@oino-ts/blob 1.0.5 → 1.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oino-ts/blob",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "OINO TS library package for publishing blob storage as a REST API.",
   "author": "Matias Kiviniemi (pragmatta)",
   "license": "MPL-2.0",
@@ -19,13 +19,13 @@
   "module": "./dist/esm/index.js",
   "types": "./dist/types/index.d.ts",
   "dependencies": {
-    "@oino-ts/common": "1.0.5",
+    "@oino-ts/common": "1.0.6",
     "oino-ts": "file:.."
   },
   "devDependencies": {
-    "@oino-ts/types": "1.0.5",
+    "@oino-ts/types": "1.0.6",
     "@types/bun": "^1.1.14",
-    "@types/node": "^21.0.50",
+    "@types/node": "^21.0.60",
     "typescript": "~5.9.0"
   },
   "files": [

package/src/OINOBlob.ts

@@ -11,6 +11,8 @@ const BLOB_LIKE_ESCAPE_REGEX = /[.*+?^${}()|[\]\\]/g
 const BLOB_LIKE_PERCENT_REGEX = /%/g
 const BLOB_LIKE_UNDERSCORE_REGEX = /_/g
 
+const BLOB_SANITIZE_DEFAULT_REGEX = /[\x00-\x1f\x7f]/g
+
 /**
  * Abstract base class for blob storage backends.  Subclasses implement
  * the two core operations (`listEntries` and `fetchEntry`) for a specific
@@ -62,6 +64,22 @@ export abstract class OINOBlob extends OINODataSource {
         return v
     }
 
+    // ── Blob name sanitization ──────────────────────────────────────────────
+
+    /**
+     * Sanitize a blob name by replacing characters that are illegal or unsafe
+     * on this storage backend with `_`.
+     *
+     * The base implementation strips ASCII control characters (U+0000–U+001F
+     * and U+007F).  Subclasses should override to apply additional
+     * platform-specific rules.
+     *
+     * @param name raw blob name (path within the container)
+     */
+    sanitizeName(name: string): string {
+        return name.replace(BLOB_SANITIZE_DEFAULT_REGEX, "_")
+    }
+
     // ── Blob-specific filter helper ───────────────────────────────────────
 
     /**

package/src/OINOBlobApi.test.ts

@@ -286,6 +286,7 @@ export async function OINOTestBlob(storageParams: OINOBlobStorageParams, testPar
         expect(verify_result.success).toBe(true)
         expect(verify_result.blobData).toBeDefined()
         expect(new TextDecoder().decode(verify_result.blobData)).toBe(new TextDecoder().decode(testParams.uploadContent))
+        expect(verify_result.blobDataType).toBe(testParams.uploadContentType)
     })
 
     // ── UPDATE (PUT) ──────────────────────────────────────────────────────
@@ -326,6 +327,7 @@ export async function OINOTestBlob(storageParams: OINOBlobStorageParams, testPar
         const verify_result: OINOBlobApiResult = await api.doApiRequest(verify_request)
         expect(verify_result.success).toBe(true)
         expect(new TextDecoder().decode(verify_result.blobData)).toBe(new TextDecoder().decode(testParams.updateContent))
+        expect(verify_result.blobDataType).toBe(testParams.uploadContentType)
     })
 
     // ── DELETE ────────────────────────────────────────────────────────────

package/src/OINOBlobApi.ts

@@ -126,7 +126,7 @@ export class OINOBlobApi extends OINOApi {
             } else {
                 // ── Download blob ────────────────────────────────────────────
                 try {
-                    const name = decodeURIComponent(request.rowId)
+                    const name = this.blob.sanitizeName(decodeURIComponent(request.rowId))
                     const fetch_result = await this.blob.fetchEntry(name)
                     result.blobData = fetch_result.content
                     result.blobDataType = fetch_result.contentType
@@ -142,7 +142,7 @@ export class OINOBlobApi extends OINOApi {
                 result.setError(400, "HTTP " + request.method + " method requires an URL ID (blob name)!", "DoRequest")
             } else {
                 try {
-                    const name = decodeURIComponent(request.rowId)
+                    const name = this.blob.sanitizeName(decodeURIComponent(request.rowId))
                     const content_type = request.headers.get("content-type") ?? "application/octet-stream"
                     const data = request.rowData
                     const content: Uint8Array = data instanceof Uint8Array ? data : request.bodyAsBuffer()
@@ -159,7 +159,7 @@ export class OINOBlobApi extends OINOApi {
                 result.setError(400, "HTTP DELETE method requires an URL ID (blob name)!", "DoRequest")
             } else {
                 try {
-                    const name = decodeURIComponent(request.rowId)
+                    const name = this.blob.sanitizeName(decodeURIComponent(request.rowId))
                     await this.blob.deleteEntry(name)
                 } catch (e: any) {
                     result.setError(500, "Error deleting blob: " + e.message, "DoDelete")