@emeryld/rrroutes-server 2.5.4 → 2.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -225,8 +225,9 @@ const server = createRRRoute(app, {
|
|
|
225
225
|
By default, the sanitizer:
|
|
226
226
|
|
|
227
227
|
- strips null bytes from strings
|
|
228
|
-
- removes
|
|
228
|
+
- removes blocked keys (`__proto__`, `prototype`, `constructor`) unless `stripBlockedKeys: false`
|
|
229
229
|
- keeps whitespace unless `trimStrings: true` is set
|
|
230
|
+
- can log per-target timings when `profiler: true`
|
|
230
231
|
|
|
231
232
|
`blockedKeys` exists to prevent prototype-pollution payloads from surviving into downstream object merges.
|
|
232
233
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@emeryld/rrroutes-server",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.6.0",
|
|
4
4
|
"private": false,
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.cjs",
|
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
"dist"
|
|
18
18
|
],
|
|
19
19
|
"dependencies": {
|
|
20
|
-
"@emeryld/rrroutes-contract": "^2.
|
|
20
|
+
"@emeryld/rrroutes-contract": "^2.6.0",
|
|
21
21
|
"jose": "^6.1.3",
|
|
22
22
|
"multer": "1.4.5-lts.2",
|
|
23
23
|
"socket.io": "^4.8.3",
|