@nestjs/common 9.0.0-next.2 → 9.0.0

package/Readme.md

@@ -128,6 +128,8 @@ Nest is an MIT-licensed open source project. It can grow thanks to the sponsors
      <td align="center" valign="middle"><a href="https://polygon-software.ch/" target="_blank"><img src="https://nestjs.com/img/polygon-logo.svg" width="120" valign="middle" /></a></td>
    <td align="center" valign="middle"><a href="https://mobilereality.pl/" target="_blank"><img src="https://nestjs.com/img/mobile-reality-logo.png" width="45" valign="middle" /></a></td>
      <td align="center" valign="middle"><a href="https://boringowl.io/" target="_blank"><img src="https://nestjs.com/img/boringowl-logo.svg" width="120" valign="middle" /></a></td>
+ <td align="center" valign="middle"><a href="https://www.mobilefactory.jp/" target="_blank"><img src="https://nestjs.com/img/mobilefactory-logo.png" width="100" valign="middle" /></a></td>
+ <td align="center" valign="middle"><a href="https://db.nordbot.app/" target="_blank"><img src="https://nestjs.com/img/nord-logo.png" width="50" valign="middle" /></a></td>
   </tr></table>
 
 ## Backers

package/interfaces/nest-application-context.interface.d.ts

@@ -61,7 +61,7 @@ export interface INestApplicationContext {
      */
     enableShutdownHooks(signals?: ShutdownSignal[] | string[]): this;
     /**
-     * Initalizes the Nest application.
+     * Initializes the Nest application.
      * Calls the Nest lifecycle events.
      * It isn't mandatory to call this method directly.
      *

package/interfaces/version-options.interface.d.ts

@@ -12,7 +12,7 @@ export declare type VersionValue = string | typeof VERSION_NEUTRAL | Array<strin
 export interface VersionOptions {
     /**
      * Specifies an optional API Version. When configured, methods
-     * withing the controller will only be routed if the request version
+     * within the controller will only be routed if the request version
      * matches the specified value.
      *
      * Supported only by HTTP-based applications (does not apply to non-HTTP microservices).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nestjs/common",
-  "version": "9.0.0-next.2",
+  "version": "9.0.0",
   "description": "Nest - modern, fast, powerful node.js web framework (@common)",
   "author": "Kamil Mysliwiec",
   "homepage": "https://nestjs.com",

package/pipes/file/file-type.validator.d.ts

@@ -1,9 +1,13 @@
 import { FileValidator } from './file-validator.interface';
 export declare type FileTypeValidatorOptions = {
-    fileType: string;
+    fileType: string | RegExp;
 };
 /**
- * Defines the built-in FileType File Validator
+ * Defines the built-in FileType File Validator. It validates incoming files mime-type
+ * matching a string or a regular expression. Note that this validator uses a naive strategy
+ * to check the mime-type and could be fooled if the client provided a file with renamed extension.
+ * (for instance, renaming a 'malicious.bat' to 'malicious.jpeg'). To handle such security issues
+ * with more reliability, consider checking against the file's [magic-numbers](https://en.wikipedia.org/wiki/Magic_number_%28programming%29)
  *
  * @see [File Validators](https://docs.nestjs.com/techniques/file-upload#validators)
  *

package/pipes/file/file-type.validator.js

@@ -3,7 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FileTypeValidator = void 0;
 const file_validator_interface_1 = require("./file-validator.interface");
 /**
- * Defines the built-in FileType File Validator
+ * Defines the built-in FileType File Validator. It validates incoming files mime-type
+ * matching a string or a regular expression. Note that this validator uses a naive strategy
+ * to check the mime-type and could be fooled if the client provided a file with renamed extension.
+ * (for instance, renaming a 'malicious.bat' to 'malicious.jpeg'). To handle such security issues
+ * with more reliability, consider checking against the file's [magic-numbers](https://en.wikipedia.org/wiki/Magic_number_%28programming%29)
  *
  * @see [File Validators](https://docs.nestjs.com/techniques/file-upload#validators)
  *
@@ -20,7 +24,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
         if (!file.mimetype) {
             return false;
         }
-        return file.mimetype.endsWith(this.validationOptions.fileType);
+        return Boolean(file.mimetype.match(this.validationOptions.fileType));
     }
 }
 exports.FileTypeValidator = FileTypeValidator;

package/services/console-logger.service.js

@@ -119,8 +119,8 @@ let ConsoleLogger = ConsoleLogger_1 = class ConsoleLogger {
             const contextMessage = context ? (0, cli_colors_util_1.yellow)(`[${context}] `) : '';
             const timestampDiff = this.updateAndGetTimestampDiff();
             const formattedLogLevel = logLevel.toUpperCase().padStart(7, ' ');
-            const formatedMessage = this.formatMessage(logLevel, message, pidMessage, formattedLogLevel, contextMessage, timestampDiff);
-            process[writeStreamType !== null && writeStreamType !== void 0 ? writeStreamType : 'stdout'].write(formatedMessage);
+            const formattedMessage = this.formatMessage(logLevel, message, pidMessage, formattedLogLevel, contextMessage, timestampDiff);
+            process[writeStreamType !== null && writeStreamType !== void 0 ? writeStreamType : 'stdout'].write(formattedMessage);
         });
     }
     formatPid(pid) {

package/services/logger.service.js

@@ -122,7 +122,7 @@ let Logger = Logger_1 = class Logger {
         }
         if ((0, shared_utils_1.isObject)(logger)) {
             if (logger instanceof Logger_1 && logger.constructor !== Logger_1) {
-                const errorMessage = `Using the "extends Logger" instruction is not allowed in Nest v8. Please, use "extends ConsoleLogger" instead.`;
+                const errorMessage = `Using the "extends Logger" instruction is not allowed in Nest v9. Please, use "extends ConsoleLogger" instead.`;
                 this.staticInstanceRef.error(errorMessage);
                 throw new Error(errorMessage);
             }