New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@eggjs/jsonp

Package Overview
Dependencies
Maintainers
10
Versions
53
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@eggjs/jsonp

jsonp support for egg

Source
npmnpm
Version
4.0.2
Version published
Weekly downloads
0
Maintainers
10
Weekly downloads
 
Created
Source

@eggjs/jsonp

NPM version Known Vulnerabilities npm download Node.js Version PRs Welcome

An egg plugin for jsonp support.

Usage

egg built-in plugin jsonp is enabled by default.

// {app_root}/config/plugin.ts

export default {
  jsonp: {
    enable: true,
  },
};

Configuration

  • {String|Array} callback - jsonp callback method key, default to [ '_callback', 'callback' ]
  • {Number} limit - callback method name's max length, default to 50
  • {Boolean} csrf - enable csrf check or not. default to false
  • {String|RegExp|Array} whiteList - referrer white list

if whiteList's type is RegExp, referrer must match whiteList, pay attention to the first ^ and last /.

export default {
  jsonp: {
    whiteList: /^https?:\/\/test.com\//,
  },
};

// matchs referrer:
// https://test.com/hello
// http://test.com/

if whiteList's type is String and starts with .:

export default {
  jsonp: {
    whiteList: '.test.com',
  },
};

// matchs domain test.com:
// https://test.com/hello
// http://test.com/

// matchs subdomain
// https://sub.test.com/hello
// http://sub.sub.test.com/

if whiteList's type is String and not starts with .:

export default {
  jsonp: {
    whiteList: 'sub.test.com',
  },
};

// only matchs domain sub.test.com:
// https://sub.test.com/hello
// http://sub.test.com/

whiteList also can be an array:

export default {
  jsonp: {
    whiteList: ['.foo.com', '.bar.com'],
  },
};

see config/config.default.ts for more detail.

API

  • ctx.acceptJSONP - detect if response should be jsonp, readonly

Example

Standard Application Usage

In app/router.ts

// Create once and use in any router you want to support jsonp.
const jsonp = app.jsonp();

app.get('/default', jsonp, 'jsonp.index');
app.get('/another', jsonp, 'jsonp.another');

// Customize by create another jsonp middleware with specific configurations.
app.get('/customize', app.jsonp({ callback: 'fn' }), 'jsonp.customize');

tegg HttpController Usage

TODO: TBD

Questions & Suggestions

Please open an issue here.

License

MIT

Contributors

Contributors

Made with contributors-img.

Keywords

egg

FAQs

Package last updated on 06 Oct 2026

Related posts