@lenne.tech/nest-server 11.16.0 → 11.16.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nest-server",
-  "version": "11.16.0",
+  "version": "11.16.1",
   "description": "Modern, fast, powerful Node.js web framework in TypeScript based on Nest with a GraphQL API and a connection to MongoDB (or other databases).",
   "keywords": [
     "node",

package/src/core/common/pipes/map-and-validate.pipe.ts

@@ -689,6 +689,12 @@ export class MapAndValidatePipe implements PipeTransform {
   }
 
   async transform(value: any, metadata: ArgumentMetadata) {
+    // Skip custom decorator parameters (e.g. @CurrentUser()) — they are not user input
+    // and must not be mutated by whitelist stripping or validation
+    if (metadata.type === 'custom') {
+      return value;
+    }
+
     const { metatype } = metadata;
 
     if (DEBUG_VALIDATION) {