@json-api/query-parser - npm Package Compare versions

Comparing version 2.0.0 to 2.0.1

build/src/parser.js

@@ -223,4 +223,4 @@ /*
           },
-      peg$c53 = /^[^(),`![\]&=+#:@$*;']/,
-      peg$c54 = peg$classExpectation(["(", ")", ",", "`", "!", "[", "]", "&", "=", "+", "#", ":", "@", "$", "*", ";", "'"], true, false),
+      peg$c53 = /^[^(),`![\]&=+#:@$*;'?\/]/,
+      peg$c54 = peg$classExpectation(["(", ")", ",", "`", "!", "[", "]", "&", "=", "+", "#", ":", "@", "$", "*", ";", "'", "?", "/"], true, false),
 
@@ -227,0 +227,0 @@ peg$currPos          = 0,

build/test/grammar.js

@@ -95,2 +95,12 @@ "use strict";
         });
+        it("may not have URL-meaningful characters in it (?, &, =, /)", () => {
+            expect(() => parseSort("?test'")).to.throw(/sort fields list but "?"/i);
+            expect(() => parseSort("te?st'")).to.throw(/end of input but "?"/i);
+            expect(() => parseSort("/arte")).to.throw(/sort fields list but "\/"/i);
+            expect(() => parseSort("are/te")).to.throw(/end of input but "\/"/i);
+            expect(() => parseSort("=arte")).to.throw(/sort fields list but "="/i);
+            expect(() => parseSort("are=te")).to.throw(/end of input but "="/i);
+            expect(() => parseSort("&arte")).to.throw(/sort fields list but "&"/i);
+            expect(() => parseSort("are&te")).to.throw(/end of input but "&"/i);
+        });
         it("may have a percent sign in it", () => {
@@ -97,0 +107,0 @@ expect(parseSort("%C2%A9")).to.deep.equal([{

package.json

 {
   "name": "@json-api/query-parser",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "A query parser for the ?filter and ?sort param syntax used by @json-api/server",
@@ -5,0 +5,0 @@ "main": "build/src/index.js",

No alert changes

Improved metrics

Total package byte prevSize

66386

increased by1.17%

Lines of code

1854

increased by0.54%

No dependency changes