axios 0.30.1 → 0.30.3

package/lib/helpers/estimateDataURLDecodedBytes.js

@@ -0,0 +1,79 @@
+'use strict';
+
+/**
+ * Estimate decoded byte length of a data:// URL *without* allocating large buffers.
+ * - For base64: compute exact decoded size using length and padding;
+ *               handle %XX at the character-count level (no string allocation).
+ * - For non-base64: use UTF-8 byteLength of the encoded body as a safe upper bound.
+ *
+ * @param {string} url
+ * @returns {number}
+ */
+function estimateDataURLDecodedBytes(url) {
+  if (!url || typeof url !== 'string') return 0;
+  if (!url.startsWith('data:')) return 0;
+
+  var comma = url.indexOf(',');
+  if (comma < 0) return 0;
+
+  var meta = url.slice(5, comma);
+  var body = url.slice(comma + 1);
+  var isBase64 = /;base64/i.test(meta);
+
+  if (isBase64) {
+    var effectiveLen = body.length;
+    var len = body.length; // cache length
+
+    for (var i = 0; i < len; i++) {
+      if (body.charCodeAt(i) === 37 /* '%' */ && i + 2 < len) {
+        var a = body.charCodeAt(i + 1);
+        var b = body.charCodeAt(i + 2);
+        var isHex =
+          ((a >= 48 && a <= 57) || (a >= 65 && a <= 70) || (a >= 97 && a <= 102)) &&
+          ((b >= 48 && b <= 57) || (b >= 65 && b <= 70) || (b >= 97 && b <= 102));
+
+        if (isHex) {
+          effectiveLen -= 2;
+          i += 2;
+        }
+      }
+    }
+
+    var pad = 0;
+    var idx = len - 1;
+
+    // eslint-disable-next-line no-inner-declarations
+    function tailIsPct3D(j) {
+      return j >= 2 &&
+        body.charCodeAt(j - 2) === 37 && // '%'
+        body.charCodeAt(j - 1) === 51 && // '3'
+        (body.charCodeAt(j) === 68 || body.charCodeAt(j) === 100); // 'D' or 'd'
+    }
+
+    if (idx >= 0) {
+      if (body.charCodeAt(idx) === 61 /* '=' */) {
+        pad++;
+        idx--;
+      } else if (tailIsPct3D(idx)) {
+        pad++;
+        idx -= 3;
+      }
+    }
+
+    if (pad === 1 && idx >= 0) {
+      if (body.charCodeAt(idx) === 61 /* '=' */) {
+        pad++;
+      } else if (tailIsPct3D(idx)) {
+        pad++;
+      }
+    }
+
+    var groups = Math.floor(effectiveLen / 4);
+    var bytes = groups * 3 - (pad || 0);
+    return bytes > 0 ? bytes : 0;
+  }
+
+  return Buffer.byteLength(body, 'utf8');
+}
+
+module.exports = estimateDataURLDecodedBytes;

package/lib/utils.js

@@ -310,6 +310,10 @@ function forEach(obj, fn) {
 function merge(/* obj1, obj2, obj3, ... */) {
   var result = {};
   function assignValue(val, key) {
+    if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+      return;
+    }
+
     if (isPlainObject(result[key]) && isPlainObject(val)) {
       result[key] = merge(result[key], val);
     } else if (isPlainObject(val)) {

package/mise.toml

@@ -0,0 +1,2 @@
+[tools]
+node = "20"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axios",
-  "version": "0.30.1",
+  "version": "0.30.3",
   "description": "Promise based HTTP client for the browser and node.js",
   "main": "index.js",
   "types": "index.d.ts",
@@ -15,7 +15,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/axios/axios.git"
+    "url": "https://github.com/axios/axios.git"
   },
   "keywords": [
     "xhr",
@@ -40,7 +40,7 @@
     "body-parser": "^1.20.0",
     "coveralls": "^3.1.1",
     "cross-env": "^7.0.3",
-    "dtslint": "^4.2.1",
+    "dtslint": "4.2.1",
     "es6-promise": "^4.2.8",
     "express": "^4.18.1",
     "formidable": "^2.0.1",