@riocrypto/common-server 1.0.1909 → 1.0.1910

package/build/helpers/send-with-xss-guard.js

@@ -5,30 +5,23 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sendWithXSSGuard = void 0;
 const xss_1 = __importDefault(require("xss"));
+const lodash_1 = __importDefault(require("lodash"));
 function sendWithXSSGuard(res, data, statusCode) {
-    const sanitize = (input, depth = 0) => {
-        const MAX_DEPTH = 1000;
-        if (depth > MAX_DEPTH) {
-            throw new Error("Maximum recursion depth exceeded");
+    const seen = new WeakSet();
+    const sanitizedData = lodash_1.default.cloneDeepWith(data, (value) => {
+        if (typeof value === "string") {
+            return (0, xss_1.default)(value);
         }
-        if (typeof input === "string") {
-            return (0, xss_1.default)(input);
-        }
-        else if (Array.isArray(input)) {
-            return input.map((item) => sanitize(item, depth + 1));
-        }
-        else if (typeof input === "object" && input !== null) {
-            const sanitizedObject = {};
-            for (const key in input) {
-                if (Object.prototype.hasOwnProperty.call(input, key)) {
-                    sanitizedObject[key] = sanitize(input[key], depth + 1);
-                }
+        if (typeof value === "object" && value !== null) {
+            if (seen.has(value)) {
+                // Handle circular references by returning the already processed object
+                return value;
             }
-            return sanitizedObject;
+            seen.add(value);
         }
-        return input;
-    };
-    const sanitizedData = sanitize(data);
+        // Returning undefined tells lodash to handle cloning this value
+        return undefined;
+    });
     res.status(statusCode).send(sanitizedData);
 }
 exports.sendWithXSSGuard = sendWithXSSGuard;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.1909",
+  "version": "1.0.1910",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -19,6 +19,7 @@
     "@types/csurf": "^1.11.5",
     "@types/he": "^1.2.0",
     "@types/jsonwebtoken": "^8.5.8",
+    "@types/lodash": "^4.17.12",
     "@types/uuid": "^9.0.1",
     "del-cli": "^5.0.0",
     "typescript": "^4.7.4"
@@ -38,6 +39,7 @@
     "googleapis": "^135.1.0",
     "he": "^1.2.0",
     "jsonwebtoken": "^9.0.1",
+    "lodash": "^4.17.21",
     "mongoose": "^8.0.0",
     "node-cache": "^5.1.2",
     "uuid": "^9.0.0",