Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Logo design by chris.ruppert@gmail.com
celebrate
is an Express middleware function that wraps the joi validation library. This allows you to use this middleware in any single route, or globally, and ensure that all of your inputs are correct before any handler function. The middleware allows you to validate req.params
, req.headers
, req.query
and req.body
(provided you are using body-parser
).
const express = require('express');
const BodyParser = require('body-parser');
const Joi = require('joi');
const Celebrate = require('celebrate');
const app = express();
app.use(BodyParser.json());
app.use(Logger());
app.post('/signup', Celebrate({
body: Joi.object().keys({
name: Joi.string().required(),
age: Joi.number().integer(),
role: Joi.string().default('admin')
})
}), (req, res) => {
// At this point, req.body has been validated and is equal to req.body.name if provided in the POST or set to 'admin' by joi
});
// By default, Express will try to send our errors back as HTML, if you want the JSON, add an error handler here
app.use((err, req, res) => {
if (err.isJoi) {
return res.status(400).send(err);
}
res.status(500).send('Some other error');
});
celebrate(schema)
Returns a function
with the middleware signature ((req, res, next)
).
schema
- a object where key
can be one of 'params', 'headers', 'query', and 'body'
and the value
is a joi validation schema. Only the key
s specified will be validated against the incomming req
object. If you omit a key, that part of the req
object will not be validated. A schema must contain at least one of the valid keys.celebrate
validates req
values in the following order:
req.headers
req.params
req.query
req.body
If at any point, any of the validation fails, the entire request will be considered invalid and the rest of the validation will be short-circuited.
Before opening issues on this repo, make sure your joi schema is correct and working like it's supposed to. The bulk of this code is just exposing the joi API as Express middleware. All of the heavy lifting still happens inside joi.
FAQs
A joi validation middleware for Express.
We found that celebrate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.