@exortek/express-mongo-sanitize 1.1.0 → 1.1.1

package/index.js

@@ -143,7 +143,7 @@ const isPlainObject = (obj) => !!obj && Object.prototype.toString.call(obj) ===
  */
 const isObjectEmpty = (obj) => {
   if (!isPlainObject(obj)) return false;
-  return !Object.hasOwn(obj, Object.keys(obj)[0]);
+  return !Object.keys(obj).length;
 };
 
 /**
@@ -179,6 +179,9 @@ const isFunction = (value) => typeof value === 'function';
  * @extends Error
  */
 class ExpressMongoSanitizeError extends Error {
+  cause;
+  message;
+  stack;
   /**
    * Creates a new ExpressMongoSanitizeError.
    * @param {string} message - Error message
@@ -190,6 +193,14 @@ class ExpressMongoSanitizeError extends Error {
     this.type = type;
     Error.captureStackTrace(this, this.constructor);
   }
+
+  code() {
+    return this.type;
+  }
+
+  view() {
+    return `${this.name} [${this.type}]: ${this.message}\n${this.stack}`;
+  }
 }
 
 /**
@@ -371,9 +382,13 @@ const handleRequest = (request, options) => {
       }
       if (isWritable(request, sanitizeObject)) {
         request[sanitizeObject] = sanitized;
-      } else if (typeof request[sanitizeObject] === 'object' && request[sanitizeObject] !== null) {
-        Object.keys(request[sanitizeObject]).forEach((k) => delete request[sanitizeObject][k]);
-        Object.assign(request[sanitizeObject], sanitized);
+      } else if (isPlainObject(request[sanitizeObject]) && sanitizeObject === 'query') {
+        Object.defineProperty(request, 'query', {
+          value: Object.setPrototypeOf(sanitized, null),
+          writable: true,
+          enumerable: true,
+          configurable: true,
+        });
       }
     }
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exortek/express-mongo-sanitize",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "A comprehensive Express middleware designed to protect your No(n)SQL queries from injection attacks by sanitizing request data. This middleware provides flexible sanitization options for request bodies, parameters, and query strings.",
   "main": "index.js",
   "type": "commonjs",