@nestjs/platform-ws 11.2.5 → 11.2.7

package/adapters/ws-adapter.js

@@ -78,12 +78,31 @@ class WsAdapter extends websockets_1.AbstractWsAdapter {
         const handlersMap = new Map();
         handlers.forEach(handler => handlersMap.set(handler.message, handler));
         const close$ = (0, rxjs_1.fromEvent)(client, constants_1.CLOSE_EVENT).pipe((0, operators_1.share)(), (0, operators_1.first)());
-        const source$ = (0, rxjs_1.fromEvent)(client, 'message').pipe((0, operators_1.mergeMap)(data => this.bindMessageHandler(data, handlersMap, transform).pipe((0, operators_1.filter)(result => !(0, shared_utils_1.isNil)(result)))), (0, operators_1.takeUntil)(close$));
+        const source$ = (0, rxjs_1.fromEvent)(client, 'message').pipe((0, operators_1.mergeMap)(data => this.bindMessageHandler(data, handlersMap, transform).pipe((0, operators_1.filter)(result => !(0, shared_utils_1.isNil)(result)), 
+        // a handler that rejects through an error filter that rethrows
+        // would error the client's stream and silence every later message;
+        // that rethrow is an app bug, so it gets logged, not dropped silently
+        (0, operators_1.catchError)(err => {
+            this.logger.error(err);
+            return rxjs_1.EMPTY;
+        }))), (0, operators_1.takeUntil)(close$));
         const onMessage = (response) => {
             if (client.readyState !== READY_STATE.OPEN_STATE) {
                 return;
             }
-            client.send(JSON.stringify(response));
+            // JSON.stringify throws on circular structures and BigInts, and on
+            // client-controlled payloads nested deep enough to overflow its native
+            // recursion (JSON.parse accepts any depth). A throw here escapes the
+            // subscriber, which RxJS rethrows asynchronously, killing the process.
+            let payload;
+            try {
+                payload = JSON.stringify(response);
+            }
+            catch (err) {
+                this.logger.error(err);
+                return;
+            }
+            client.send(payload);
         };
         source$.subscribe(onMessage);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nestjs/platform-ws",
-  "version": "11.2.5",
+  "version": "11.2.7",
   "description": "Nest - modern, fast, powerful node.js web framework (@platform-ws)",
   "author": "Kamil Mysliwiec",
   "license": "MIT",
@@ -26,5 +26,5 @@
     "@nestjs/websockets": "^11.0.0",
     "rxjs": "^7.1.0"
   },
-  "gitHead": "e91618ceec8b2e8fb30ac6277bec07719fdf0f37"
+  "gitHead": "c666d7f72201f02cd241030d815abf72dbf49b15"
 }