boom - npm Package Compare versions

Comparing version 2.1.0 to 2.2.0

lib/index.js

@@ -55,3 +55,3 @@ // Load modules
     if (this.message) {
-        this.output.payload.message = Hoek.escapeHtml(this.message);         // Prevent XSS from error message
+        this.output.payload.message = this.message;
     }
@@ -58,0 +58,0 @@ };

package.json

 {
   "name": "boom",
   "description": "HTTP-friendly error objects",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "repository": "git://github.com/spumko/boom",
@@ -6,0 +6,0 @@ "main": "index",

test/index.js

@@ -481,14 +481,4 @@ // Load modules
     });
-
-    describe('#reformat', function () {
-
-        it('enstatusCodes any HTML markup in the response payload', function (done) {
-
-            var boom = Boom.wrap(new Error('<script>alert(1)</script>'));
-            expect(boom.output.payload.message).to.not.contain('<script>');
-            done();
-        });
-    });
 });
 
 

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

51306

decreased by-0.73%

Lines of code

481

decreased by-1.43%

No dependency changes