connect - npm Package Compare versions

Comparing version 2.30.0 to 2.30.1

lib/middleware/multipart.js

@@ -148,4 +148,4 @@ /*!
         try {
-          req.body = qs.parse(data);
-          req.files = qs.parse(files);
+          req.body = qs.parse(data, { allowDots: false, allowPrototypes: true });
+          req.files = qs.parse(files, { allowDots: false, allowPrototypes: true });
         } catch (err) {
@@ -152,0 +152,0 @@ form.emit('error', err);

lib/middleware/query.js

@@ -12,4 +12,4 @@ /*!
 
-var qs = require('qs')
-  , parseurl = require('parseurl');
+var parseurl = require('parseurl');
+var qs = require('qs');
 
@@ -40,3 +40,3 @@ /**
       req.query = ~req.url.indexOf('?')
-        ? qs.parse(parseurl(req).query)
+        ? qs.parse(parseurl(req).query, { allowDots: false, allowPrototypes: true })
         : {};
@@ -43,0 +43,0 @@ }

package.json

 {
   "name": "connect",
   "description": "High performance middleware framework",
-  "version": "2.30.0",
+  "version": "2.30.1",
   "author": "TJ Holowaychuk <[e-mail]> (http://tjholowaychuk.com)",
@@ -21,3 +21,3 @@ "contributors": [
     "basic-auth-connect": "1.0.0",
-    "body-parser": "~1.13.1",
+    "body-parser": "~1.13.2",
     "bytes": "2.1.0",
@@ -27,3 +27,3 @@ "cookie": "0.1.3",
     "cookie-signature": "1.0.6",
-    "compression": "~1.5.0",
+    "compression": "~1.5.1",
     "connect-timeout": "~1.6.2",
@@ -34,3 +34,3 @@ "content-type": "~1.0.1",
     "depd": "~1.0.1",
-    "errorhandler": "~1.4.0",
+    "errorhandler": "~1.4.1",
     "express-session": "~1.11.3",
@@ -41,21 +41,21 @@ "finalhandler": "0.4.0",
     "method-override": "~2.3.3",
-    "morgan": "~1.6.0",
+    "morgan": "~1.6.1",
     "multiparty": "3.3.2",
     "on-headers": "~1.0.0",
     "parseurl": "~1.3.0",
-    "qs": "2.4.2",
+    "pause": "0.1.0",
+    "qs": "4.0.0",
     "response-time": "~2.3.1",
     "serve-favicon": "~2.3.0",
-    "serve-index": "~1.7.0",
+    "serve-index": "~1.7.1",
     "serve-static": "~1.10.0",
-    "type-is": "~1.6.3",
+    "type-is": "~1.6.4",
     "utils-merge": "1.0.0",
-    "vhost": "~3.0.0",
-    "pause": "0.0.1"
+    "vhost": "~3.0.0"
   },
   "devDependencies": {
     "dox": "~0.4.6",
-    "istanbul": "0.3.15",
+    "istanbul": "0.3.17",
     "mocha": "2.2.5",
-    "should": "6.0.3"
+    "should": "7.0.1"
   },
@@ -62,0 +62,0 @@ "license": "MIT",

No alert changes

Improved metrics

Total package byte prevSize

130487

increased by0.74%

Dependency changes

• + Addedpause@0.1.0(transitive)

• - Removedpause@0.0.1(transitive)

• - Removedqs@2.4.2(transitive)

• Updatedbody-parser@~1.13.2

• Updatedcompression@~1.5.1

• Updatederrorhandler@~1.4.1

• Updatedmorgan@~1.6.1

• Updatedpause@0.1.0

• Updatedqs@4.0.0

• Updatedserve-index@~1.7.1

• Updatedtype-is@~1.6.4