formidable - npm Package Compare versions

Comparing version 0.9.11 to 1.0.0

lib/formidable/incoming_form.js

@@ -207,4 +207,4 @@ if (global.GENTLY) require = GENTLY.hijack(require);
     var m;
-    if (m = this.headers['content-type'].match(/boundary=([^;]+)/i)) {
-      this._initMultipart(m[1]);
+    if (m = this.headers['content-type'].match(/boundary=(?:"([^"]+)"|([^;]+))/i)) {
+      this._initMultipart(m[1] || m[2]);
     } else {
@@ -211,0 +211,0 @@ this._error(new Error('bad content-type header, no multipart boundary'));

package.json

@@ -1,6 +0,14 @@
-{ "name" : "formidable",
-  "version": "0.9.11",
-  "dependencies": {"gently": ">=0.7.0"},
-  "directories" : { "lib" : "./lib/formidable" },
-  "main" : "./lib/formidable/index"
-}
+{
+  "name": "formidable",
+  "version": "1.0.0",
+  "dependencies": {
+    "gently": ">=0.7.0"
+  },
+  "directories": {
+    "lib": "./lib/formidable"
+  },
+  "main": "./lib/formidable/index",
+  "engines": {
+    "node": "*"
+  }
+}

test/simple/test-incoming-form.js

@@ -324,2 +324,11 @@ require('../common');
 
+  (function testQuotedBoundary() {
+    form.headers = {'content-type': 'multipart/form-data; boundary="' + BOUNDARY + '"'};
+
+    gently.expect(form, '_initMultipart', function(boundary) {
+      assert.equal(boundary, BOUNDARY);
+    });
+    form._parseContentType();
+  })();
+
   (function testNoBoundary() {
@@ -326,0 +335,0 @@ form.headers = {'content-type': 'multipart/form-data'};

Fixed alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 8 instances in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Lines of code

1723

increased by0.41%

Number of low quality alerts

1

decreased by-50%

Number of medium supply chain risk alerts

3

decreased by-72.73%

Worsened metrics

Total package byte prevSize

62120

decreased by-66.45%

Number of package files

25

decreased by-24.24%

No dependency changes