@opengis/fastify-table 1.1.116 → 1.1.117

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "1.1.116",
+  "version": "1.1.117",
   "type": "module",
   "description": "core-plugins",
   "main": "index.js",

package/server/plugins/policy/funcs/checkXSS.js

@@ -1,3 +1,4 @@
+import config from '../../../../config.js';
 import xssInjection from '../xssInjection.js';
 
 // RTE - rich text editor
@@ -11,9 +12,10 @@ function checkXSS({ body, schema = {} }) {
   if (stopSpecialSymbols?.length) stopSpecialSymbols?.forEach((el) => stopWords.push(el));
 
   // escape arrows on non-RTE
+  const skipScreening = config.skipScreening || ['Summernote', 'Tiny', 'Ace', 'Texteditor'];
   Object.keys(body)
     .filter((key) => ['<', '>'].find((el) => body[key]?.includes?.(el))
-  && !['Summernote', 'Tiny', 'Ace', 'Texteditor'].includes(schema?.[key]?.type))
+  && !skipScreening.includes(schema?.[key]?.type))
     ?.forEach((key) => {
       Object.assign(body, { [key]: body[key].replace(/</g, '&lt;').replace(/>/g, '&gt;') });
     });
@@ -25,7 +27,7 @@ function checkXSS({ body, schema = {} }) {
   const disabledCheckFields = Object.keys(schema || {})?.filter((el) => schema?.[el]?.xssCheck === false); // exclude specific columns
 
   // check RTE
-  /* const richTextFields = Object.keys(schema).filter((el) => ['Summernote', 'Tiny', 'Ace'].includes(schema[el]?.type));
+  /* const richTextFields = Object.keys(schema).filter((el) => skipScreening.includes(schema[el]?.type));
   richTextFields.filter((key) => !checkList.find((el) => body[key].includes(el)))?.forEach((key) => {
     disabledCheckFields.push(key);
   }); */