nitro-nightly 4.0.0-20251010-091516-7cafddba → 4.0.0-20251030-091344-d4418b98

package/dist/_chunks/_deps/dot-prop.mjs

@@ -0,0 +1,282 @@
+const isObject = value => {
+	const type = typeof value;
+	return value !== null && (type === 'object' || type === 'function');
+};
+
+const disallowedKeys = new Set([
+	'__proto__',
+	'prototype',
+	'constructor',
+]);
+
+// Maximum allowed array index to prevent DoS via memory exhaustion.
+const MAX_ARRAY_INDEX = 1_000_000;
+
+// Optimized digit check without Set overhead.
+const isDigit = character => character >= '0' && character <= '9';
+
+// Check if a segment should be coerced to a number.
+function shouldCoerceToNumber(segment) {
+	// Only coerce valid non-negative integers without leading zeros.
+	if (segment === '0') {
+		return true;
+	}
+
+	if (/^[1-9]\d*$/.test(segment)) {
+		const parsedNumber = Number.parseInt(segment, 10);
+		// Check within safe integer range and under MAX_ARRAY_INDEX to prevent DoS.
+		return parsedNumber <= Number.MAX_SAFE_INTEGER && parsedNumber <= MAX_ARRAY_INDEX;
+	}
+
+	return false;
+}
+
+// Helper to process a path segment (eliminates duplication).
+function processSegment(segment, parts) {
+	if (disallowedKeys.has(segment)) {
+		return false; // Signal to return empty array.
+	}
+
+	if (segment && shouldCoerceToNumber(segment)) {
+		parts.push(Number.parseInt(segment, 10));
+	} else {
+		parts.push(segment);
+	}
+
+	return true;
+}
+
+function parsePath(path) { // eslint-disable-line complexity
+	if (typeof path !== 'string') {
+		throw new TypeError(`Expected a string, got ${typeof path}`);
+	}
+
+	const parts = [];
+	let currentSegment = '';
+	let currentPart = 'start';
+	let isEscaping = false;
+	let position = 0;
+
+	for (const character of path) {
+		position++;
+
+		// Handle escaping.
+		if (isEscaping) {
+			currentSegment += character;
+			isEscaping = false;
+			continue;
+		}
+
+		// Handle escape character.
+		if (character === '\\') {
+			if (currentPart === 'index') {
+				throw new Error(`Invalid character '${character}' in an index at position ${position}`);
+			}
+
+			if (currentPart === 'indexEnd') {
+				throw new Error(`Invalid character '${character}' after an index at position ${position}`);
+			}
+
+			isEscaping = true;
+			currentPart = currentPart === 'start' ? 'property' : currentPart;
+			continue;
+		}
+
+		switch (character) {
+			case '.': {
+				if (currentPart === 'index') {
+					throw new Error(`Invalid character '${character}' in an index at position ${position}`);
+				}
+
+				if (currentPart === 'indexEnd') {
+					currentPart = 'property';
+					break;
+				}
+
+				if (!processSegment(currentSegment, parts)) {
+					return [];
+				}
+
+				currentSegment = '';
+				currentPart = 'property';
+				break;
+			}
+
+			case '[': {
+				if (currentPart === 'index') {
+					throw new Error(`Invalid character '${character}' in an index at position ${position}`);
+				}
+
+				if (currentPart === 'indexEnd') {
+					currentPart = 'index';
+					break;
+				}
+
+				if (currentPart === 'property' || currentPart === 'start') {
+					// Only push if we have content OR if we're in 'property' mode (not 'start')
+					if ((currentSegment || currentPart === 'property') && !processSegment(currentSegment, parts)) {
+						return [];
+					}
+
+					currentSegment = '';
+				}
+
+				currentPart = 'index';
+				break;
+			}
+
+			case ']': {
+				if (currentPart === 'index') {
+					if (currentSegment === '') {
+						// Empty brackets - backtrack and treat as literal
+						const lastSegment = parts.pop() || '';
+						currentSegment = lastSegment + '[]';
+						currentPart = 'property';
+					} else {
+						// Index must be digits only (enforced by default case)
+						const parsedNumber = Number.parseInt(currentSegment, 10);
+						const isValidInteger = !Number.isNaN(parsedNumber)
+							&& Number.isFinite(parsedNumber)
+							&& parsedNumber >= 0
+							&& parsedNumber <= Number.MAX_SAFE_INTEGER
+							&& parsedNumber <= MAX_ARRAY_INDEX
+							&& currentSegment === String(parsedNumber);
+
+						if (isValidInteger) {
+							parts.push(parsedNumber);
+						} else {
+							// Keep as string if not a valid integer representation or exceeds MAX_ARRAY_INDEX
+							parts.push(currentSegment);
+						}
+
+						currentSegment = '';
+						currentPart = 'indexEnd';
+					}
+
+					break;
+				}
+
+				if (currentPart === 'indexEnd') {
+					throw new Error(`Invalid character '${character}' after an index at position ${position}`);
+				}
+
+				// In property context, treat ] as literal character
+				currentSegment += character;
+				break;
+			}
+
+			default: {
+				if (currentPart === 'index' && !isDigit(character)) {
+					throw new Error(`Invalid character '${character}' in an index at position ${position}`);
+				}
+
+				if (currentPart === 'indexEnd') {
+					throw new Error(`Invalid character '${character}' after an index at position ${position}`);
+				}
+
+				if (currentPart === 'start') {
+					currentPart = 'property';
+				}
+
+				currentSegment += character;
+			}
+		}
+	}
+
+	// Handle unfinished escaping (trailing backslash)
+	if (isEscaping) {
+		currentSegment += '\\';
+	}
+
+	// Handle end of path
+	switch (currentPart) {
+		case 'property': {
+			if (!processSegment(currentSegment, parts)) {
+				return [];
+			}
+
+			break;
+		}
+
+		case 'index': {
+			throw new Error('Index was not closed');
+		}
+
+		case 'start': {
+			parts.push('');
+			break;
+		}
+		// No default
+	}
+
+	return parts;
+}
+
+function normalizePath(path) {
+	if (typeof path === 'string') {
+		return parsePath(path);
+	}
+
+	if (Array.isArray(path)) {
+		const normalized = [];
+
+		for (const [index, segment] of path.entries()) {
+			// Type validation.
+			if (typeof segment !== 'string' && typeof segment !== 'number') {
+				throw new TypeError(`Expected a string or number for path segment at index ${index}, got ${typeof segment}`);
+			}
+
+			// Validate numbers are finite (reject NaN, Infinity, -Infinity).
+			if (typeof segment === 'number' && !Number.isFinite(segment)) {
+				throw new TypeError(`Path segment at index ${index} must be a finite number, got ${segment}`);
+			}
+
+			// Check for disallowed keys.
+			if (disallowedKeys.has(segment)) {
+				return [];
+			}
+
+			// Normalize numeric strings to numbers for simplicity.
+			// This treats ['items', '0'] the same as ['items', 0].
+			if (typeof segment === 'string' && shouldCoerceToNumber(segment)) {
+				normalized.push(Number.parseInt(segment, 10));
+			} else {
+				normalized.push(segment);
+			}
+		}
+
+		return normalized;
+	}
+
+	return [];
+}
+
+function getProperty(object, path, value) {
+	if (!isObject(object) || (typeof path !== 'string' && !Array.isArray(path))) {
+		return value === undefined ? object : value;
+	}
+
+	const pathArray = normalizePath(path);
+	if (pathArray.length === 0) {
+		return value;
+	}
+
+	for (let index = 0; index < pathArray.length; index++) {
+		const key = pathArray[index];
+		object = object[key];
+
+		if (object === undefined || object === null) {
+			// Return default value if we hit undefined/null before the end of the path.
+			// This ensures get({foo: null}, 'foo.bar') returns the default value, not null.
+			if (index !== pathArray.length - 1) {
+				return value;
+			}
+
+			break;
+		}
+	}
+
+	return object === undefined ? value : object;
+}
+
+export { getProperty as g };