@hono/node-server - npm Package Compare versions

Comparing version 1.4.0 to 1.4.1

dist/index.js

@@ -43,2 +43,3 @@ "use strict";
 // src/request.ts
+var import_node_path = require("path");
 var import_node_stream = require("stream");
@@ -69,3 +70,9 @@ var newRequestFromIncoming = (method, url, incoming) => {
   get url() {
-    return `http://${this[incomingKey].headers.host}${this[incomingKey].url}`;
+    let path = this[incomingKey]["path"];
+    if (!path) {
+      const originalPath = this[incomingKey].url;
+      path = /\.\./.test(originalPath) ? (0, import_node_path.resolve)(originalPath) : originalPath;
+      this[incomingKey]["path"] = path;
+    }
+    return `http://${this[incomingKey].headers.host}${path}`;
   },
@@ -72,0 +79,0 @@ [getRequestCache]() {

dist/listener.js

@@ -38,2 +38,3 @@ "use strict";
 // src/request.ts
+var import_node_path = require("path");
 var import_node_stream = require("stream");
@@ -64,3 +65,9 @@ var newRequestFromIncoming = (method, url, incoming) => {
   get url() {
-    return `http://${this[incomingKey].headers.host}${this[incomingKey].url}`;
+    let path = this[incomingKey]["path"];
+    if (!path) {
+      const originalPath = this[incomingKey].url;
+      path = /\.\./.test(originalPath) ? (0, import_node_path.resolve)(originalPath) : originalPath;
+      this[incomingKey]["path"] = path;
+    }
+    return `http://${this[incomingKey].headers.host}${path}`;
   },
@@ -67,0 +74,0 @@ [getRequestCache]() {

dist/request.js

@@ -26,2 +26,3 @@ "use strict";
 module.exports = __toCommonJS(request_exports);
+var import_node_path = require("path");
 var import_node_stream = require("stream");
@@ -52,3 +53,9 @@ var newRequestFromIncoming = (method, url, incoming) => {
   get url() {
-    return `http://${this[incomingKey].headers.host}${this[incomingKey].url}`;
+    let path = this[incomingKey]["path"];
+    if (!path) {
+      const originalPath = this[incomingKey].url;
+      path = /\.\./.test(originalPath) ? (0, import_node_path.resolve)(originalPath) : originalPath;
+      this[incomingKey]["path"] = path;
+    }
+    return `http://${this[incomingKey].headers.host}${path}`;
   },
@@ -55,0 +62,0 @@ [getRequestCache]() {

dist/server.js

@@ -40,2 +40,3 @@ "use strict";
 // src/request.ts
+var import_node_path = require("path");
 var import_node_stream = require("stream");
@@ -66,3 +67,9 @@ var newRequestFromIncoming = (method, url, incoming) => {
   get url() {
-    return `http://${this[incomingKey].headers.host}${this[incomingKey].url}`;
+    let path = this[incomingKey]["path"];
+    if (!path) {
+      const originalPath = this[incomingKey].url;
+      path = /\.\./.test(originalPath) ? (0, import_node_path.resolve)(originalPath) : originalPath;
+      this[incomingKey]["path"] = path;
+    }
+    return `http://${this[incomingKey].headers.host}${path}`;
   },
@@ -69,0 +76,0 @@ [getRequestCache]() {

dist/vercel.js

@@ -38,2 +38,3 @@ "use strict";
 // src/request.ts
+var import_node_path = require("path");
 var import_node_stream = require("stream");
@@ -64,3 +65,9 @@ var newRequestFromIncoming = (method, url, incoming) => {
   get url() {
-    return `http://${this[incomingKey].headers.host}${this[incomingKey].url}`;
+    let path = this[incomingKey]["path"];
+    if (!path) {
+      const originalPath = this[incomingKey].url;
+      path = /\.\./.test(originalPath) ? (0, import_node_path.resolve)(originalPath) : originalPath;
+      this[incomingKey]["path"] = path;
+    }
+    return `http://${this[incomingKey].headers.host}${path}`;
   },
@@ -67,0 +74,0 @@ [getRequestCache]() {

package.json

 {
   "name": "@hono/node-server",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Node.js Adapter for Hono",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

123359

increased by2.19%

Lines of code

3832

increased by1.86%

No dependency changes