perimeterx-js-core 0.26.1 → 0.26.2

package/lib/cjs/risk_api/client/GetRiskApiClientV2.js

@@ -69,11 +69,14 @@ var GetRiskApiClientV2 = /** @class */ (function (_super) {
         return (0, utils_2.isAscii)(headerName) && headerValue.every(function (value) { return (0, utils_2.isAscii)(value); });
     };
     GetRiskApiClientV2.prototype.addHeadersFromObject = function (headers, object, headerNamesMap) {
-        Object.entries(object).forEach(function (_a) {
-            var key = _a[0], value = _a[1];
-            var headerConversionObject = headerNamesMap[key];
-            if (headerConversionObject && value != null) {
-                var header = headerConversionObject.header, convertToString = headerConversionObject.convertToString;
+        Object.entries(headerNamesMap).forEach(function (_a) {
+            var key = _a[0], headerConversionObject = _a[1];
+            if (!headerConversionObject) {
+                return;
+            }
+            var header = headerConversionObject.header, convertToString = headerConversionObject.convertToString;
+            var value = object[key];
+            if (value != null) {
                 var strValue = convertToString
                     ? convertToString(value)
                     : typeof value === 'string'
@@ -81,6 +84,10 @@ var GetRiskApiClientV2 = /** @class */ (function (_super) {
                         : "".concat(value);
                 headers[header] = [strValue];
             }
+            else {
+                // delete so that user cannot spoof
+                delete headers[header];
+            }
         });
     };
     GetRiskApiClientV2.prototype.createRiskResponse = function (response) {

package/lib/cjs/utils/constants.js

@@ -14,4 +14,4 @@ exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 exports.REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.26.1';
+exports.CORE_MODULE_VERSION = 'JS Core 0.26.2';

package/lib/esm/risk_api/client/GetRiskApiClientV2.js

@@ -45,10 +45,13 @@ export class GetRiskApiClientV2 extends RiskApiClientBase {
         return isAscii(headerName) && headerValue.every((value) => isAscii(value));
     }
     addHeadersFromObject(headers, object, headerNamesMap) {
-        Object.entries(object).forEach(([key, value]) => {
-            const headerConversionObject = headerNamesMap[key];
-            if (headerConversionObject && value != null) {
-                const { header, convertToString } = headerConversionObject;
+        Object.entries(headerNamesMap).forEach(([key, headerConversionObject]) => {
+            if (!headerConversionObject) {
+                return;
+            }
+            const { header, convertToString } = headerConversionObject;
+            const value = object[key];
+            if (value != null) {
                 const strValue = convertToString
                     ? convertToString(value)
                     : typeof value === 'string'
@@ -56,6 +59,10 @@ export class GetRiskApiClientV2 extends RiskApiClientBase {
                         : `${value}`;
                 headers[header] = [strValue];
             }
+            else {
+                // delete so that user cannot spoof
+                delete headers[header];
+            }
         });
     }
     createRiskResponse(response) {

package/lib/esm/utils/constants.js

@@ -11,4 +11,4 @@ export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 export const URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 export const REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.26.1';
+export const CORE_MODULE_VERSION = 'JS Core 0.26.2';

package/lib/types/utils/constants.d.ts

@@ -11,4 +11,4 @@ export declare const PUSH_DATA_FEATURE_HEADER_NAME = "x-px-feature";
 export declare const EMAIL_ADDRESS_REGEX: RegExp;
 export declare const URL_REGEX: RegExp;
 export declare const REGEX_STRUCTURE: RegExp;
-export declare const CORE_MODULE_VERSION = "JS Core 0.26.1";
+export declare const CORE_MODULE_VERSION = "JS Core 0.26.2";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perimeterx-js-core",
-  "version": "0.26.1",
+  "version": "0.26.2",
   "description": "",
   "type": "module",
   "typesVersions": {
@@ -35,8 +35,8 @@
     "build:esm": "tsc -p tsconfig.esm.json && tsc-alias -p tsconfig.esm.json",
     "build:dec": "tsc -p tsconfig.dec.json && tsc-alias -p tsconfig.dec.json",
     "clean": "rm -rf lib",
-    "lint": "ESLINT_USE_FLAT_CONFIG=false eslint . --ext .ts",
-    "lint:fix": "ESLINT_USE_FLAT_CONFIG=false eslint . --ext .ts --fix",
+    "lint": "eslint . --ext .ts",
+    "lint:fix": "eslint . --ext .ts --fix",
     "test": "mocha",
     "coverage": "nyc npm run test",
     "pre-commit": "./node_modules/.bin/lint-staged",
@@ -48,18 +48,18 @@
     "js-base64": "^3.7.2",
     "phin": "^3.7.0",
     "ts-essentials": "^10.0.0",
-    "uuid": "^10.0.0"
+    "uuid": "^11.1.0"
   },
   "devDependencies": {
-    "@types/chai": "^4.3.3",
-    "@types/chai-as-promised": "^7.1.5",
+    "@types/chai": "^5.2.1",
+    "@types/chai-as-promised": "^8.0.2",
     "@types/crypto-js": "^4.1.1",
     "@types/mocha": "^10.0.0",
     "@types/sinon": "^17.0.1",
     "@types/uuid": "^10.0.0",
     "@typescript-eslint/eslint-plugin": "^8.26.0",
     "@typescript-eslint/parser": "^8.26.0",
-    "chai": "^4.3.6",
+    "chai": "^5.2.0",
     "chai-as-promised": "^8.0.0",
     "core-js": "^3.19.1",
     "eslint": "^9.21.0",