chanjs 2.8.11 → 2.8.13

package/README.md

@@ -21,7 +21,7 @@
 ### 核心架构
 
 - 原生基于 Express 5+ mysql/pgsql/sqlite 三款数据库支持
-- 最低运行环境 Node.js 22.18+
+- 最低运行环境 Node.js 22.23.4+
 - 全量 ES Modules（import / export）
 - **标准 HMVC 架构：模块自治 + 双通道跨模块协作**
 - 约定优于配置，减少样板配置代码

package/core/Repository.js

@@ -92,7 +92,7 @@ function mapUrlFilters(query, fieldMap) {
   const filter = {};
   for (const [key, map] of Object.entries(fieldMap || {})) {
     const raw = query?.[key];
-    if (raw === undefined || raw === null || String(raw).trim() === "") continue;
+    if (raw == null || String(raw).trim() === "") continue;
     let piece;
     try {
       piece = map(String(raw).trim());

package/core/errors.js

@@ -50,7 +50,7 @@ export class AppError extends Error {
     const json = { name: this.name, message: this.message, code: this.code, httpStatus: this.httpStatus };
     for (const key of Object.getOwnPropertyNames(this)) {
       const val = this[key];
-      if (val === undefined || val === null) continue;
+      if (val == null) continue;
       if (typeof val === 'function' || typeof val === 'symbol') continue;
       json[key] = val;
     }

package/middleware/template.js

@@ -3,8 +3,6 @@ import dayjs from "dayjs";
 import { createRequire } from "module";
 import relativeTime from "dayjs/plugin/relativeTime.js";
 import "dayjs/locale/zh-cn.js";
-import { marked } from "marked";
-import { filterXSS } from "../security/xss-filter.js";
 import logger from "../utils/logger.js";
 
 const require = createRequire(import.meta.url);
@@ -74,37 +72,6 @@ artTemplate.defaults.imports.safeStringify = (obj, keys) => {
 artTemplate.defaults.imports.objKeys = (obj, separator = "\n") =>
   typeof obj === "object" && obj ? Object.keys(obj).join(separator) : "";
 
-/**
- * Markdown渲染 + XSS过滤
- * @param {string} content
- * @param {"md"|"rich"} [editorType="rich"]
- * @param {0|1} [allowScript=0] 1=信任内容不做XSS过滤
- * @returns {string}
- */
-artTemplate.defaults.imports.renderContent = (content, editorType = "rich", allowScript = 0) => {
-  if (typeof content !== "string") return content || "";
-  let html = content;
-
-  if (editorType === "md") {
-    try {
-      // marked v4+ 支持异步扩展，返回 string | Promise<string>
-      // 同步场景下直接取结果；若返回 Promise 则降级为空字符串
-      const result = marked.parse(content);
-      html = typeof result === "string" ? result : "";
-    } catch (e) {
-      logger.error(`[renderContent] MD解析失败: ${e.message}`);
-    }
-  }
-
-  if (Number(allowScript) !== 1) {
-    try { html = filterXSS(html); }
-    catch (e) {
-      logger.error(`[renderContent] XSS过滤失败: ${e.message}`);
-    }
-  }
-  return html;
-};
-
 /**
  * art-template模板引擎中间件
  * @param {express.Application} app

package/package.json

@@ -1,7 +1,7 @@
 {
   "type": "module",
   "name": "chanjs",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "chanjs基于 Node.js + Express 5 的标准 HMVC 框架（NHMVC），纯 JavaScript（ESM）开发。",
   "main": "index.js",
   "module": "index.js",
@@ -14,7 +14,7 @@
     "nodejs mvc"
   ],
   "engines": {
-    "node": ">=22.18.0"
+    "node": ">=24.22.1"
   },
   "scripts": {
     "test": "node --test"
@@ -37,29 +37,28 @@
     "art-template": "^4.13.4",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.6",
-    "dayjs": "^1.11.20",
-    "dotenv": "^17.4.2",
-    "express": "^5.2.1",
+    "dayjs": "^1.11.23",
+    "dotenv": "^18.0.9",
+    "express": "^5.3.0",
     "express-art-template": "^1.0.1",
-    "i18next": "^24.2.0",
-    "ioredis": "^5.4.6",
+    "i18next": "^26.5.11",
+    "ioredis": "^6.0.0",
     "jsonwebtoken": "^9.0.3",
-    "knex": "^3.2.10",
-    "marked": "^18.0.3",
-    "mysql2": "^3.22.3",
-    "node-cron": "^3.0.3",
-    "pg": "^8.23.0",
-    "pino": "^9.5.0",
-    "pino-http": "^10.3.0",
-    "pino-pretty": "^13.1.3",
+    "knex": "^3.3.0",
+    "mysql2": "^3.24.6",
+    "node-cron": "^4.6.0",
+    "pg": "^8.23.1",
+    "pino": "^10.4.0",
+    "pino-http": "^11.0.0",
+    "pino-pretty": "^13.2.0",
     "serve-favicon": "^2.5.1",
-    "xss": "^1.0.15"
+    "xss": "^1.0.17"
   },
   "devDependencies": {
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
   },
   "peerDependencies": {
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
   },
   "peerDependenciesMeta": {
     "zod": {

package/response/response.js

@@ -38,7 +38,7 @@ export function serializeError(err, exposeDetail = false) {
       if (NEVER_EXPOSE.has(key)) continue;
       if (SENSITIVE.has(key) && !exposeDetail) continue; // 生产环境不泄露堆栈/根因(SQL)
       const val = err[key];
-      if (val === undefined || val === null) continue;
+      if (val == null) continue;
       if (typeof val === "function" || typeof val === "symbol") continue;
       try { extra[key] = val && typeof val === "object" && !Array.isArray(val) ? JSON.stringify(val) : val; }
       catch { extra[key] = "[unserializable]"; }

package/utils/pages.js

@@ -48,7 +48,7 @@ export function pageHtml({ baseUrl, query, total, pageSize = 10, current = 1, un
 
   const base = new URLSearchParams();
   Object.entries(query || {}).forEach(([k, v]) => {
-    if (k === "current" || v === undefined || v === null || v === "") return;
+    if (k === "current" || v == null || v === "") return;
     base.set(k, v);
   });
   const link = (n) => {
@@ -116,8 +116,9 @@ export function pages(current, total, pageSize, href, query = '') {
     items.push(ellipsis(), pageLink(totalPage));
   }
 
-  // 下一页
-  items.push(navLink(current + 1, "下一页"));
+  // 下一页（最后一页不再给链接：current+1 恒为真值，不判断 totalPage 会渲染出越界页码，
+  // 点进去是空列表 —— 与 query 式 pageHtml() 的 current < totalPage 判断对齐）
+  items.push(navLink(current < totalPage ? current + 1 : 0, "下一页"));
 
   return items.join("");
 }