http-message-signatures - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

lib/httpbis/index.js

@@ -65,3 +65,5 @@ "use strict";
             const { pathname } = typeof context.url === 'string' ? new URL(context.url) : context.url;
-            return [decodeURI(pathname)];
+            // https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-message-signatures#section-2.2.6
+            // empty path means use `/`
+            return [pathname || '/'];
         }
@@ -75,3 +77,3 @@ case '@query': {
             // absent query params means use `?`
-            return [decodeURI(search) || '?'];
+            return [search || '?'];
         }
@@ -86,7 +88,7 @@ case '@query-param': {
             }
-            const name = params.get('name').toString();
+            const name = decodeURIComponent(params.get('name').toString());
             if (!searchParams.has(name)) {
                 throw new Error(`Expected query parameter "${name}" not found`);
             }
-            return searchParams.getAll(name);
+            return searchParams.getAll(name).map((value) => encodeURIComponent(value));
         }
@@ -93,0 +95,0 @@ case '@status': {

package.json

 {
   "name": "http-message-signatures",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "HTTP message signature implementation",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

113085

increased by0.25%

Lines of code

1360

increased by0.15%

No dependency changes