solid-server 5.7.3 → 5.7.6

package/lib/create-app.js

@@ -302,7 +302,7 @@ function initAuthentication (app, argv) {
 function sessionSettings (secureCookies, host) {
   const sessionSettings = {
     name: 'nssidp.sid',
-    secret: uuid.v1(),
+    secret: uuid.v4(),
     saveUninitialized: false,
     resave: false,
     rolling: true,

package/lib/handlers/put.js

@@ -11,9 +11,11 @@ async function handler (req, res, next) {
   res.header('MS-Author-Via', 'SPARQL')
 
   const contentType = req.get('content-type')
-  if (isAuxiliary(req)) {
+  // check for valid rdf content for auxiliary resource and /profile/card
+  // in future we may check that /profile/card is a minimal valid WebID card
+  if (isAuxiliary(req) || req.originalUrl === '/profile/card') {
     if (contentType === 'text/turtle') {
-      return bodyParser.text({ type: () => true })(req, res, () => putAuxiliary(req, res, next))
+      return bodyParser.text({ type: () => true })(req, res, () => putValidRdf(req, res, next))
     } else return next(new HTTPError(415, 'RDF file contains invalid syntax'))
   }
   return putStream(req, res, next)
@@ -37,7 +39,7 @@ async function putStream (req, res, next, stream = req) {
 
 // needed to avoid breaking access with bad acl
 // or breaking containement triples for meta
-function putAuxiliary (req, res, next) {
+function putValidRdf (req, res, next) {
   const ldp = req.app.locals.ldp
   const contentType = req.get('content-type')
   const requestUri = ldp.resourceMapper.getRequestUrl(req)

package/lib/ldp.js

@@ -535,8 +535,8 @@ class LDP {
       return this.deleteContainer(path)
     } else {
       // DELETE method not allowed on podRoot/.acl
-      if ((url.url || url) === '/' + this.suffixAcl) {
-        throw error(405, 'DELETE of PodRoot/.acl is not allowed')
+      if (['/' + this.suffixAcl, '/profile/card'].some(item => (url.url || url) === item)) {
+        throw error(405, `DELETE of ${url.url || url} is not allowed`)
       }
       return this.deleteDocument(path)
     }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "solid-server",
   "description": "Solid server on top of the file-system",
-  "version": "5.7.3",
+  "version": "5.7.6",
   "author": {
     "name": "Tim Berners-Lee",
     "email": "timbl@w3.org"
@@ -59,21 +59,21 @@
   "homepage": "https://github.com/solid/node-solid-server",
   "bugs": "https://github.com/solid/node-solid-server/issues",
   "dependencies": {
-    "@fastify/busboy": "^1.1.0",
+    "@fastify/busboy": "^1.2.1",
     "@solid/acl-check": "^0.4.5",
     "@solid/oidc-auth-manager": "^0.24.3",
     "@solid/oidc-op": "^0.11.6",
-    "async-lock": "^1.3.2",
-    "body-parser": "^1.20.0",
+    "async-lock": "^1.4.0",
+    "body-parser": "^1.20.2",
     "bootstrap": "^3.4.1",
     "cached-path-relative": "^1.1.0",
-    "camelize": "^1.0.0",
+    "camelize": "^1.0.1",
     "cheerio": "^1.0.0-rc.12",
     "colorette": "^2.0.19",
     "commander": "^8.3.0",
     "cors": "^2.8.5",
     "debug": "^4.3.4",
-    "express": "^4.18.1",
+    "express": "^4.18.2",
     "express-handlebars": "^5.3.5",
     "express-session": "^1.17.3",
     "extend": "^3.0.2",
@@ -84,22 +84,21 @@
     "global-tunnel-ng": "^2.7.1",
     "handlebars": "^4.7.7",
     "http-proxy-middleware": "^2.0.6",
-    "inquirer": "^8.2.4",
+    "inquirer": "^8.2.5",
     "into-stream": "^6.0.0",
     "ip-range-check": "0.2.0",
     "is-ip": "^3.1.0",
     "li": "^1.3.0",
-    "mashlib": "^1.8.4",
+    "mashlib": "^1.8.7",
     "mime-types": "^2.1.35",
     "negotiator": "^0.6.3",
-    "node-fetch": "^2.6.7",
+    "node-fetch": "^2.6.9",
     "node-forge": "^1.3.1",
     "node-mailer": "^0.1.1",
-    "nodemailer": "^6.7.8",
+    "nodemailer": "^6.9.1",
     "oidc-op-express": "^0.0.3",
     "owasp-password-strength-test": "^1.3.0",
-    "rdflib": "^2.2.20",
-    "recursive-readdir": "^2.2.2",
+    "recursive-readdir": "^2.2.3",
     "request": "^2.88.2",
     "rimraf": "^3.0.2",
     "solid-auth-client": "^2.5.6",
@@ -111,28 +110,28 @@
     "urijs": "^1.19.11",
     "uuid": "^8.3.2",
     "valid-url": "^1.0.9",
-    "validator": "^13.7.0",
+    "validator": "^13.9.0",
     "vhost": "^3.0.2"
   },
   "devDependencies": {
     "@solid/solid-auth-oidc": "^0.3.0",
-    "chai": "^4.3.6",
+    "chai": "^4.3.7",
     "chai-as-promised": "7.1.1",
     "cross-env": "7.0.3",
     "dirty-chai": "2.0.1",
     "eslint": "^7.32.0",
     "localstorage-memory": "1.0.3",
     "mocha": "^9.2.2",
-    "nock": "^13.2.9",
-    "node-mocks-http": "1.11.0",
+    "nock": "^13.3.0",
+    "node-mocks-http": "1.12.1",
     "nyc": "15.1.0",
     "pre-commit": "1.2.2",
     "randombytes": "2.1.0",
     "sinon": "12.0.1",
     "sinon-chai": "3.7.0",
-    "snyk": "^1.997.0",
+    "snyk": "^1.1110.0",
     "standard": "16.0.4",
-    "supertest": "^6.2.4",
+    "supertest": "^6.3.3",
     "turtle-validator": "1.1.1",
     "whatwg-url": "11.0.0"
   },