@middy/http-cors 7.0.2 → 7.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -5,7 +5,7 @@
5
5
  <p>
6
6
  <a href="https://github.com/middyjs/middy/actions/workflows/test-unit.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-unit.yml/badge.svg" alt="GitHub Actions unit test status"></a>
7
7
  <a href="https://github.com/middyjs/middy/actions/workflows/test-dast.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-dast.yml/badge.svg" alt="GitHub Actions dast test status"></a>
8
- <a href="https://github.com/middyjs/middy/actions/workflows/test-perf.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-pref.yml/badge.svg" alt="GitHub Actions perf test status"></a>
8
+ <a href="https://github.com/middyjs/middy/actions/workflows/test-perf.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-perf.yml/badge.svg" alt="GitHub Actions perf test status"></a>
9
9
  <a href="https://github.com/middyjs/middy/actions/workflows/test-sast.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-sast.yml/badge.svg" alt="GitHub Actions SAST test status"></a>
10
10
  <a href="https://github.com/middyjs/middy/actions/workflows/test-lint.yml"><img src="https://github.com/middyjs/middy/actions/workflows/test-lint.yml/badge.svg" alt="GitHub Actions lint test status"></a>
11
11
  <br/>
@@ -32,7 +32,7 @@
32
32
 
33
33
  ## License
34
34
 
35
- Licensed under [MIT License](LICENSE). Copyright (c) 2017-2025 [Luciano Mammino](https://github.com/lmammino), [will Farrell](https://github.com/willfarrell), and the [Middy team](https://github.com/middyjs/middy/graphs/contributors).
35
+ Licensed under [MIT License](LICENSE). Copyright (c) 2017-2026 [will Farrell](https://github.com/willfarrell), [Luciano Mammino](https://github.com/lmammino), and [Middy contributors](https://github.com/middyjs/middy/graphs/contributors).
36
36
 
37
37
  <a href="https://app.fossa.io/projects/git%2Bgithub.com%2Fmiddyjs%2Fmiddy?ref=badge_large">
38
38
  <img src="https://app.fossa.io/api/projects/git%2Bgithub.com%2Fmiddyjs%2Fmiddy.svg?type=large" alt="FOSSA Status" style="max-width:100%;">
package/index.d.ts CHANGED
@@ -1,3 +1,5 @@
1
+ // Copyright 2017 - 2026 will Farrell, Luciano Mammino, and Middy contributors.
2
+ // SPDX-License-Identifier: MIT
1
3
  import type middy from "@middy/core";
2
4
 
3
5
  export interface Options {
package/index.js CHANGED
@@ -1,3 +1,5 @@
1
+ // Copyright 2017 - 2026 will Farrell, Luciano Mammino, and Middy contributors.
2
+ // SPDX-License-Identifier: MIT
1
3
  import { normalizeHttpResponse } from "@middy/util";
2
4
 
3
5
  const defaults = {
@@ -29,7 +31,7 @@ const httpCorsMiddleware = (opts = {}) => {
29
31
  if (originDynamic.some((regExp) => regExp.test(incomingOrigin))) {
30
32
  return incomingOrigin;
31
33
  }
32
- // TODO deprecate `else` in v6
34
+ // TODO v8 deprecate `else`
33
35
  } else {
34
36
  if (incomingOrigin && options.credentials && options.origin === "*") {
35
37
  return incomingOrigin;
@@ -66,7 +68,9 @@ const httpCorsMiddleware = (opts = {}) => {
66
68
  originMany = true;
67
69
  // Dynamic
68
70
  // TODO: IDN -> puncycode not handled, add in if requested
69
- const regExpStr = origin.replaceAll(".", "\\.").replaceAll("*", "[^.]*");
71
+ const regExpStr = origin
72
+ .replace(/[.+?^${}()|[\]\\]/g, "\\$&")
73
+ .replaceAll("*", "[^.]*");
70
74
  // SAST Skipped: Not accessible by users
71
75
  // nosemgrep: javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp
72
76
  originDynamic.push(new RegExp(`^${regExpStr}$`));
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@middy/http-cors",
3
- "version": "7.0.2",
3
+ "version": "7.0.3",
4
4
  "description": "CORS (Cross-Origin Resource Sharing) middleware for the middy framework",
5
5
  "type": "module",
6
6
  "engines": {
@@ -11,6 +11,7 @@
11
11
  "access": "public"
12
12
  },
13
13
  "module": "./index.js",
14
+ "sideEffects": false,
14
15
  "exports": {
15
16
  ".": {
16
17
  "import": {
@@ -64,9 +65,9 @@
64
65
  },
65
66
  "gitHead": "7a6c0fbb8ab71d6a2171e678697de9f237568431",
66
67
  "dependencies": {
67
- "@middy/util": "7.0.2"
68
+ "@middy/util": "7.0.3"
68
69
  },
69
70
  "devDependencies": {
70
- "@middy/core": "7.0.2"
71
+ "@middy/core": "7.0.3"
71
72
  }
72
73
  }