@stacksjs/router 0.72.86 → 0.72.89

package/dist/path-sanitize.js

@@ -1 +1 @@
-export class PathParamError extends Error{reason;constructor(reason,value,context){const ctx=context?` in ${context}`:"";super(`[router] Refusing to use ${JSON.stringify(value)} as a path parameter${ctx} - ${reason}`);this.name="PathParamError";this.reason=reason}}const CONTROL_CHARS=/[\u0000-\u001F\u007F]/;export function sanitizePathParam(value,options={}){if(typeof value!=="string")throw new PathParamError("not-string",value,options.context);if(value.length===0)throw new PathParamError("empty",value,options.context);const maxLength=options.maxLength??255;if(value.length>maxLength)throw new PathParamError("too-long",value,options.context);if(value.includes("\x00"))throw new PathParamError("null-byte",value,options.context);if(CONTROL_CHARS.test(value))throw new PathParamError("control-char",value,options.context);if(value.startsWith("/")||/^[A-Z]:[\\/]/i.test(value))throw new PathParamError("absolute-path",value,options.context);if(/(^|[\\/])\.\.([\\/]|$)/.test(value))throw new PathParamError("traversal",value,options.context);if(!options.allowSlashes&&/[\\/]/.test(value))throw new PathParamError("traversal",value,options.context);return value}export function safePathParam(value,options={}){try{return sanitizePathParam(value,options)}catch{return null}}
+export class PathParamError extends Error{reason;constructor(reason,value,context){const ctx=context?` in ${context}`:"";super(`[router] Refusing to use ${JSON.stringify(value)} as a path parameter${ctx} - ${reason}`);this.name="PathParamError";this.reason=reason}}const CONTROL_CHARS=/[\x00-\x1F\x7F]/;export function sanitizePathParam(value,options={}){if(typeof value!=="string")throw new PathParamError("not-string",value,options.context);if(value.length===0)throw new PathParamError("empty",value,options.context);const maxLength=options.maxLength??255;if(value.length>maxLength)throw new PathParamError("too-long",value,options.context);if(value.includes("\x00"))throw new PathParamError("null-byte",value,options.context);if(CONTROL_CHARS.test(value))throw new PathParamError("control-char",value,options.context);if(value.startsWith("/")||/^[A-Z]:[\\/]/i.test(value))throw new PathParamError("absolute-path",value,options.context);if(/(^|[\\/])\.\.([\\/]|$)/.test(value))throw new PathParamError("traversal",value,options.context);if(!options.allowSlashes&&/[\\/]/.test(value))throw new PathParamError("traversal",value,options.context);return value}export function safePathParam(value,options={}){try{return sanitizePathParam(value,options)}catch{return null}}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/router",
   "type": "module",
   "sideEffects": false,
-  "version": "0.72.86",
+  "version": "0.72.89",
   "description": "The Stacks framework router.",
   "author": "Chris Breuer",
   "contributors": [
@@ -61,19 +61,19 @@
   },
   "dependencies": {
     "@stacksjs/bun-router": "^0.1.8",
-    "@stacksjs/collections": "0.72.86",
+    "@stacksjs/collections": "0.72.89",
     "ts-rate-limiter": "^0.4.2"
   },
   "devDependencies": {
-    "@stacksjs/actions": "0.72.86",
-    "@stacksjs/config": "0.72.86",
+    "@stacksjs/actions": "0.72.89",
+    "@stacksjs/config": "0.72.89",
     "better-dx": "^0.2.24",
-    "@stacksjs/error-handling": "0.72.86",
-    "@stacksjs/logging": "0.72.86",
-    "@stacksjs/orm": "0.72.86",
-    "@stacksjs/path": "0.72.86",
-    "@stacksjs/storage": "0.72.86",
-    "@stacksjs/types": "0.72.86",
-    "@stacksjs/validation": "0.72.86"
+    "@stacksjs/error-handling": "0.72.89",
+    "@stacksjs/logging": "0.72.89",
+    "@stacksjs/orm": "0.72.89",
+    "@stacksjs/path": "0.72.89",
+    "@stacksjs/storage": "0.72.89",
+    "@stacksjs/types": "0.72.89",
+    "@stacksjs/validation": "0.72.89"
   }
 }