jsana 1.0.0 → 1.0.1

package/lib/fetcher.js

@@ -92,17 +92,28 @@ export async function fetchUrl(rawUrl, { timeout = 30000 } = {}) {
 
   // Enforce size limit via a transform
   let received = 0;
+  let destroyed = false;
   const limiter = new PassThrough({
     transform(chunk, _enc, cb) {
       received += chunk.length;
       if (received > MAX_RESPONSE_SIZE) {
-        cb(new Error('Response too large'));
-        body.destroy();
+        if (!destroyed) {
+          destroyed = true;
+          body.on('error', () => {}); // suppress destroy error
+          body.destroy();
+        }
+        cb(); // drop chunk silently, stream will end
       } else {
         cb(null, chunk);
       }
     },
   });
 
+  // Propagate errors without crashing
+  stream.on('error', (err) => {
+    if (!destroyed) limiter.destroy(err);
+  });
+  body.on('error', () => {}); // suppress socket-level errors after destroy
+
   return stream.pipe(limiter);
 }

package/lib/pipeline.js

@@ -103,10 +103,18 @@ export async function run(urlsFile, opts) {
 
         if (!stream) return; // skipped (binary, etc.)
 
+        // Catch stream errors so they don't crash the process
+        stream.on('error', () => {});
+
         let findingsInUrl = 0;
-        for await (const finding of scan(stream, url.href, patterns)) {
-          reporter.write(finding);
-          findingsInUrl++;
+        try {
+          for await (const finding of scan(stream, url.href, patterns)) {
+            reporter.write(finding);
+            findingsInUrl++;
+          }
+        } catch {
+          // Stream error mid-scan (e.g. response too large, connection reset)
+          // Already counted as error below if fetch itself threw
         }
         progress.addFindings(findingsInUrl);
       } catch (err) {

package/package.json

@@ -1,10 +1,18 @@
 {
   "name": "jsana",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "JavaScript Security Analyzer for Bug Bounty",
   "type": "module",
   "license": "MIT",
-  "keywords": ["security", "bug-bounty", "javascript", "scanner", "xss", "secrets", "recon"],
+  "keywords": [
+    "security",
+    "bug-bounty",
+    "javascript",
+    "scanner",
+    "xss",
+    "secrets",
+    "recon"
+  ],
   "bin": {
     "jsana": "./bin/jsana.js"
   },