minimalistic-server 0.0.54 → 0.0.56

package/index.mjs

@@ -36,6 +36,70 @@ function safePrint(data, isError = false) {
 	}
 }
 
+const escapeHtmlMap = {
+	"&": "&",
+	"<": "&lt;",
+	">": "&gt;",
+	'"': "&quot;",
+	"'": "&#39;",
+}
+
+const unescapeHtmlMap = {
+	"&nbsp;": "\u00A0",
+	"&lt;": "<",
+	"&gt;": ">",
+	"&amp;": "&",
+	"&quot;": "\"",
+	"&apos;": "'",
+	"&cent;": "¢",
+	"&pound;": "£",
+	"&yen;": "¥",
+	"&euro;": "€",
+	"&copy;": "©",
+	"&reg;": "®",
+	"&trade;": "™",
+
+	"&hellip;": "…",
+	"&ndash;": "–",
+	"&mdash;": "—",
+	"&lsquo;": "‘",
+	"&rsquo;": "’",
+	"&ldquo;": "“",
+	"&rdquo;": "”",
+	"&laquo;": "«",
+	"&raquo;": "»",
+
+	"&times;": "×",
+	"&divide;": "÷",
+	"&plusmn;": "±",
+	"&minus;": "−",
+	"&sup2;": "²",
+	"&sup3;": "³",
+	"&frac12;": "½",
+	"&frac14;": "¼",
+	"&frac34;": "¾",
+
+	"&deg;": "°",
+	"&micro;": "µ",
+	"&para;": "¶",
+	"&sect;": "§",
+	"&middot;": "·",
+	"&bull;": "•",
+
+	"&alpha;": "α",
+	"&beta;": "β",
+	"&gamma;": "γ",
+	"&pi;": "π",
+	"&sigma;": "σ",
+	"&omega;": "ω",
+	"&Alpha;": "Α",
+	"&Beta;": "Β",
+	"&Gamma;": "Γ",
+	"&Pi;": "Π",
+	"&Sigma;": "Σ",
+	"&Omega;": "Ω"
+}
+
 const mimeTypes = {
 	"123": "application/vnd.lotus-1-2-3",
 	"3dml": "text/vnd.in3d.3dml",
@@ -2105,22 +2169,13 @@ export function serve(routes, port = 80, staticFileDirectoryOrDirectories = null
 
 }
 
-export function escapeHtml(htmlStr) {
-	return htmlStr?.toString()
-		.replace(/&/gm, "&amp;")
-		.replace(/</gm, "&lt;")
-		.replace(/>/gm, "&gt;")
-		.replace(/"/gm, "&quot;")
-		.replace(/'/gm, "&#39;") ?? '';
+export function escapeHtml(str) {
+	return str?.toString().replace(/[&<>"']/gm, (c) => escapeHtmlMap[c]) ?? '';
 }
 
 export function unescapeHtml(htmlStr) {
 	return htmlStr?.toString()
-		.replace(/&amp;/gm, "&")
-		.replace(/&lt;/gm, "<")
-		.replace(/&gt;/gm, ">")
-		.replace(/&quot;/gm, '"')
-		.replace(/&#39;/gm, "'") ?? '';
+		.replace(/&(?:#(\d+|x[\dA-Fa-f]+)|([^;]+));/gm, (entity, digits, entityName) => unescapeHtmlMap[entity] ?? entityName ?? String.fromCharCode("0" + digits));
 }
 
 export function unserve(port = 80) {
@@ -2251,13 +2306,13 @@ function normalizeRoutes(routes, handleServerError) {
 				flattenRecursively(root[prop], newPath, preMiddlewares, postMiddlewares);
 			}
 		} else if (typeof root === 'function') {
-			flatten[path] = wrapInMiddlewares(root, preMiddlewares, postMiddlewares, handleServerError);
+			setObjectProperty(flatten, path, wrapInMiddlewares(root, preMiddlewares, postMiddlewares, handleServerError));
 		}
 	}
 
 	flattenRecursively(routes);
 
-	const result = {};
+	const result = Object.create(null);
 
 	for (const route in flatten) {
 		const split = route.split('/').filter(x => x);
@@ -2273,13 +2328,13 @@ function normalizeRoutes(routes, handleServerError) {
 
 		for (const fragment of split) {
 			if (!parent[fragment]) {
-				parent[fragment] = { __proto__: null };
+				setObjectProperty(parent, fragment, Object.create(null));
 			}
 
 			parent = parent[fragment];
 		}
 
-		parent[`/${method}/`] = flatten[route];
+		setObjectProperty(parent, `/${method}/`, flatten[route]);
 	}
 
 	return result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minimalistic-server",
-  "version": "0.0.54",
+  "version": "0.0.56",
   "engines" : { 
     "npm" : ">=8.6.0",
     "node" : ">=22.0.0"