i18next-http-middleware 3.7.0 → 3.7.1

package/cjs/index.js

@@ -82,7 +82,7 @@ function handle(i18next) {
         res.locals.languageDir = i18next.dir(lng);
       }
       if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-        options.setHeader(res, 'Content-Language', lng);
+        options.setHeader(res, 'Content-Language', utils.escape(lng));
       }
       req.languages = i18next.services.languageUtils.toResolveHierarchy(lng);
       if (i18next.services.languageDetector) {
@@ -95,7 +95,7 @@ function handle(i18next) {
     }
     req.language = req.locale = req.lng = lng;
     if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-      options.setHeader(res, 'Content-Language', lng);
+      options.setHeader(res, 'Content-Language', utils.escape(lng));
     }
     req.languages = i18next.services.languageUtils.toResolveHierarchy(lng);
     i18n.changeLanguage(lng || i18next.options.fallbackLng[0]);

package/cjs/utils.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.defaults = defaults;
+exports.escape = escape;
 exports.extend = extend;
 exports.removeLngFromUrl = removeLngFromUrl;
 exports.setPath = setPath;
@@ -56,4 +57,7 @@ function removeLngFromUrl(url, lookupFromPathIndex) {
   url = parts.join('/');
   if (url[0] !== '/') url = first + url;
   return url;
+}
+function escape(str) {
+  return str.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/'/g, '&#x27;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\//g, '&#x2F;').replace(/\\/g, '&#x5C;').replace(/`/g, '&#96;');
 }

package/esm/index.js

@@ -65,7 +65,7 @@ export function handle(i18next) {
         res.locals.languageDir = i18next.dir(lng);
       }
       if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-        options.setHeader(res, 'Content-Language', lng);
+        options.setHeader(res, 'Content-Language', utils.escape(lng));
       }
       req.languages = i18next.services.languageUtils.toResolveHierarchy(lng);
       if (i18next.services.languageDetector) {
@@ -78,7 +78,7 @@ export function handle(i18next) {
     }
     req.language = req.locale = req.lng = lng;
     if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-      options.setHeader(res, 'Content-Language', lng);
+      options.setHeader(res, 'Content-Language', utils.escape(lng));
     }
     req.languages = i18next.services.languageUtils.toResolveHierarchy(lng);
     i18n.changeLanguage(lng || i18next.options.fallbackLng[0]);

package/esm/utils.js

@@ -47,4 +47,7 @@ export function removeLngFromUrl(url, lookupFromPathIndex) {
   url = parts.join('/');
   if (url[0] !== '/') url = first + url;
   return url;
+}
+export function escape(str) {
+  return str.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/'/g, '&#x27;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\//g, '&#x2F;').replace(/\\/g, '&#x5C;').replace(/`/g, '&#96;');
 }

package/lib/index.js

@@ -55,7 +55,7 @@ export function handle (i18next, options = {}) {
       }
 
       if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-        options.setHeader(res, 'Content-Language', lng)
+        options.setHeader(res, 'Content-Language', utils.escape(lng))
       }
 
       req.languages = i18next.services.languageUtils.toResolveHierarchy(lng)
@@ -73,7 +73,7 @@ export function handle (i18next, options = {}) {
     // set locale
     req.language = req.locale = req.lng = lng
     if (lng && options.getHeader(res, 'Content-Language') !== lng) {
-      options.setHeader(res, 'Content-Language', lng)
+      options.setHeader(res, 'Content-Language', utils.escape(lng))
     }
     req.languages = i18next.services.languageUtils.toResolveHierarchy(lng)
 

package/lib/utils.js

@@ -58,3 +58,14 @@ export function removeLngFromUrl (url, lookupFromPathIndex) {
 
   return url
 }
+
+export function escape (str) {
+  return (str.replace(/&/g, '&')
+    .replace(/"/g, '"')
+    .replace(/'/g, ''')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/\//g, '&#x2F;')
+    .replace(/\\/g, '&#x5C;')
+    .replace(/`/g, '&#96;'))
+}

package/licence

@@ -1,4 +1,4 @@
-Copyright (c) 2023 i18next
+Copyright (c) 2024 i18next
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "i18next-http-middleware",
-  "version": "3.7.0",
+  "version": "3.7.1",
   "private": false,
   "type": "module",
   "main": "./cjs/index.js",