
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
deep-match2
Advanced tools
deepMatch(object, matcher)
All properties and nested objects mentioned in the matcher
are required to be
present in object
.
Library is version of deep-match. Difference:
options = { arrayOrderMatters: true }
to force that during comparison order of items in object
and matcher
should be the same.// two objects that look exactly the same
deepMatch({ a: 1, b: 2 } }, { a: 1, b: 2 }); // true
// additional properties on the left-hand side are ignored
deepMatch({ a: 1, b: 2 } }, { a: 1 }); // true
// everything on the right-hand side is required
deepMatch({ a: 1 } }, { a: 1, b: 2 }); // false
// same for arrays
deepMatch([1, 2, 3], [1, 2]); // true
deepMatch([1, 2, 3], [3, 4]); // false
Regular expressions and functions in the matcher
are run against the corresponding values in the object
:
deepMatch('aaa', /a+/); // true
deepMatch('bbb', /a+/); // false
deepMatch(['aaa', 'bbb'], [/a+/]); // true
deepMatch(['aaa', 'bbb'], [/a+/, /b+/]); // true
deepMatch(['aaa', 'ccc'], [/a+/, /b+/]); // false
deepMatch([1, 2, 3], [v => v === 1]); // true
When matching arrays order of items do not matters by default. To change it you can use additional parameter:
let opts = { arrayOrderMatters: true };
deepMatch([1, 2], [1, 2], opts); // true
deepMatch([1, 2], [2, 1], opts); // false
deepMatch([1, 2], [ 2], opts); // false
// disable checks for undefined items
// [,2] is the same as [undefined, 2]
deepMatch([1, 2], [ , 2], opts); // true
// arrayOrderMatters applies also to nested arrays:
source = { a1: [ {i1: []}, {i2: [1, 2, [31, 32, 33], 4, 5]} ]};
matcher = { a1: [ {i1: []}, {i2: [1, undefined, [32, 33 ], , 5]} ]};
deepMatch(source, matcher, opts); // false
deepMatch(source, matcher); // false
// Note that in case of arrayOrderMatters=false undefined is not skipped
source = { a1: [ {i1: []}, {i2: [1, 2, [31, 32, 33], 4, 5]} ]};
matcher = { a1: [ {i1: []}, {i2: [1, undefined, [31, undefined, 33], , 5]} ]};
deepMatch(source, matcher, opts); // true
deepMatch(source, matcher); // false
Values are compared according to the following rules:
matcher
match (note different behavior for option arrayOrderMatters
).arrayOrderMatters=true
value of undefined
matchers are skipped.arrayOrderMatters=false
(default behavior) value of undefined
matchers are NOT skipped.matcher
match.MIT
FAQs
Check if two values deeply match (optionally with arrayOrderMatters)
The npm package deep-match2 receives a total of 994 weekly downloads. As such, deep-match2 popularity was classified as not popular.
We found that deep-match2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.