
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
@fastify/formbody
Advanced tools
A simple plugin for Fastify that adds a content type parser for
the content type application/x-www-form-urlencoded.
npm i @fastify/formbody
| Plugin version | Fastify version | 
|---|---|
| ^8.x | ^5.x | 
| ^7.x | ^4.x | 
| ^6.x | ^3.x | 
| ^3.x | ^2.x | 
| ^2.x | ^1.x | 
Please note that if a Fastify version is out of support, then so are the corresponding versions of this plugin in the table above. See Fastify's LTS policy for more details.
Given the following code:
const fastify = require('fastify')()
fastify.register(require('@fastify/formbody'))
fastify.post('/', (req, reply) => {
  reply.send(req.body)
})
fastify.listen({ port: 8000 }, (err) => {
  if (err) throw err
})
And a POST body of:
foo=foo&bar=bar&answer=42
The sent reply would be the object:
{
  foo: 'foo',
  bar: 'bar',
  answer: 42
}
The plugin accepts an options object with the following properties:
bodyLimit: The maximum amount of bytes to process
before returning an error. If the limit is exceeded, a 500 error will be
returned immediately. When set to undefined the limit will be set to whatever
is configured on the parent Fastify instance. The default value is
whatever is configured in
fastify
(1048576 by default).parser: The default parser used is the querystring.parse built-in.  You can change this default by passing a parser function e.g. fastify.register(require('@fastify/formbody'), { parser: str => myParser(str) })Previously, the external qs lib was used that did things like parse nested objects. For example:
foo[one]=foo&foo[two]=bar{ foo: { one: 'foo', two: 'bar' } }The way this is handled now using the built-in querystring.parse:
foo[one]=foo&foo[two]=bar{ 'foo[one]': 'foo', 'foo[two]': 'bar' }If you need nested parsing, you must configure it manually by installing the qs lib (npm i qs), and then configure an optional parser:
const fastify = require('fastify')()
const qs = require('qs')
fastify.register(require('@fastify/formbody'), { parser: str => qs.parse(str) })
Licensed under MIT.
body-parser is a popular middleware for parsing request bodies in Express applications. It supports various content types including JSON, raw, text, and URL-encoded form data. Compared to @fastify/formbody, body-parser is more versatile but is designed specifically for Express.
qs is a query string parsing and stringifying library with support for nested objects. It can be used to parse URL-encoded form data in various frameworks. While qs is not a Fastify plugin, it can be used in conjunction with Fastify to achieve similar functionality to @fastify/formbody.
formidable is a Node.js module for parsing form data, especially file uploads. It supports multipart and URL-encoded form data. While formidable is more focused on file uploads, it can also handle URL-encoded data, making it a more comprehensive solution compared to @fastify/formbody.
FAQs
A module for Fastify to parse x-www-form-urlencoded bodies
The npm package @fastify/formbody receives a total of 470,615 weekly downloads. As such, @fastify/formbody popularity was classified as popular.
We found that @fastify/formbody demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.