lhisp-logger 3.1.4 → 3.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lhisp-logger",
-  "version": "3.1.4",
+  "version": "3.1.6",
   "description": "",
   "main": "src/lhisp-logger",
   "types": "src/lhisp-logger.d.ts",

package/src/deepSerializeAxiosErrors.js

@@ -4,12 +4,41 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.deepSerializeAxiosErrors = deepSerializeAxiosErrors;
 const axiosErrorSerializer_1 = require("./axiosErrorSerializer");
 const isAxiosError_1 = require("./isAxiosError");
-const MAX_STRING_LENGTH = 128;
+const DEFAULT_MAX_STRING_LENGTH = 128;
+const ENV_MAX_STRING_LENGTH = Number(process.env.LOG_MAX_STRING_LENGTH);
+const MAX_STRING_LENGTH = Number.isFinite(ENV_MAX_STRING_LENGTH) && ENV_MAX_STRING_LENGTH > 0
+    ? Math.floor(ENV_MAX_STRING_LENGTH)
+    : DEFAULT_MAX_STRING_LENGTH;
 function isProbablyBase64(value) {
     if (!value || value.length < 16 || value.length % 4 !== 0)
         return false;
-    // Base64 strings should only contain valid chars and optional padding.
-    return /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
+    // Keep this check iterative to avoid regex engine recursion on pathological inputs.
+    // Padding can only appear at the end and can be at most two '=' chars.
+    let paddingStart = -1;
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        const isUpper = code >= 65 && code <= 90; // A-Z
+        const isLower = code >= 97 && code <= 122; // a-z
+        const isDigit = code >= 48 && code <= 57; // 0-9
+        const isPlus = code === 43; // +
+        const isSlash = code === 47; // /
+        const isPad = code === 61; // =
+        if (isPad) {
+            if (paddingStart === -1)
+                paddingStart = i;
+            continue;
+        }
+        // Non-padding chars after padding started are invalid.
+        if (paddingStart !== -1)
+            return false;
+        if (!(isUpper || isLower || isDigit || isPlus || isSlash)) {
+            return false;
+        }
+    }
+    if (paddingStart === -1)
+        return true;
+    const padCount = value.length - paddingStart;
+    return padCount === 1 || padCount === 2;
 }
 function truncateString(value, maxLength) {
     if (value.length <= maxLength)
@@ -20,7 +49,11 @@ function truncateString(value, maxLength) {
 // Handles arrays, plain objects, and protects against circular structures.
 function deepSerializeAxiosErrors(value, seen) {
     if (typeof value === "string") {
-        if (isProbablyBase64(value) || value.length > MAX_STRING_LENGTH) {
+        // Avoid expensive checks for very long payload-like strings.
+        if (value.length > MAX_STRING_LENGTH) {
+            return truncateString(value, MAX_STRING_LENGTH);
+        }
+        if (isProbablyBase64(value)) {
             return truncateString(value, MAX_STRING_LENGTH);
         }
         return value;

package/src/lhisp-logger.js

@@ -73,6 +73,10 @@ if (lokiEnabled) {
 }
 const name = process.env.LOG_NAME || undefined;
 const transport = pino_1.default.transport({ targets });
+const serializeError = (error) => {
+    const base = (0, isAxiosError_1.isAxiosError)(error) ? (0, axiosErrorSerializer_1.axiosErrorSerializer)(error) : pino_1.default.stdSerializers.err(error);
+    return (0, deepSerializeAxiosErrors_1.deepSerializeAxiosErrors)(base);
+};
 const logger = (0, pino_1.default)({
     name: appName,
     level,
@@ -83,8 +87,8 @@ const logger = (0, pino_1.default)({
         },
     },
     serializers: {
-        err: (error) => ((0, isAxiosError_1.isAxiosError)(error) ? (0, axiosErrorSerializer_1.axiosErrorSerializer)(error) : pino_1.default.stdSerializers.err(error)),
-        error: (error) => ((0, isAxiosError_1.isAxiosError)(error) ? (0, axiosErrorSerializer_1.axiosErrorSerializer)(error) : pino_1.default.stdSerializers.err(error)),
+        err: serializeError,
+        error: serializeError,
         axiosError: axiosErrorSerializer_1.axiosErrorSerializer,
     },
     formatters: {