@wooksjs/http-body 0.7.0 → 0.7.1

package/dist/index.cjs

@@ -30,15 +30,22 @@ const ILLEGAL_KEYS = [
 	"constructor",
 	"prototype"
 ];
-const illigalKeySet = new Set(ILLEGAL_KEYS);
 function safeJsonParse(src) {
-	return JSON.parse(src, (key, value) => {
-		assertKey(key);
-		return value;
-	});
+	const parsed = JSON.parse(src);
+	assertNoProtoKeys(parsed);
+	return parsed;
 }
-function assertKey(k) {
-	if (illigalKeySet.has(k)) throw new __wooksjs_event_http.HttpError(400, `Illegal key name "${k}"`);
+function assertNoProtoKeys(obj) {
+	if (obj === null || typeof obj !== "object") return;
+	if (Array.isArray(obj)) {
+		for (const item of obj) assertNoProtoKeys(item);
+		return;
+	}
+	const record = obj;
+	for (const key of Object.keys(record)) {
+		if (key === ILLEGAL_KEYS[0] || key === ILLEGAL_KEYS[1] || key === ILLEGAL_KEYS[2]) throw new __wooksjs_event_http.HttpError(400, `Illegal key name "${key}"`);
+		assertNoProtoKeys(record[key]);
+	}
 }
 
 //#endregion
@@ -137,20 +144,20 @@ function urlEncodedParser(v) {
 * @example
 * ```ts
 * app.post('/api/data', async () => {
-*   const { contentIs, parseBody } = useBody()
-*   if (contentIs('json')) {
+*   const { is, parseBody } = useBody()
+*   if (is('json')) {
 *     const data = await parseBody<{ name: string }>()
 *     return { received: data.name }
 *   }
 * })
 * ```
 *
-* @returns Object with `contentIs(type)` checker, `parseBody` function, and `rawBody` accessor.
+* @returns Object with `is(type)` checker, `parseBody` function, and `rawBody` accessor.
 */
 const useBody = (0, __wooksjs_event_core.defineWook)((ctx) => {
 	const { rawBody } = (0, __wooksjs_event_http.useRequest)(ctx);
 	return {
-		contentIs: (type) => contentIsSlot(type, ctx),
+		is: (type) => contentIsSlot(type, ctx),
 		parseBody: () => ctx.get(parsedBodySlot),
 		rawBody
 	};

package/dist/index.d.ts

@@ -8,18 +8,18 @@ type KnownContentType = 'json' | 'html' | 'xml' | 'text' | 'binary' | 'form-data
  * @example
  * ```ts
  * app.post('/api/data', async () => {
- *   const { contentIs, parseBody } = useBody()
- *   if (contentIs('json')) {
+ *   const { is, parseBody } = useBody()
+ *   if (is('json')) {
  *     const data = await parseBody<{ name: string }>()
  *     return { received: data.name }
  *   }
  * })
  * ```
  *
- * @returns Object with `contentIs(type)` checker, `parseBody` function, and `rawBody` accessor.
+ * @returns Object with `is(type)` checker, `parseBody` function, and `rawBody` accessor.
  */
 declare const useBody: (ctx?: EventContext) => {
-    contentIs: (type: KnownContentType | (string & {})) => boolean;
+    is: (type: KnownContentType | (string & {})) => boolean;
     parseBody: <T>() => Promise<T>;
     rawBody: () => Promise<Buffer<ArrayBufferLike>>;
 };

package/dist/index.mjs

@@ -7,15 +7,22 @@ const ILLEGAL_KEYS = [
 	"constructor",
 	"prototype"
 ];
-const illigalKeySet = new Set(ILLEGAL_KEYS);
 function safeJsonParse(src) {
-	return JSON.parse(src, (key, value) => {
-		assertKey(key);
-		return value;
-	});
+	const parsed = JSON.parse(src);
+	assertNoProtoKeys(parsed);
+	return parsed;
 }
-function assertKey(k) {
-	if (illigalKeySet.has(k)) throw new HttpError(400, `Illegal key name "${k}"`);
+function assertNoProtoKeys(obj) {
+	if (obj === null || typeof obj !== "object") return;
+	if (Array.isArray(obj)) {
+		for (const item of obj) assertNoProtoKeys(item);
+		return;
+	}
+	const record = obj;
+	for (const key of Object.keys(record)) {
+		if (key === ILLEGAL_KEYS[0] || key === ILLEGAL_KEYS[1] || key === ILLEGAL_KEYS[2]) throw new HttpError(400, `Illegal key name "${key}"`);
+		assertNoProtoKeys(record[key]);
+	}
 }
 
 //#endregion
@@ -114,20 +121,20 @@ function urlEncodedParser(v) {
 * @example
 * ```ts
 * app.post('/api/data', async () => {
-*   const { contentIs, parseBody } = useBody()
-*   if (contentIs('json')) {
+*   const { is, parseBody } = useBody()
+*   if (is('json')) {
 *     const data = await parseBody<{ name: string }>()
 *     return { received: data.name }
 *   }
 * })
 * ```
 *
-* @returns Object with `contentIs(type)` checker, `parseBody` function, and `rawBody` accessor.
+* @returns Object with `is(type)` checker, `parseBody` function, and `rawBody` accessor.
 */
 const useBody = defineWook((ctx) => {
 	const { rawBody } = useRequest(ctx);
 	return {
-		contentIs: (type) => contentIsSlot(type, ctx),
+		is: (type) => contentIsSlot(type, ctx),
 		parseBody: () => ctx.get(parsedBodySlot),
 		rawBody
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wooksjs/http-body",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "@wooksjs/http-body",
   "keywords": [
     "api",
@@ -42,12 +42,12 @@
   "devDependencies": {
     "typescript": "^5.9.3",
     "vitest": "^3.2.4",
-    "@wooksjs/event-core": "^0.7.0",
-    "@wooksjs/event-http": "^0.7.0"
+    "@wooksjs/event-core": "^0.7.1",
+    "@wooksjs/event-http": "^0.7.1"
   },
   "peerDependencies": {
-    "@wooksjs/event-core": "^0.7.0",
-    "@wooksjs/event-http": "^0.7.0"
+    "@wooksjs/event-core": "^0.7.1",
+    "@wooksjs/event-http": "^0.7.1"
   },
   "scripts": {
     "build": "rolldown -c ../../rolldown.config.mjs"