@upstash/qstash - npm Package Compare versions

Comparing version 0.0.10 to 0.0.11

esm/consumer.js

@@ -76,3 +76,5 @@ import * as dntShim from "./_dnt.shims.js";
         const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
-        if (p.body.replaceAll("=", "") != base64url.encode(bodyHash).replace("=", "")) {
+        const padding = new RegExp(/=+$/);
+        if (p.body.replace(padding, "") !=
+            base64url.encode(bodyHash).replace(padding, "")) {
             throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
@@ -79,0 +81,0 @@ }

package.json

@@ -6,3 +6,3 @@ {
   "name": "@upstash/qstash",
-  "version": "v0.0.10",
+  "version": "v0.0.11",
   "description": "Official Deno/Typescript client for qStash",
@@ -9,0 +9,0 @@ "repository": {

script/consumer.js

@@ -103,3 +103,5 @@ "use strict";
         const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
-        if (p.body.replaceAll("=", "") != base64url.encode(bodyHash).replace("=", "")) {
+        const padding = new RegExp(/=+$/);
+        if (p.body.replace(padding, "") !=
+            base64url.encode(bodyHash).replace(padding, "")) {
             throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
@@ -106,0 +108,0 @@ }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

33240

0.36%

Lines of code

859

0.47%

No dependency changes