publish-microfrontend 1.11.1-beta.efeabd1 → 1.11.1

package/lib/index.js

@@ -20446,6 +20446,9 @@ var require_form_data = __commonJS({
     var setToStringTag = require_es_set_tostringtag();
     var hasOwn = require_hasown();
     var populate = require_populate();
+    function escapeHeaderParam(str) {
+      return String(str).replace(/\r/g, "%0D").replace(/\n/g, "%0A").replace(/"/g, "%22");
+    }
     function FormData4(options) {
       if (!(this instanceof FormData4)) {
         return new FormData4(options);
@@ -20535,7 +20538,7 @@ var require_form_data = __commonJS({
       var contents = "";
       var headers = {
         // add custom disposition as third element or keep it two elements if not
-        "Content-Disposition": ["form-data", 'name="' + field + '"'].concat(contentDisposition || []),
+        "Content-Disposition": ["form-data", 'name="' + escapeHeaderParam(field) + '"'].concat(contentDisposition || []),
         // if no content type. allow it to be empty array
         "Content-Type": [].concat(contentType || [])
       };
@@ -20569,7 +20572,7 @@ var require_form_data = __commonJS({
         filename = path.basename(value.client._httpMessage.path || "");
       }
       if (filename) {
-        return 'filename="' + filename + '"';
+        return 'filename="' + escapeHeaderParam(filename) + '"';
       }
     };
     FormData4.prototype._getContentType = function(value, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "publish-microfrontend",
-  "version": "1.11.1-beta.efeabd1",
+  "version": "1.11.1",
   "description": "A CLI for publishing micro frontends to a feed service.",
   "keywords": [
     "modules",
@@ -68,5 +68,5 @@
     "typescript": "^5",
     "yargs": "^15"
   },
-  "gitHead": "efeabd123aee931a35e13054b9792ccfbc252715"
+  "gitHead": "5a57b813ac5cae4e60fbb7c6cd0f5120135371dd"
 }