fulmine.js 5.19.5 → 5.19.6

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "fulmine.js",
-    "version": "5.19.5",
+    "version": "5.19.6",
     "description": "Drop-in Express 5 replacement on uWebSockets.js. Your existing middleware keeps working.",
     "main": "src/index.js",
     "exports": {

package/src/middlewares.js

@@ -1082,8 +1082,11 @@ function createBodyParser(defaultType, beforeReturn, checkOptions, charsetPolicy
                 return beforeReturn(req, res, next, options, empty, encoding);
             }
 
-            // skip reading too large body; NaN compares false, so no declared length passes
-            if (lengthNumber > limit) {
+            // skip reading too large body; NaN compares false, so no declared length passes.
+            // Not while inflating: content-length counts the compressed bytes and the limit is
+            // about the ones that come out, which body-parser says by leaving the length unset.
+            // The limit is still enforced per chunk as they inflate, see keepChunk
+            if (!inflate && lengthNumber > limit) {
                 return next(
                     bodyError("request entity too large", 413, "entity.too.large", {
                         expected: lengthNumber,

package/src/response.js

@@ -76,6 +76,12 @@ function invalidChunkError(chunk) {
         `The "chunk" argument must be of type string or an instance of Buffer or Uint8Array. Received ${received}`
     );
     err.code = "ERR_INVALID_ARG_TYPE";
+    // node stamps the code into the stack's first line and then puts the name back, so err.name
+    // reads TypeError while the error page, which prints the stack, shows the bracketed form
+    err.name = "TypeError [ERR_INVALID_ARG_TYPE]";
+    void err.stack;
+    // through the index signature: name is not optional on Error, so a plain delete is a type error
+    delete (/** @type {Record<string, unknown>} */ (/** @type {unknown} */ (err)).name);
     return err;
 }
 const { sign } = require("cookie-signature");
@@ -842,6 +848,25 @@ module.exports = class Response extends LazyWritable {
      * @returns {this}
      */
     send(body) {
+        // undefined means nothing was passed, and Express treats that differently from a value
+        // that happens to be empty: no content-type and no ETag for send(), both for send(null)
+        // and send(""). It writes no header for it either, so it does not refuse a head that has
+        // gone out: after a res.write(), express answers this and we hung up on it.
+        if (body === undefined) {
+            if (!this.headersSent) {
+                // freshness and the bodiless statuses, as every express send goes through: a 204
+                // answered with json(undefined) loses the type json had set
+                if (this.req.fresh) {
+                    this.status(304);
+                }
+                if (this.statusCode === 204 || this.statusCode === 304) {
+                    delete this.headers["content-type"];
+                    delete this.headers["content-length"];
+                    delete this.headers["transfer-encoding"];
+                }
+            }
+            return this.end("");
+        }
         if (this.headersSent) {
             // what express's send meets first once the head is out is setHeader's refusal
             throw headersSentError("set");
@@ -854,22 +879,6 @@ module.exports = class Response extends LazyWritable {
             body = Buffer.from(body.buffer, body.byteOffset, body.byteLength);
         }
         const isBuffer = Buffer.isBuffer(body);
-        // undefined means nothing was passed, and Express treats that differently from a value
-        // that happens to be empty: no content-type and no ETag for send(), both for send(null)
-        // and send("").
-        if (body === undefined) {
-            // still through freshness and the bodiless statuses, as every express send is: a 204
-            // answered with json(undefined) loses the type json had set
-            if (this.req.fresh) {
-                this.status(304);
-            }
-            if (this.statusCode === 204 || this.statusCode === 304) {
-                delete this.headers["content-type"];
-                delete this.headers["content-length"];
-                delete this.headers["transfer-encoding"];
-            }
-            return this.end("");
-        }
         // null is an object as far as Express's switch is concerned, so it becomes the empty
         // string without ever reaching the branch that gives a string its content-type. It still
         // earns an ETag. send("") takes the string branch and does get one.