mailauth 4.9.1 → 4.9.3

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [4.9.3](https://github.com/postalsys/mailauth/compare/v4.9.2...v4.9.3) (2025-09-02)
+
+
+### Bug Fixes
+
+* bumped deps ([006475e](https://github.com/postalsys/mailauth/commit/006475ee7bbf61a8c7c00de793f4007f66dba61a))
+
+## [4.9.2](https://github.com/postalsys/mailauth/compare/v4.9.1...v4.9.2) (2025-08-28)
+
+
+### Bug Fixes
+
+* ZMS-262 remove control chars from record add support for mappers in validateTagValueRecord ([#95](https://github.com/postalsys/mailauth/issues/95)) ([42828a6](https://github.com/postalsys/mailauth/commit/42828a6cb38add3aed35881f102488f8143407cb))
+
 ## [4.9.1](https://github.com/postalsys/mailauth/compare/v4.9.0...v4.9.1) (2025-08-27)
 
 

package/lib/bimi/index.js

@@ -3,7 +3,7 @@
 const { Buffer } = require('node:buffer');
 const crypto = require('node:crypto');
 const dns = require('node:dns');
-const { formatAuthHeaderRow, parseDkimHeaders, formatDomain, getAlignment, validateTagValueRecord } = require('../tools');
+const { formatAuthHeaderRow, parseDkimHeaders, formatDomain, getAlignment } = require('../tools');
 const Joi = require('joi');
 //const packageData = require('../../package.json');
 const httpsSchema = Joi.string().uri({
@@ -184,8 +184,7 @@ const lookup = async data => {
         response.authority = recordData.parsed.a.value;
 
         // Apple Mail requires additional policy header values in Authentication-Results header
-        const authorityUriValidationObj = validateTagValueRecord(recordData.parsed.a.value, 'bimi');
-        response.status.policy = { authority: 'none', 'authority-uri': authorityUriValidationObj.sanitizedRecord }; // VMC has not been actually checked here yet, so authority is none
+        response.status.policy = { authority: 'none', 'authority-uri': recordData.parsed.a.value }; // VMC has not been actually checked here yet, so authority is none
     }
 
     response.info = formatAuthHeaderRow('bimi', response.status);

package/lib/tools.js

@@ -580,9 +580,11 @@ function parseTagValueRecord(record, options = {}) {
     } = options;
 
     let sanitized = (record || '')
-        .replace(/\\r\\n/g, '') // Remove literal \r\n
-        .replace(/\\n/g, '') // Remove literal \n
-        .replace(/\r?\n/g, '') // Remove actual newlines
+        .replace(/[\x00-\x1F]+/g, ' ') // control chars
+        .replace(/\\r\\n/g, '')
+        .replace(/\\n/g, '')
+        .replace(/\r?\n/g, '')
+        .replace(/\s+/g, ' ')
         .trim();
 
     // Split on semicolons
@@ -663,6 +665,10 @@ function parseTagValueRecord(record, options = {}) {
     };
 }
 
+function convertToASCII(value) {
+    return (value || '').replace(/[^\x20-\x7E]/g, '');
+}
+
 function validateTagValueRecord(record, recordType) {
     const configs = {
         BIMI: {
@@ -691,6 +697,9 @@ function validateTagValueRecord(record, recordType) {
                         return `Invalid authority URL: ${value}`;
                     }
                 }
+            },
+            mappers: {
+                v: value => convertToASCII(value)
             }
         }
     };
@@ -702,6 +711,15 @@ function validateTagValueRecord(record, recordType) {
 
     const parsed = parseTagValueRecord(record, config);
 
+    // Mappers run regardless whether the resulting parsed object is valid
+    if (config.mappers) {
+        for (const [tag, mapper] of Object.entries(config.mappers)) {
+            if (parsed.tags && tag in parsed.tags) {
+                parsed.tags[tag] = mapper(parsed.tags[tag]);
+            }
+        }
+    }
+
     if (config.validators && parsed.isValid) {
         for (const [tag, validator] of Object.entries(config.validators)) {
             if (parsed.tags && tag in parsed.tags) {
@@ -748,5 +766,6 @@ module.exports = {
     TLDTS_OPTS,
 
     validateTagValueRecord,
-    parseTagValueRecord
+    parseTagValueRecord,
+    convertToASCII
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mailauth",
-    "version": "4.9.1",
+    "version": "4.9.3",
     "description": "Email authentication library for Node.js",
     "main": "lib/mailauth.js",
     "scripts": {
@@ -37,22 +37,22 @@
         "eslint-config-nodemailer": "1.2.0",
         "eslint-config-prettier": "9.1.0",
         "js-yaml": "4.1.0",
-        "license-report": "6.7.2",
+        "license-report": "6.8.0",
         "mbox-reader": "1.2.0",
-        "mocha": "11.5.0",
+        "mocha": "11.7.2",
         "resedit": "^2.0.3"
     },
     "dependencies": {
         "@postalsys/vmc": "1.1.2",
         "fast-xml-parser": "4.5.2",
         "ipaddr.js": "2.2.0",
-        "joi": "17.13.3",
-        "libmime": "5.3.6",
-        "nodemailer": "7.0.3",
+        "joi": "18.0.1",
+        "libmime": "5.3.7",
+        "nodemailer": "7.0.6",
         "punycode.js": "2.3.1",
-        "tldts": "7.0.7",
-        "undici": "7.10.0",
-        "yargs": "17.7.2"
+        "tldts": "7.0.12",
+        "undici": "7.15.0",
+        "yargs": "18.0.0"
     },
     "engines": {
         "node": ">=18.0.0"