslint-disable security/detect-non-literal-fs-filename */
     const casaCss = (0, fs_1.readFileSync)((0, path_1.resolve)(dirname_cjs_1.default, '../../dist/assets/css/casa.css'), { encoding: 'utf8' });
     const casaCssIe8 = (0, fs_1.readFileSync)((0, path_1.resolve)(dirname_cjs_1.default, '../../dist/assets/css/casa-ie8.css'), { encoding: 'utf8' });
+    /* eslint-enable security/detect-non-literal-fs-filename */
     // The static middleware will only server GET/HEAD requests, so we can mount
     // the middleware using `use()` rather than resorting to `get()`
     const govukFrontendDirectory = (0, path_1.resolve)((0, module_1.createRequire)(dirname_cjs_1.default).resolve('govuk-frontend'), '../../');

package/dist/routes/static.js.map

@@ -1 +1 @@
-{"version":3,"file":"static.js","sourceRoot":"","sources":["../../src/routes/static.js"],"names":[],"mappings":";;;;;AAAA,sDAAgC;AAChC,2BAAkC;AAClC,6BAA0B;AAC1B,+BAA+B;AAC/B,mCAAuC;AAEvC,gEAAoC;AACpC,+EAAoD;AACpD,8CAAkD;AAElD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,iBAAS,CAAC,CAAC,WAAW;AAExD,MAAM,MAAM,GAAG,QAAQ,CAAC;AAExB;;;GAGG;AAEH;;;;;;GAMG;AACH,SAAwB,YAAY,CAAC,EACnC,MAAM,GAAG,OAAO,GACjB,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,IAAI,0BAAa,EAAE,CAAC;IAEnC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzC,kDAAkD;QAClD,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACpC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,SAAG,CAAC,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,mCAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE;YAClC,2CAA2C;YAC3C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;SACrC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,KAAK;QACnB,MAAM;QACN,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IAEF,4EAA4E;IAC5E,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,qBAAO,EAAE,gCAAgC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvG,MAAM,UAAU,GAAG,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,qBAAO,EAAE,oCAAoC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9G,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,sBAAsB,GAAG,IAAA,cAAO,EAAC,IAAA,sBAAa,EAAC,qBAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEnG,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,aAAa,CAAC,GAAG,sBAAsB,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7G,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,aAAa,CAAC,GAAG,sBAAsB,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;IACrH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG,sBAAsB,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAE7C,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAA,0BAAe,EAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1J,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAA,0BAAe,EAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAE5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAnDD,+BAmDC"}
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../src/routes/static.js"],"names":[],"mappings":";;;;;AAAA,sDAAgC;AAChC,2BAAkC;AAClC,6BAA0B;AAC1B,+BAA+B;AAC/B,mCAAuC;AAEvC,gEAAoC;AACpC,+EAAoD;AACpD,8CAAkD;AAElD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,iBAAS,CAAC,CAAC,WAAW;AAExD,MAAM,MAAM,GAAG,QAAQ,CAAC;AAExB;;;GAGG;AAEH;;;;;;GAMG;AACH,SAAwB,YAAY,CAAC,EACnC,MAAM,GAAG,OAAO,GACjB,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,IAAI,0BAAa,EAAE,CAAC;IAEnC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzC,kDAAkD;QAClD,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACpC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,SAAG,CAAC,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,mCAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACnC,2CAA2C;YAC3C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,KAAK;QACnB,MAAM;QACN,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IAEF,4EAA4E;IAC5E,wEAAwE;IACxE,+CAA+C;IAC/C,4DAA4D;IAC5D,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,qBAAO,EAAE,gCAAgC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvG,MAAM,UAAU,GAAG,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,qBAAO,EAAE,oCAAoC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9G,2DAA2D;IAE3D,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,sBAAsB,GAAG,IAAA,cAAO,EAAC,IAAA,sBAAa,EAAC,qBAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEnG,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,aAAa,CAAC,GAAG,sBAAsB,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7G,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,aAAa,CAAC,GAAG,sBAAsB,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;IACrH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG,sBAAsB,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAE7C,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAA,0BAAe,EAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1J,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAA,0BAAe,EAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAE5C,OAAO,MAAM,CAAC;AAChB,CAAC;AArDD,+BAqDC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dwp/govuk-casa",
-  "version": "8.12.0",
+  "version": "8.14.0",
   "description": "A framework for building GOVUK Collect-And-Submit-Applications",
   "repository": {
     "type": "git",
@@ -20,8 +20,8 @@
     "views/**/*"
   ],
   "engines": {
-    "node": "^16.0.0 || ^18.0.0 || ^20.0.0",
-    "npm": "^8.0.0 || ^9.0.0"
+    "node": "^18.0.0 || ^20.0.0",
+    "npm": "^8.0.0 || ^9.0.0 || ^10.0.0"
   },
   "scripts": {
     "pipeline": "npm run coverage && npm run lint",
@@ -57,46 +57,48 @@
     "express": "4.18.2",
     "express-session": "1.17.3",
     "govuk-frontend": "4.7.0",
-    "helmet": "7.0.0",
-    "i18next": "23.2.10",
-    "i18next-http-middleware": "3.3.2",
+    "helmet": "7.1.0",
+    "i18next": "23.7.6",
+    "i18next-http-middleware": "3.5.0",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "luxon": "3.3.0",
+    "luxon": "3.4.4",
     "nunjucks": "3.2.4",
     "path-to-regexp": "6.2.1",
-    "validator": "13.9.0"
+    "validator": "13.11.0"
   },
   "devDependencies": {
-    "@babel/core": "7.22.8",
-    "@babel/eslint-parser": "7.22.7",
-    "@babel/preset-env": "7.22.7",
-    "@ckeditor/jsdoc-plugins": "38.1.1",
-    "@commitlint/config-conventional": "17.6.6",
-    "@dwp/casa-spiderplan": "3.1.2",
-    "@dwp/casa-spiderplan-a11y-plugin": "0.1.13",
-    "@dwp/casa-spiderplan-zap-plugin": "0.1.9",
-    "@dwp/eslint-config-base": "6.1.1",
-    "@types/express": "4.17.17",
-    "@types/node": "20.4.1",
-    "@types/nunjucks": "3.2.3",
-    "c8": "8.0.0",
-    "chai": "4.3.7",
+    "@babel/core": "7.23.3",
+    "@babel/eslint-parser": "7.23.3",
+    "@babel/preset-env": "7.23.3",
+    "@ckeditor/jsdoc-plugins": "39.2.1",
+    "@commitlint/config-conventional": "18.4.3",
+    "@dwp/casa-spiderplan": "3.1.3",
+    "@dwp/casa-spiderplan-a11y-plugin": "0.1.14",
+    "@dwp/casa-spiderplan-zap-plugin": "0.1.10",
+    "@dwp/eslint-config-base": "7.0.0",
+    "@types/express": "4.17.21",
+    "@types/node": "20.9.3",
+    "@types/nunjucks": "3.2.6",
+    "c8": "8.0.1",
+    "chai": "4.3.10",
     "cheerio": "1.0.0-rc.12",
-    "commitlint": "17.6.6",
-    "docdash": "2.0.1",
-    "eslint": "8.44.0",
+    "commitlint": "18.4.3",
+    "docdash": "2.0.2",
+    "eslint": "8.54.0",
+    "eslint-plugin-import": "2.29.0",
+    "eslint-plugin-jsdoc": "46.9.0",
     "eslint-plugin-no-unsafe-regex": "1.0.0",
     "eslint-plugin-security": "1.7.1",
-    "eslint-plugin-sonarjs": "0.19.0",
-    "fast-check": "3.11.0",
+    "eslint-plugin-sonarjs": "0.23.0",
+    "fast-check": "3.14.0",
     "jsdoc": "4.0.2",
     "jsdoc-tsimport-plugin": "1.0.5",
     "mocha": "10.2.0",
-    "sass": "1.63.6",
-    "sinon": "15.2.0",
+    "sass": "1.69.5",
+    "sinon": "17.0.1",
     "sinon-chai": "3.7.0",
     "supertest": "6.3.3",
-    "typescript": "5.1.6"
+    "typescript": "5.3.2"
   }
 }

package/src/casa.js

@@ -165,6 +165,7 @@ export {
  * @property {number} [formMaxParams=25] Max number of form parameters to ingest
  * @property {number|string} [formMaxBytes="50KB"] Max total form payload size to ingest
  * @property {ContextIdGenerator} [contextIdGenerator] Custom context ID generator
+ * @property {symbol|Function} [errorVisibility] option to keep page errors active on GET request
  */
 
 /**

package/src/lib/JourneyContext.js

@@ -1,4 +1,3 @@
-/* eslint-disable import/no-cycle */
 /**
  * Represents the state of a user's journey through the Plan. It contains
  * information about:
@@ -14,7 +13,7 @@ import { notProto } from './utils.js';
 import { uuid as uuidGenerator } from './context-id-generators.js';
 
 const {
-  cloneDeep, isPlainObject, isObject, has, isEqual,
+  isPlainObject, isObject, has, isEqual,
 } = lodash; // CommonJS
 
 const log = logger('lib:journey-context');
@@ -127,10 +126,10 @@ export default class JourneyContext {
    */
   toObject() {
     return Object.assign(Object.create(null), {
-      data: cloneDeep(this.#data),
-      validation: cloneDeep(this.#validation),
-      nav: cloneDeep(this.#nav),
-      identity: cloneDeep(this.#identity),
+      data: structuredClone(this.#data),
+      validation: structuredClone(this.#validation),
+      nav: structuredClone(this.#nav),
+      identity: structuredClone(this.#identity),
     });
   }
 
@@ -257,6 +256,7 @@ export default class JourneyContext {
    * @returns {JourneyContext} Chain.
    */
   removeValidationStateForPage(pageId) {
+    /* eslint-disable-next-line no-unused-vars */
     const { [pageId]: dummy, ...remaining } = this.#validation;
     this.#validation = { ...remaining };
     return this;

package/src/lib/configuration-ingestor.js

@@ -10,6 +10,7 @@ import {
   validateView,
 } from './utils.js';
 import * as contextIdGenerators from './context-id-generators.js';
+import { CONFIG_ERROR_VISIBILITY_ALWAYS, CONFIG_ERROR_VISIBILITY_ONSUBMIT } from './constants.js';
 
 /**
  * @access private
@@ -256,6 +257,25 @@ export function validateSessionCookiePath(cookiePath, defaultPath = '/') {
  * @returns {boolean} cookie path
  * @throws {TypeError} When invalid arguments are provided
  */
+
+/**
+ * Validates errorVisibility.
+ *
+ * @access private
+ * @param {string} errorVisibility sets visibility flag for page validation error
+ * @throws {SyntaxError} For invalid errorVisibility flag.
+ * @returns {symbol | Function} flag for error visibility.
+ */
+export function validateErrorVisibility(errorVisibility = CONFIG_ERROR_VISIBILITY_ONSUBMIT) {
+  if (errorVisibility === undefined) {
+    return undefined;
+  }
+  if (errorVisibility === CONFIG_ERROR_VISIBILITY_ALWAYS || errorVisibility === CONFIG_ERROR_VISIBILITY_ONSUBMIT || typeof errorVisibility === 'function') {
+    return errorVisibility;
+  }
+  throw new TypeError('errorVisibility must be casa constant CONFIG_ERROR_VISIBILITY_ALWAYS | CONFIG_ERROR_VISIBILITY_ONSUBMIT or function');
+}
+
 export function validateSessionCookieSameSite(cookieSameSite, defaultFlag) {
   const validValues = [true, false, 'Strict', 'Lax', 'None'];
 
@@ -322,6 +342,9 @@ const validatePage = (page, index) => {
     if (page.hooks !== undefined) {
       validatePageHooks(page.hooks);
     }
+    if (page.errorVisibility !== undefined) {
+      validateErrorVisibility(page.errorVisibility)
+    }
   } catch (err) {
     err.message = `Page at index ${index} is invalid: ${err.message}`;
     throw err;
@@ -467,6 +490,9 @@ export default function ingest(config = {}) {
     // URL that will prefix all URLs in the browser address bar
     mountUrl: validateMountUrl(config.mountUrl),
 
+    // flag to make validation error visible on get requests
+    errorVisibility: validateErrorVisibility(config.errorVisibility),
+
     // Session
     session: validateSessionObject(config.session, (session) => ({
       name: validateSessionName(session.name),

package/src/lib/configure.js

@@ -22,6 +22,8 @@ import dataMiddlewareFactory from '../middleware/data.js';
 import bodyParserMiddlewareFactory from '../middleware/body-parser.js';
 import csrfMiddlewareFactory from '../middleware/csrf.js';
 
+import { CONFIG_ERROR_VISIBILITY_ONSUBMIT } from './constants.js';
+
 /**
  * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigurationOptions
@@ -55,6 +57,7 @@ export default function configure(config = {}) {
   const ingestedConfig = configurationIngestor(config);
   const {
     mountUrl,
+    errorVisibility = CONFIG_ERROR_VISIBILITY_ONSUBMIT,
     views = [],
     session = {
       secret: 'secret',
@@ -145,11 +148,13 @@ export default function configure(config = {}) {
   });
 
   // Setup waypoint router, which includes routes for every defined waypoint
+  const globalErrorVisibility = errorVisibility
   const journeyRouter = journeyRoutes({
     globalHooks: hooks,
     pages,
     plan,
     csrfMiddleware,
+    globalErrorVisibility,
   });
 
   // Create the mounting function

package/src/lib/constants.js

@@ -7,3 +7,5 @@ export const REQUEST_PHASE_GATHER = Symbol('gather');
 export const REQUEST_PHASE_VALIDATE = Symbol('validate');
 export const REQUEST_PHASE_REDIRECT = Symbol('redirect');
 export const REQUEST_PHASE_RENDER = Symbol('render');
+export const CONFIG_ERROR_VISIBILITY_ONSUBMIT = Symbol('onsubmit');
+export const CONFIG_ERROR_VISIBILITY_ALWAYS = Symbol('always');

package/src/lib/nunjucks.js

@@ -42,6 +42,7 @@ export default function nunjucksConfig({
 
   // Globals
   // These can't be modified once set. But they can be overridden by res.locals.
+  /* eslint-disable-next-line security/detect-non-literal-fs-filename */
   env.addGlobal('casaVersion', JSON.parse(readFileSync(resolve(dirname, '../../package.json'))).version);
 
   env.addGlobal('mergeObjects', mergeObjects);

package/src/middleware/i18n.js

@@ -1,4 +1,4 @@
-import i18next from 'i18next';
+import { createInstance } from 'i18next';
 import { LanguageDetector, handle } from 'i18next-http-middleware';
 import { resolve, basename } from 'path';
 import { existsSync, readFileSync, readdirSync } from 'fs';
@@ -11,10 +11,12 @@ const log = logger('middleware:i18n');
 const loadJson = (file) => {
   // Strip out newlines (this is a legacy feature which we're keeping for
   // backwards compatibility).
+  /* eslint-disable-next-line security/detect-non-literal-fs-filename */
   const json = readFileSync(file, 'utf8');
   return JSON.parse(json.replace(/[\r\n]/g, ''));
 }
 
+/* eslint-disable-next-line security/detect-non-literal-fs-filename */
 const loadYaml = (file) => yaml.load(readFileSync(file, 'utf8'))
 
 const extract = (file) => {
@@ -38,11 +40,13 @@ const loadResources = (languages, directories) => {
 
     directories.forEach((basedir) => {
       const dir = resolve(basedir, language);
+      /* eslint-disable-next-line security/detect-non-literal-fs-filename */
       if (!existsSync(dir)) {
         return;
       }
 
       log.info('Loading %s language from %s ...', language, dir);
+      /* eslint-disable-next-line security/detect-non-literal-fs-filename */
       readdirSync(dir).forEach((file) => {
         const { ns, data } = extract(resolve(dir, file));
 
@@ -67,7 +71,7 @@ export default function i18nMiddleware({
   const resources = loadResources(languages, directories);
 
   // Configure i18next
-  const i18nInstance = i18next.createInstance();
+  const i18nInstance = createInstance();
   i18nInstance
     .use(LanguageDetector)
     .init({

package/src/routes/journey.js

@@ -9,6 +9,7 @@ import progressJourneyMiddlewareFactory from '../middleware/progress-journey.js'
 import waypointUrl from '../lib/waypoint-url.js';
 import logger from '../lib/logger.js';
 import { resolveMiddlewareHooks } from '../lib/utils.js';
+import { CONFIG_ERROR_VISIBILITY_ALWAYS } from '../lib/constants.js';
 
 const log = logger('routes:journey');
 
@@ -53,6 +54,26 @@ const renderMiddlewareFactory = (view, contextFactory) => [
   },
 ];
 
+/**
+ * generate page validation error
+ *
+ * @param {object} errors object of page validation error
+ * @param {object} req casa request object
+ * @returns {object[]} array of error objects
+ */
+const generateGovukErrors = (errors, req) => Object.values(errors || {}).map(([error]) => ({
+  text: req.t(error.summary, error.variables),
+  href: error.fieldHref,
+}))
+/**
+ * handle errorVisibility flag and function and return boolean
+ *
+ * @param {symbol | Function} errorVisibility errorVisibility config option
+ * @param {object} req casa request object
+ * @returns {boolean} true if errorVisibility is "always" or function condition true
+ */
+const resolveErrorVisibility = (req, errorVisibility) => (typeof errorVisibility === 'function' ? errorVisibility({ req }) : errorVisibility === CONFIG_ERROR_VISIBILITY_ALWAYS)
+
 /**
  * Create an instance of the router for all waypoints visited during a Journey
  * through the Plan.
@@ -66,6 +87,7 @@ export default function journeyRouter({
   pages,
   plan,
   csrfMiddleware,
+  globalErrorVisibility,
 }) {
   // Router
   const router = new MutableRouter();
@@ -116,7 +138,7 @@ export default function journeyRouter({
   ];
 
   pages.forEach((page) => {
-    const { waypoint, view, hooks: pageHooks = [], fields } = page;
+    const { waypoint, view, hooks: pageHooks = [], fields, errorVisibility } = page;
     const waypointPath = `/${waypoint}`;
 
     let commonWaypointMiddleware = [
@@ -145,10 +167,18 @@ export default function journeyRouter({
       ...resolveMiddlewareHooks('journey.poststeer', waypointPath, [...globalHooks, ...pageHooks]),
 
       ...resolveMiddlewareHooks('journey.prerender', waypointPath, [...globalHooks, ...pageHooks]),
-      renderMiddlewareFactory(view, (req) => ({
-        formUrl: waypointUrl({ mountUrl: `${req.baseUrl}/`, waypoint }),
-        formData: req.casa.journeyContext.getDataForPage(waypoint),
-      })),
+      renderMiddlewareFactory(view, (req) => {
+        const displayErrors = resolveErrorVisibility(req, globalErrorVisibility) || resolveErrorVisibility(req, errorVisibility);
+        const errors = displayErrors && (req.casa.journeyContext.getValidationErrorsForPageByField(waypoint) ?? Object.create(null));
+        const govukErrors = displayErrors && generateGovukErrors(errors, req);
+
+        return ({
+          formUrl: waypointUrl({ mountUrl: `${req.baseUrl}/`, waypoint }),
+          formData: req.casa.journeyContext.getDataForPage(waypoint),
+          formErrors: (Object.keys(errors).length && displayErrors) ? errors : null,
+          formErrorsGovukArray: (govukErrors.length && displayErrors) ? govukErrors : null,
+        })
+      }),
     );
 
     router.post(
@@ -193,10 +223,7 @@ export default function journeyRouter({
         // first one is shown.
         // Disabling security/detect-object-injection rule because both `errors`
         // and the `k` property are known entities
-        const govukErrors = Object.keys(errors).map((k) => ({
-          text: req.t(errors[k][0].summary, errors[k][0].variables), /* eslint-disable-line security/detect-object-injection */
-          href: errors[k][0].fieldHref, /* eslint-disable-line security/detect-object-injection */
-        }));
+        const govukErrors = generateGovukErrors(errors, req)
 
         return {
           formUrl: waypointUrl({ mountUrl: `${req.baseUrl}/`, waypoint }),

package/src/routes/static.js

@@ -58,8 +58,10 @@ export default function staticRouter({
   // The CASA CSS source contains the placeholder `~~~CASA_MOUNT_URL~~~` which
   // must be replaced with the dynamic `mountUrl` to ensure govuk-frontend
   // assets are served from the correct location.
+  /* eslint-disable security/detect-non-literal-fs-filename */
   const casaCss = readFileSync(resolve(dirname, '../../dist/assets/css/casa.css'), { encoding: 'utf8' });
   const casaCssIe8 = readFileSync(resolve(dirname, '../../dist/assets/css/casa-ie8.css'), { encoding: 'utf8' });
+  /* eslint-enable security/detect-non-literal-fs-filename */
 
   // The static middleware will only server GET/HEAD requests, so we can mount
   // the middleware using `use()` rather than resorting to `get()`