xypriss 9.11.13 → 9.12.0

package/dist/src/middleware/built-in/security/UriNormalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UriNormalizer.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/UriNormalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,aAAa;IA2CtB,4EAA4E;IAC5E,aAAa;IACb,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACI,MAAM,CAAC,aAAa,CAAC,OAAe;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC;QAEzB,4DAA4D;QAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAEvD,oCAAoC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAErC,mDAAmD;QACnD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE/C,uDAAuD;QACvD,MAAM,SAAS,GAAG,aAAa,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAEvE,wDAAwD;QACxD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEjD,2EAA2E;QAC3E,MAAM,gBAAgB,GAClB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAEpD,wCAAwC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE1D,iCAAiC;QACjC,OAAO,gBAAgB,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACI,MAAM,CAAC,cAAc,CACxB,OAAe,EACf,GAAW,EACX,YAAoB,aAAa,CAAC,qBAAqB;QAEvD,sDAAsD;QACtD,IAAI,CAAC,CAAC,OAAO,YAAY,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CACf,oFAAoF,OAAO,OAAO,EAAE,CACvG,CAAC;QACN,CAAC;QAED,2DAA2D;QAC3D,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,yBAAyB,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,CACtD,GAAG,CAAC,MAAM,EACV,SAAS,CACZ,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC1C,EAAE,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE;gBACnD,OAAO,EAAE,gBAAgB;aAC5B,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,oDAAoD;YACpD,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAA8B,CACpC,2BAA2B,gBAAgB,sBAAsB,GAAG,CAAC,MAAM,8BAA8B,EACzG,gBAAgB,EAChB,GAAG,CAAC,MAAM,CACb,CAAC;YACN,CAAC;YACD,6DAA6D;YAC7D,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,iCAAiC;IACjC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;OAkBG;IACK,MAAM,CAAC,eAAe,CAAC,GAAW;QACtC,IAAI,OAAO,GAAG,GAAG,CAAC;QAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3D,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACD,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACL,6DAA6D;gBAC7D,MAAM;YACV,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnB,0CAA0C;gBAC1C,MAAM;YACV,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;OAgBG;IACK,MAAM,CAAC,sBAAsB,CAAC,GAAW;QAC7C,4CAA4C;QAC5C,OAAO,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,uCAAuC;IACvC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,MAAM,CAAC,eAAe,CAAC,IAAY;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACnB,qCAAqC;gBACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnB,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;QAED,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,4EAA4E;IAC5E,yCAAyC;IACzC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;OAiBG;IACK,MAAM,CAAC,mBAAmB,CAAC,MAAc,EAAE,MAAc;QAC7D,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACzB,aAAa,CAAC,0BAA0B,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,MAAM,CAAC,gBAAgB,CAAC,KAAc;QAC1C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5C,MAAM,SAAS,GAAG,KAA8B,CAAC;QACjD,IAAI,SAAS,CAAC,IAAI,KAAK,8BAA8B;YAAE,OAAO,IAAI,CAAC;QAEnE,kDAAkD;QAClD,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;;AA3WD,4EAA4E;AAC5E,oBAAoB;AACpB,4EAA4E;AAE5E;;;GAGG;AACqB,mCAAqB,GAAG,EAAE,CAAC;AAEnD;;;;;;;GAOG;AACqB,uCAAyB,GAAG,EAAE,CAAC;AAEvD;;;;;;GAMG;AACqB,mCAAqB,GAAG,EAAE,CAAC;AAEnD;;;;GAIG;AACqB,wCAA0B,GAAG,CAAC,CAAC;AAEvD;;;GAGG;AACqB,kCAAoB,GAAG,GAAG,CAAC;AAsUvD,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAiBrD;;;;OAIG;IACH,YAAY,OAAe,EAAE,SAAiB,EAAE,WAAmB;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QAtBnB,sDAAsD;QAC7B,SAAI,GAAG,gCAAgC,CAAC;QAsB7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,yDAAyD;QACzD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACJ"}

package/dist/src/middleware/built-in/security/XyPrissCors.d.ts

@@ -0,0 +1,12 @@
+export interface XyPrissCorsOptions {
+    origin?: boolean | string | RegExp | (string | RegExp)[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean | string) => void) => void);
+    methods?: string | string[];
+    allowedHeaders?: string | string[];
+    exposedHeaders?: string | string[];
+    credentials?: boolean;
+    maxAge?: number;
+    optionsSuccessStatus?: number;
+    preflightContinue?: boolean;
+}
+export declare function xyprissCors(options?: XyPrissCorsOptions): (req: any, res: any, next: any) => any;
+//# sourceMappingURL=XyPrissCors.d.ts.map

package/dist/src/middleware/built-in/security/XyPrissCors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissCors.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissCors.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IAC/B,MAAM,CAAC,EACD,OAAO,GACP,MAAM,GACN,MAAM,GACN,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GACnB,CAAC,CACG,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,KAAK,IAAI,KAC9D,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,IAczB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SA4G/D"}

package/dist/src/middleware/built-in/security/XyPrissCors.js

@@ -0,0 +1,102 @@
+export function xyprissCors(options = {}) {
+    const defaultOptions = {
+        origin: true,
+        methods: "GET,HEAD,PUT,PATCH,POST,DELETE",
+        preflightContinue: false,
+        optionsSuccessStatus: 204,
+    };
+    const config = Object.assign({}, defaultOptions, options);
+    return function corsMiddleware(req, res, next) {
+        const currentOrigin = req.headers ? req.headers.origin : undefined;
+        const appendVary = (headerStr, field) => {
+            if (headerStr === "*")
+                return headerStr;
+            const parts = headerStr.split(",").map((s) => s.trim());
+            if (!parts.includes(field)) {
+                parts.push(field);
+            }
+            return parts.join(", ");
+        };
+        const applyHeaders = (originAllowed) => {
+            if (originAllowed === true || originAllowed === "*") {
+                res.setHeader("Access-Control-Allow-Origin", "*");
+            }
+            else if (typeof originAllowed === "string") {
+                res.setHeader("Access-Control-Allow-Origin", originAllowed);
+                const vary = res.getHeader("Vary") || "";
+                res.setHeader("Vary", appendVary(String(vary), "Origin"));
+            }
+            if (config.credentials) {
+                res.setHeader("Access-Control-Allow-Credentials", "true");
+            }
+            if (config.exposedHeaders) {
+                const eh = Array.isArray(config.exposedHeaders)
+                    ? config.exposedHeaders.join(",")
+                    : config.exposedHeaders;
+                res.setHeader("Access-Control-Expose-Headers", eh);
+            }
+            if (req.method === "OPTIONS") {
+                if (config.methods) {
+                    const m = Array.isArray(config.methods)
+                        ? config.methods.join(",")
+                        : config.methods;
+                    res.setHeader("Access-Control-Allow-Methods", m);
+                }
+                if (config.allowedHeaders) {
+                    const ah = Array.isArray(config.allowedHeaders)
+                        ? config.allowedHeaders.join(",")
+                        : config.allowedHeaders;
+                    res.setHeader("Access-Control-Allow-Headers", ah);
+                }
+                else if (req.headers &&
+                    req.headers["access-control-request-headers"]) {
+                    res.setHeader("Access-Control-Allow-Headers", req.headers["access-control-request-headers"]);
+                    const vary = res.getHeader("Vary") || "";
+                    res.setHeader("Vary", appendVary(String(vary), "Access-Control-Request-Headers"));
+                }
+                if (config.maxAge !== undefined && config.maxAge !== null) {
+                    res.setHeader("Access-Control-Max-Age", String(config.maxAge));
+                }
+                if (!config.preflightContinue) {
+                    res.statusCode = config.optionsSuccessStatus || 204;
+                    // For typical frameworks setting Content-Length to 0 is cleanly handled
+                    res.setHeader("Content-Length", "0");
+                    res.end();
+                    return;
+                }
+            }
+            next();
+        };
+        if (typeof config.origin === "function") {
+            const originFn = config.origin;
+            originFn(currentOrigin, (err, allow) => {
+                if (err)
+                    return next(err);
+                if (allow) {
+                    applyHeaders(allow);
+                }
+                else {
+                    next();
+                }
+            });
+        }
+        else if (config.origin === true || config.origin === "*") {
+            if (config.credentials) {
+                if (!currentOrigin) {
+                    return next();
+                }
+                applyHeaders(currentOrigin);
+            }
+            else {
+                applyHeaders("*");
+            }
+        }
+        else if (typeof config.origin === "string") {
+            applyHeaders(config.origin);
+        }
+        else {
+            next();
+        }
+    };
+}
+//# sourceMappingURL=XyPrissCors.js.map

package/dist/src/middleware/built-in/security/XyPrissCors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissCors.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissCors.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IACxD,MAAM,cAAc,GAAG;QACnB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,gCAAgC;QACzC,iBAAiB,EAAE,KAAK;QACxB,oBAAoB,EAAE,GAAG;KAC5B,CAAC;IAEF,MAAM,MAAM,GAAuB,MAAM,CAAC,MAAM,CAC5C,EAAE,EACF,cAAc,EACd,OAAO,CACV,CAAC;IAEF,OAAO,SAAS,cAAc,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QACxD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnE,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAE;YACpD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,aAA+B,EAAE,EAAE;YACrD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC3C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;oBACjC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;wBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;wBAC3C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;wBACjC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC5B,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;gBACtD,CAAC;qBAAM,IACH,GAAG,CAAC,OAAO;oBACX,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAC/C,CAAC;oBACC,GAAG,CAAC,SAAS,CACT,8BAA8B,EAC9B,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAChD,CAAC;oBACF,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzC,GAAG,CAAC,SAAS,CACT,MAAM,EACN,UAAU,CACN,MAAM,CAAC,IAAI,CAAC,EACZ,gCAAgC,CACnC,CACJ,CAAC;gBACN,CAAC;gBAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBACxD,GAAG,CAAC,SAAS,CACT,wBAAwB,EACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CACxB,CAAC;gBACN,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBAC5B,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC;oBACpD,wEAAwE;oBACxE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBACrC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;YACL,CAAC;YACD,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAkB,CAAC;YAC3C,QAAQ,CACJ,aAAa,EACb,CAAC,GAAiB,EAAE,KAAwB,EAAE,EAAE;gBAC5C,IAAI,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,KAAK,EAAE,CAAC;oBACR,YAAY,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACJ,IAAI,EAAE,CAAC;gBACX,CAAC;YACL,CAAC,CACJ,CAAC;QACN,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjB,OAAO,IAAI,EAAE,CAAC;gBAClB,CAAC;gBACD,YAAY,CAAC,aAAa,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACJ,YAAY,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3C,YAAY,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACJ,IAAI,EAAE,CAAC;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC"}

package/dist/src/middleware/built-in/security/XyPrissHPP.d.ts

@@ -0,0 +1,7 @@
+export interface XyPrissHPPOptions {
+    checkQuery?: boolean;
+    checkBody?: boolean;
+    whitelist?: string[];
+}
+export declare function xyprissHPP(options?: XyPrissHPPOptions): (req: any, res: any, next: any) => void;
+//# sourceMappingURL=XyPrissHPP.d.ts.map

package/dist/src/middleware/built-in/security/XyPrissHPP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissHPP.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissHPP.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,IA0CxB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,UAa9D"}

package/dist/src/middleware/built-in/security/XyPrissHPP.js

@@ -0,0 +1,48 @@
+export function xyprissHPP(options = {}) {
+    const checkQuery = options.checkQuery !== false;
+    const checkBody = options.checkBody !== false;
+    const whitelist = Array.isArray(options.whitelist)
+        ? options.whitelist.filter((w) => typeof w === "string")
+        : [];
+    function putAside(req, keyReqPart, keyPolluted) {
+        const reqPart = req[keyReqPart];
+        if (!reqPart || typeof reqPart !== "object")
+            return;
+        let reqPolluted = req[keyPolluted];
+        if (reqPolluted === undefined) {
+            reqPolluted = req[keyPolluted] = {};
+            const parameters = Object.keys(reqPart);
+            for (let i = 0; i < parameters.length; i++) {
+                const paramKey = parameters[i];
+                const paramValue = reqPart[paramKey];
+                if (!Array.isArray(paramValue)) {
+                    continue;
+                }
+                reqPolluted[paramKey] = paramValue;
+                // Prends le dernier élément du tableau pour éviter la pollution de variables multiples
+                reqPart[paramKey] = paramValue[paramValue.length - 1];
+            }
+        }
+        if (whitelist.length > 0) {
+            for (let k = 0; k < whitelist.length; k++) {
+                const whitelistedParam = whitelist[k];
+                if (reqPolluted[whitelistedParam]) {
+                    reqPart[whitelistedParam] = reqPolluted[whitelistedParam];
+                    delete reqPolluted[whitelistedParam];
+                }
+            }
+        }
+    }
+    return function hppMiddleware(req, res, next) {
+        if (checkQuery && req.query) {
+            putAside(req, "query", "queryPolluted");
+        }
+        if (checkBody && req.body) {
+            // Optionnellement, vérifier le header Content-Type pour url-encoded ou autres formats
+            // mais ici on s'aligne globalement sur ce qui a déjà été parsé.
+            putAside(req, "body", "bodyPolluted");
+        }
+        next();
+    };
+}
+//# sourceMappingURL=XyPrissHPP.js.map

package/dist/src/middleware/built-in/security/XyPrissHPP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissHPP.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissHPP.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;IAET,SAAS,QAAQ,CAAC,GAAQ,EAAE,UAAkB,EAAE,WAAmB;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QAEpD,IAAI,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;QAEnC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAErC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7B,SAAS;gBACb,CAAC;gBAED,WAAW,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;gBACnC,uFAAuF;gBACvF,OAAO,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAChC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;oBAC1D,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,SAAS,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QACvD,IAAI,UAAU,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,sFAAsF;YACtF,gEAAgE;YAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC"}

package/dist/src/middleware/built-in/security/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * XyPriss Built-in Security Modules
+ *
+ * Comprehensive security protection modules to protect servers
+ * with intelligent false positive avoidance
+ *
+ * Note: XSS protection is already handled by security-middleware.ts using 'xss' library
+ * Note: CSRF protection is already handled by BuiltInMiddleware using 'csrf-csrf' library
+ *
+ */
+export { BrowserOnlyProtector } from "./BrowserOnlyProtector";
+export { TerminalOnlyProtector } from "./TerminalOnlyProtector";
+export { MobileOnlyProtector, type MobileOnlyConfig, } from "./MobileOnlyProtector";
+export * from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/middleware/built-in/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,mBAAmB,EACnB,KAAK,gBAAgB,GACxB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,SAAS,CAAC"}

package/dist/src/middleware/built-in/security/index.js

@@ -0,0 +1,15 @@
+/**
+ * XyPriss Built-in Security Modules
+ *
+ * Comprehensive security protection modules to protect servers
+ * with intelligent false positive avoidance
+ *
+ * Note: XSS protection is already handled by security-middleware.ts using 'xss' library
+ * Note: CSRF protection is already handled by BuiltInMiddleware using 'csrf-csrf' library
+ *
+ */
+export { BrowserOnlyProtector } from "./BrowserOnlyProtector";
+export { TerminalOnlyProtector } from "./TerminalOnlyProtector";
+export { MobileOnlyProtector, } from "./MobileOnlyProtector";
+export * from "./types";
+//# sourceMappingURL=index.js.map

package/dist/src/middleware/built-in/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,mBAAmB,GAEtB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,SAAS,CAAC"}

package/dist/src/middleware/built-in/security/types.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Common types for security modules
+ */
+export interface SecurityDetectionResult {
+    isMalicious: boolean;
+    confidence: number;
+    detectedPatterns: string[];
+    sanitizedInput?: string;
+    riskLevel: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+    metadata?: Record<string, any>;
+}
+export interface SecurityModuleConfig {
+    enabled?: boolean;
+    strictMode?: boolean;
+    logAttempts?: boolean;
+    blockOnDetection?: boolean;
+    falsePositiveThreshold?: number;
+    customPatterns?: RegExp[];
+}
+export interface ContextInfo {
+    fieldName?: string;
+    fieldType?: string;
+    userRole?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    requestPath?: string;
+}
+export interface RequestSignatureConfig {
+    /** Custom header name for the signature (default: "XP-Request-Sig") */
+    headerName?: string;
+    /** The secret value that must match the header */
+    secret: string;
+    /** Custom error message for blocked requests */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Case-sensitive comparison (default: true) */
+    caseSensitive?: boolean;
+    /** Trim whitespace from header value (default: true) */
+    trimValue?: boolean;
+    /** Maximum allowed header length to prevent DoS (default: 512) */
+    maxHeaderLength?: number;
+    /** Rate limiting: max failed attempts before temporary block (default: 5) */
+    maxFailedAttempts?: number;
+    /** Rate limiting: block duration in milliseconds (default: 15 minutes) */
+    blockDuration?: number;
+    /** Disable rate limiting entirely (default: false) */
+    disableRateLimiting?: boolean;
+    /** Scale factor for rate limiting thresholds (default: 1.0) */
+    rateLimitScaleFactor?: number;
+    /** Minimum secret length requirement (default: 32) */
+    minSecretLength?: number;
+    /** Enable timing attack protection (default: true) */
+    timingSafeComparison?: boolean;
+    /** Reject requests with suspicious patterns (default: true) */
+    rejectSuspiciousPatterns?: boolean;
+}
+export interface FailedAttempt {
+    count: number;
+    blockedUntil: number | null;
+    lastAttempt: number;
+}
+/**
+ * Browser-Only Protection Configuration
+ *
+ * Blocks non-browser requests (cURL, Postman, scripts) while allowing legitimate browser access.
+ * Useful for APIs that should only be accessed through web browsers.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * browserOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * browserOnly: {
+ *   requireSecFetch: true,
+ *   blockAutomationTools: true,
+ *   allowOriginRequests: true,
+ *   errorMessage: "Browser access required"
+ * }
+ * ```
+ */
+export interface BrowserOnlyConfig {
+    /** Enable browser-only protection (default: true when config provided) */
+    enable?: boolean;
+    /** Block requests without Sec-Fetch headers */
+    requireSecFetch?: boolean;
+    /** Block requests with curl/wget user agents */
+    blockAutomationTools?: boolean;
+    /** Require complex Accept header */
+    requireComplexAccept?: boolean;
+    /** Allow requests with Origin header (CORS) */
+    allowOriginRequests?: boolean;
+    /** Custom error message */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Custom validation function */
+    customValidator?: (req: any) => boolean;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+/**
+ * Terminal-Only Protection Configuration
+ *
+ * Blocks browser requests while allowing terminal/API tools.
+ * Perfect for API-only endpoints or development tools.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * terminalOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * terminalOnly: {
+ *   blockSecFetch: true,
+ *   allowedTools: ["curl", "wget"],
+ *   blockBrowserIndicators: true,
+ *   debug: true
+ * }
+ * ```
+ */
+export interface TerminalOnlyConfig {
+    /** Enable terminal-only protection (default: true when config provided) */
+    enable?: boolean;
+    /** Block requests with Sec-Fetch headers (browsers) */
+    blockSecFetch?: boolean;
+    /** Allow specific automation tools (whitelist approach) */
+    allowedTools?: string[];
+    /** Block requests with complex browser headers */
+    blockBrowserIndicators?: boolean;
+    /** Require simple Accept header */
+    requireSimpleAccept?: boolean;
+    /** Custom error message */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Custom validation function */
+    customValidator?: (req: any) => boolean;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/middleware/built-in/security/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACnC,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IAEf,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,+DAA+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,sDAAsD;IACtD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,+DAA+D;IAC/D,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,iBAAiB;IAC9B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,oCAAoC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IAExC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IAC/B,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,kDAAkD;IAClD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,mCAAmC;IACnC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IACxC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/src/middleware/built-in/security/types.js

@@ -0,0 +1,5 @@
+/**
+ * Common types for security modules
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/middleware/built-in/security/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/src/middleware/safe-json-middleware.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Safe JSON Middleware for Express
+ * Automatically handles circular references in JSON responses
+ */
+import { Request, Response, NextFunction } from "../types";
+export interface SafeJsonOptions {
+    /**
+     * Enable safe JSON serialization for all responses
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Maximum depth for object serialization
+     * @default 10
+     */
+    maxDepth?: number;
+    /**
+     * Maximum string length before truncation
+     * @default 1000
+     */
+    truncateStrings?: number;
+    /**
+     * Include non-enumerable properties
+     * @default false
+     */
+    includeNonEnumerable?: boolean;
+    /**
+     * Log when circular references are detected
+     * @default false
+     */
+    logCircularRefs?: boolean;
+    /**
+     * Custom replacer function for additional handling
+     */
+    customReplacer?: (key: string, value: any) => any;
+}
+/**
+ * Creates middleware that safely handles JSON serialization
+ */
+export declare function createSafeJsonMiddleware(options?: SafeJsonOptions): (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Quick setup function for common use cases
+ */
+export declare function setupSafeJson(app: any, options?: SafeJsonOptions): void;
+/**
+ * Utility function to safely stringify any object
+ */
+export declare function safeJsonStringify(obj: any, options?: SafeJsonOptions): string;
+/**
+ * Enhanced res.json replacement that can be used manually
+ */
+export declare function sendSafeJson(res: Response, obj: any, options?: SafeJsonOptions): void;
+/**
+ * Middleware specifically for debugging circular references
+ */
+export declare function createCircularRefDebugger(): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=safe-json-middleware.d.ts.map

package/dist/src/middleware/safe-json-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-json-middleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/safe-json-middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC5B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;CACrD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,eAAoB,IAc9D,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,MAAM,YAAY,UAmEzB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,GAAE,eAAoB,QAEpE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,GAAG,EACR,OAAO,GAAE,eAAoB,GAC9B,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,YAAY,CACxB,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,GAAG,EACR,OAAO,GAAE,eAAoB,QAahC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,KAEjC,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,MAAM,YAAY,UAkDzB"}

package/dist/src/middleware/safe-json-middleware.js

@@ -0,0 +1,150 @@
+/**
+ * Safe JSON Middleware for Express
+ * Automatically handles circular references in JSON responses
+ */
+import { XyPriStringify } from "xypriss-security";
+import { logger } from "../shared/logger/Logger";
+/**
+ * Creates middleware that safely handles JSON serialization
+ */
+export function createSafeJsonMiddleware(options = {}) {
+    const opts = {
+        enabled: true,
+        maxDepth: 10,
+        truncateStrings: 1000,
+        includeNonEnumerable: false,
+        logCircularRefs: false,
+        customReplacer: undefined,
+        ...options,
+    };
+    return function safeJsonMiddleware(req, res, next) {
+        if (!opts.enabled) {
+            return next();
+        }
+        // Store the original json method
+        const originalJson = res.json.bind(res);
+        const originalSend = res.send.bind(res);
+        // Override res.json to use safe serialization
+        res.json = function (obj) {
+            try {
+                // Try standard JSON.stringify first for performance
+                const standardResult = JSON.stringify(obj);
+                return originalJson(obj);
+            }
+            catch (error) {
+                if (opts.logCircularRefs &&
+                    error.message.includes("circular")) {
+                    logger.debug("server", "🔄 Circular reference detected, using safe serialization:", {
+                        url: req.url,
+                        method: req.method,
+                        error: error.message,
+                    });
+                }
+                try {
+                    // Use our safe serialization
+                    const safeResult = XyPriStringify(obj);
+                    const parsedResult = JSON.parse(safeResult);
+                    return originalJson(parsedResult);
+                }
+                catch (safeError) {
+                    logger.debug("server", "❌ Safe JSON serialization failed:", safeError);
+                    return originalJson({
+                        error: "Serialization failed",
+                        message: "Unable to serialize response object",
+                        originalError: safeError.message,
+                    });
+                }
+            }
+        };
+        // Override res.send to handle objects that might be passed directly
+        res.send = function (body) {
+            if (typeof body === "object" &&
+                body !== null &&
+                !Buffer.isBuffer(body)) {
+                // If it's an object, use our safe json method
+                return res.json(body);
+            }
+            return originalSend(body);
+        };
+        next();
+    };
+}
+/**
+ * Quick setup function for common use cases
+ */
+export function setupSafeJson(app, options = {}) {
+    app.use(createSafeJsonMiddleware(options));
+}
+/**
+ * Utility function to safely stringify any object
+ */
+export function safeJsonStringify(obj, options = {}) {
+    try {
+        return JSON.stringify(obj);
+    }
+    catch (error) {
+        return XyPriStringify(obj);
+    }
+}
+/**
+ * Enhanced res.json replacement that can be used manually
+ */
+export function sendSafeJson(res, obj, options = {}) {
+    try {
+        const result = safeJsonStringify(obj, options);
+        res.setHeader("Content-Type", "application/json");
+        res.send(result);
+    }
+    catch (error) {
+        console.error("❌ Failed to send safe JSON:", error);
+        res.status(500).json({
+            error: "Internal Server Error",
+            message: "Failed to serialize response",
+        });
+    }
+}
+/**
+ * Middleware specifically for debugging circular references
+ */
+export function createCircularRefDebugger() {
+    return function circularRefDebugger(req, res, next) {
+        const originalJson = res.json.bind(res);
+        res.json = function (obj) {
+            try {
+                JSON.stringify(obj);
+                return originalJson(obj);
+            }
+            catch (error) {
+                if (error.message.includes("circular")) {
+                    console.log("Circular Reference Debug Info:");
+                    console.log("  Route:", req.method, req.url);
+                    console.log("  Object type:", typeof obj);
+                    console.log("  Object constructor:", obj?.constructor?.name);
+                    console.log("  Object keys:", Object.keys(obj || {}));
+                    // Try to identify the circular reference
+                    const seen = new WeakSet();
+                    const findCircular = (obj, path = []) => {
+                        if (typeof obj !== "object" || obj === null)
+                            return [];
+                        if (seen.has(obj))
+                            return path;
+                        seen.add(obj);
+                        for (const [key, value] of Object.entries(obj)) {
+                            const result = findCircular(value, [...path, key]);
+                            if (result.length > 0)
+                                return result;
+                        }
+                        return [];
+                    };
+                    const circularPath = findCircular(obj);
+                    if (circularPath.length > 0) {
+                        console.log("  Circular path:", circularPath.join(" -> "));
+                    }
+                }
+                throw error;
+            }
+        };
+        next();
+    };
+}
+//# sourceMappingURL=safe-json-middleware.js.map

package/dist/src/middleware/safe-json-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-json-middleware.js","sourceRoot":"","sources":["../../../src/middleware/safe-json-middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAwCjD;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAA2B,EAAE;IAClE,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE;QACZ,eAAe,EAAE,IAAI;QACrB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,SAED;QACf,GAAG,OAAO;KACb,CAAC;IAEF,OAAO,SAAS,kBAAkB,CAC9B,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,iCAAiC;QACjC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,8CAA8C;QAC9C,GAAG,CAAC,IAAI,GAAG,UAAU,GAAQ;YACzB,IAAI,CAAC;gBACD,oDAAoD;gBACpD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IACI,IAAI,CAAC,eAAe;oBACpB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EACpC,CAAC;oBACC,MAAM,CAAC,KAAK,CACR,QAAQ,EACR,2DAA2D,EAC3D;wBACI,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,KAAK,EAAE,KAAK,CAAC,OAAO;qBACvB,CACJ,CAAC;gBACN,CAAC;gBAED,IAAI,CAAC;oBACD,6BAA6B;oBAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;oBACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC5C,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,SAAc,EAAE,CAAC;oBACtB,MAAM,CAAC,KAAK,CACR,QAAQ,EACR,mCAAmC,EACnC,SAAS,CACZ,CAAC;oBACF,OAAO,YAAY,CAAC;wBAChB,KAAK,EAAE,sBAAsB;wBAC7B,OAAO,EAAE,qCAAqC;wBAC9C,aAAa,EAAE,SAAS,CAAC,OAAO;qBACnC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC,CAAC;QAEF,oEAAoE;QACpE,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC1B,IACI,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACb,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxB,CAAC;gBACC,8CAA8C;gBAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAQ,EAAE,UAA2B,EAAE;IACjE,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC7B,GAAQ,EACR,UAA2B,EAAE;IAE7B,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CACxB,GAAa,EACb,GAAQ,EACR,UAA2B,EAAE;IAE7B,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,8BAA8B;SAC1C,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACrC,OAAO,SAAS,mBAAmB,CAC/B,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,GAAG,CAAC,IAAI,GAAG,UAAU,GAAQ;YACzB,IAAI,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,GAAG,CAAC,CAAC;oBAC1C,OAAO,CAAC,GAAG,CACP,uBAAuB,EACvB,GAAG,EAAE,WAAW,EAAE,IAAI,CACzB,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;oBAEtD,yCAAyC;oBACzC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC3B,MAAM,YAAY,GAAG,CACjB,GAAQ,EACR,OAAiB,EAAE,EACX,EAAE;wBACV,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;4BAAE,OAAO,EAAE,CAAC;wBACvD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,OAAO,IAAI,CAAC;wBAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBAEd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;4BACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gCAAE,OAAO,MAAM,CAAC;wBACzC,CAAC;wBACD,OAAO,EAAE,CAAC;oBACd,CAAC,CAAC;oBAEF,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CACP,kBAAkB,EAClB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAC5B,CAAC;oBACN,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC"}