@tinyhttp/jsonp 2.0.20 → 2.0.22

package/dist/index.js

@@ -1,49 +1,39 @@
 function stringify(value, replacer, spaces, escape) {
-    let json = replacer || spaces ? JSON.stringify(value, replacer, spaces) : JSON.stringify(value);
-    if (escape) {
-        json = json.replace(/[<>&]/g, (c) => {
-            switch (c.charCodeAt(0)) {
-                case 0x3c:
-                    return '\\u003c';
-                case 0x3e:
-                    return '\\u003e';
-                case 0x26:
-                    return '\\u0026';
-                default:
-                    return c;
-            }
-        });
-    }
-    return json;
+  let json = replacer || spaces ? JSON.stringify(value, replacer, spaces) : JSON.stringify(value);
+  if (escape) {
+    json = json.replace(/[<>&]/g, (c) => {
+      switch (c.charCodeAt(0)) {
+        case 60:
+          return "\\u003c";
+        case 62:
+          return "\\u003e";
+        case 38:
+          return "\\u0026";
+        default:
+          return c;
+      }
+    });
+  }
+  return json;
 }
-/**
- * Send JSON response with JSONP callback support
- * @param req Request
- * @param res Response
- * @param app App
- */
 const jsonp = (req, res) => (obj, opts = {}) => {
-    const val = obj;
-    const { escape, replacer, spaces, callbackName = 'callback' } = opts;
-    let body = stringify(val, replacer, spaces, escape);
-    let callback = req.query[callbackName];
-    if (!res.get('Content-Type')) {
-        res.set('X-Content-Type-Options', 'nosniff');
-        res.set('Content-Type', 'application/json');
-    }
-    // jsonp
-    if (typeof callback === 'string' && callback.length !== 0) {
-        res.set('X-Content-Type-Options', 'nosniff');
-        res.set('Content-Type', 'text/javascript');
-        // restrict callback charset
-        callback = callback.replace(/[^[\]\w$.]/g, '');
-        // replace chars not allowed in JavaScript that are in JSON
-        body = body.replace(/\u2028/g, '\\u2028').replace(/\u2029/g, '\\u2029');
-        // the /**/ is a specific security mitigation for "Rosetta Flash JSONP abuse"
-        // the typeof check is just to reduce client error noise
-        body = `/**/ typeof ${callback} === 'function' && ${callback}(${body});`;
-    }
-    return res.send(body);
+  const val = obj;
+  const { escape, replacer, spaces, callbackName = "callback" } = opts;
+  let body = stringify(val, replacer, spaces, escape);
+  let callback = req.query[callbackName];
+  if (!res.get("Content-Type")) {
+    res.set("X-Content-Type-Options", "nosniff");
+    res.set("Content-Type", "application/json");
+  }
+  if (typeof callback === "string" && callback.length !== 0) {
+    res.set("X-Content-Type-Options", "nosniff");
+    res.set("Content-Type", "text/javascript");
+    callback = callback.replace(/[^[\]\w$.]/g, "");
+    body = body.replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+    body = `/**/ typeof ${callback} === 'function' && ${callback}(${body});`;
+  }
+  return res.send(body);
+};
+export {
+  jsonp
 };
-
-export { jsonp };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinyhttp/jsonp",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "type": "module",
   "description": "JSONP response middleware",
   "homepage": "https://tinyhttp.v1rtl.site",
@@ -25,9 +25,11 @@
   "author": "v1rtl",
   "license": "MIT",
   "dependencies": {
-    "@tinyhttp/app": "2.0.21"
+    "@tinyhttp/app": "2.0.23"
   },
   "scripts": {
-    "build": "rollup -c ../../build/defaultConfig.js"
+    "dev": "vite",
+    "build": "vite build",
+    "postbuild": "tsc --emitDeclarationOnly"
   }
 }

package/vite.config.ts

@@ -0,0 +1,4 @@
+import { build } from '../../config/build'
+import { dependencies } from './package.json'
+
+export default build(dependencies)