axios 0.32.0 → 0.33.0

package/lib/adapters/http.js

@@ -373,9 +373,10 @@ module.exports = function httpAdapter(config) {
 
     // HTTP basic authentication
     var auth = undefined;
-    if (config.auth) {
-      var username = config.auth.username || '';
-      var password = config.auth.password || '';
+    var configAuth = utils.hasOwnProperty(config, 'auth') ? config.auth : undefined;
+    if (configAuth) {
+      var username = utils.hasOwnProperty(configAuth, 'username') ? configAuth.username || '' : '';
+      var password = utils.hasOwnProperty(configAuth, 'password') ? configAuth.password || '' : '';
       auth = username + ':' + password;
     }
 
@@ -390,8 +391,10 @@ module.exports = function httpAdapter(config) {
       delete headers[headerNames.authorization];
     }
 
+    var paramsSerializer = utils.hasOwnProperty(config, 'paramsSerializer') ? config.paramsSerializer : undefined;
+
     try {
-      buildURL(parsed.path, config.params, config.paramsSerializer).replace(
+      buildURL(parsed.path, config.params, paramsSerializer).replace(
         /^\?/,
         ''
       );
@@ -407,7 +410,7 @@ module.exports = function httpAdapter(config) {
       path: buildURL(
         parsed.path,
         config.params,
-        config.paramsSerializer
+        paramsSerializer
       ).replace(/^\?/, ''),
       method: method,
       headers: headers,
@@ -428,9 +431,10 @@ module.exports = function httpAdapter(config) {
     } else {
       options.hostname = parsed.hostname;
       options.port = parsed.port;
+      var configProxy = utils.hasOwnProperty(config, 'proxy') ? config.proxy : undefined;
       setProxy(
         options,
-        config.proxy,
+        configProxy,
         protocol + '//' + parsed.host + options.path
       );
     }

package/lib/adapters/xhr.js

@@ -40,10 +40,11 @@ module.exports = function xhrAdapter(config) {
     var request = new XMLHttpRequest();
 
     // HTTP basic authentication
-    if (config.auth) {
-      var username = config.auth.username || '';
-      var password = config.auth.password
-        ? unescape(encodeURIComponent(config.auth.password))
+    var configAuth = utils.hasOwnProperty(config, 'auth') ? config.auth : undefined;
+    if (configAuth) {
+      var username = utils.hasOwnProperty(configAuth, 'username') ? configAuth.username || '' : '';
+      var password = utils.hasOwnProperty(configAuth, 'password') && configAuth.password
+        ? unescape(encodeURIComponent(configAuth.password))
         : '';
       requestHeaders.Authorization = 'Basic ' + btoa(username + ':' + password);
     }
@@ -56,7 +57,11 @@ module.exports = function xhrAdapter(config) {
 
     request.open(
       config.method.toUpperCase(),
-      buildURL(fullPath, config.params, config.paramsSerializer),
+      buildURL(
+        fullPath,
+        config.params,
+        utils.hasOwnProperty(config, 'paramsSerializer') ? config.paramsSerializer : undefined
+      ),
       true
     );
 

package/lib/core/Axios.js

@@ -144,10 +144,12 @@ Axios.prototype.getUri = function getUri(config) {
 utils.forEach(['delete', 'get', 'head', 'options'], function forEachMethodNoData(method) {
   /*eslint func-names:0*/
   Axios.prototype[method] = function(url, config) {
-    return this.request(mergeConfig(config || {}, {
+    var requestConfig = config || {};
+
+    return this.request(mergeConfig(requestConfig, {
       method: method,
       url: url,
-      data: (config || {}).data
+      data: utils.hasOwnProperty(requestConfig, 'data') ? requestConfig.data : undefined
     }));
   };
 });

package/lib/env/data.js

@@ -1,3 +1,3 @@
 module.exports = {
-  "version": "0.32.0"
+  "version": "0.33.0"
 };

package/lib/helpers/buildURL.js

@@ -33,9 +33,17 @@ module.exports = function buildURL(url, params, options) {
     url = url.slice(0, hashmarkIndex);
   }
 
-  var _encode = options && options.encode || encode;
-
-  var serializeFn = options && options.serialize;
+  var _encode = encode;
+  var serializeFn;
+
+  if (options) {
+    if (utils.isFunction(options)) {
+      serializeFn = options;
+    } else {
+      _encode = utils.hasOwnProperty(options, 'encode') && options.encode || encode;
+      serializeFn = utils.hasOwnProperty(options, 'serialize') ? options.serialize : undefined;
+    }
+  }
 
   var serializedParams;
 

package/lib/helpers/formDataToJSON.js

@@ -1,6 +1,20 @@
 'use strict';
 
 var utils = require('../utils');
+var AxiosError = require('../core/AxiosError');
+
+var MAX_FORM_DATA_TO_JSON_DEPTH = 100;
+
+function assertPathDepth(path) {
+  var depth = path.length - 1;
+
+  if (depth > MAX_FORM_DATA_TO_JSON_DEPTH) {
+    throw new AxiosError(
+      'Maximum object depth of ' + MAX_FORM_DATA_TO_JSON_DEPTH + ' exceeded (got ' + depth + ' levels)',
+      AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED
+    );
+  }
+}
 
 function parsePropPath(name) {
   // foo[x][y][z]
@@ -62,7 +76,10 @@ function formDataToJSON(formData) {
     var obj = {};
 
     utils.forEachEntry(formData, function(name, value) {
-      buildPath(parsePropPath(name), value, obj, 0);
+      var path = parsePropPath(name);
+
+      assertPathDepth(path);
+      buildPath(path, value, obj, 0);
     });
 
     return obj;

package/lib/helpers/shouldBypassProxy.js

@@ -123,7 +123,7 @@ function isLoopbackIPv4(hostname) {
 }
 
 function isLoopbackHost(hostname) {
-  return hostname === 'localhost' || hostname === '::1' || isLoopbackIPv4(hostname);
+  return hostname === 'localhost' || hostname === '::1' || hostname === '0.0.0.0' || isLoopbackIPv4(hostname);
 }
 
 module.exports = function shouldBypassProxy(location) {

package/lib/helpers/toFormData.js

@@ -94,6 +94,29 @@ function toFormData(obj, formData, options) {
     return value;
   }
 
+  var stack = [];
+
+  function assertValueDepth(value, depth) {
+    if (depth > maxDepth) {
+      throw new AxiosError(
+        'Maximum object depth of ' + maxDepth + ' exceeded (got ' + depth + ' levels)',
+        AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED
+      );
+    }
+
+    if (!utils.isObject(value) || stack.indexOf(value) !== -1) {
+      return;
+    }
+
+    stack.push(value);
+
+    utils.forEach(value, function each(el) {
+      assertValueDepth(el, depth + 1);
+    });
+
+    stack.pop();
+  }
+
   /**
    *
    * @param {*} value
@@ -109,6 +132,7 @@ function toFormData(obj, formData, options) {
       if (utils.endsWith(key, '{}')) {
         // eslint-disable-next-line no-param-reassign
         key = metaTokens ? key : key.slice(0, -2);
+        assertValueDepth(value, 1);
         // eslint-disable-next-line no-param-reassign
         value = JSON.stringify(value);
       } else if (
@@ -138,8 +162,6 @@ function toFormData(obj, formData, options) {
     return false;
   }
 
-  var stack = [];
-
   var exposedHelpers = Object.assign(predicates, {
     defaultVisitor: defaultVisitor,
     convertValue: convertValue,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axios",
-  "version": "0.32.0",
+  "version": "0.33.0",
   "description": "Promise based HTTP client for the browser and node.js",
   "main": "index.js",
   "types": "index.d.ts",