Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@hapi/joi - v16.1.8 Making the most powerful schema description language and data validator for JavaScript slightly more powerful.
Joi.string().escape()
-- replace <
, >
, &
, '
, "
, /
and \
with HTML entities.
Joi.string().numeric() -- Requires the string value to only contain 0-9.
Joi.string().base32() -- Requires the value to be a valid base32 string.
Joi.string().countryCode(type)
-- Requires the value to be a valid ISO alpha-2
or ISO alpha-3
country code.
Joi.string().password(rules) -- Requires the string value to match rules.
Joi.string().match(reference) -- Requires the string value to match the reference. -- Removed after validation.
Joi.array().inList(list, [label]) -- Requires the value in array to match the list. -- Overrides the key name for value in error messages.
$ npm i joi-plus
const Joi = require('joi-plus');
const schema = Joi.object({
email: Joi.string()
.email()
.required(),
password: Joi.string()
.password({
min: 8,
max: 120,
lowercase: true,
uppercase: true,
number: true,
special: true
})
.required(),
repeat_password: Joi.string()
.match('password')
.required(),
country: Joi.string()
.countryCode('alpha-2')
.required(),
contact_number: Joi.string()
.min(2)
.max(20)
.numeric()
.required(),
fav_animals: Joi.array()
.inList(['dog', 'cat', 'lion', 'tiger', 'elephant', 'hippo'], 'animals')
.required()
})
The above schema defines the following constraints:
email
password
repeat_password
password
country
contact_number
fav_animals
1.1.0
Update @hapi/joi from version 16.1.7 to 16.1.8
Add base32 string validation
Joi.string().base32()
Add ISO 3166 alpha-2
and alpha-3
country code string validation
Joi.string().countryCode('alpha-2'|'alpha-3')
Add escape <
, >
, &
, '
, "
, /
, \
and `
with HTML entities.
Joi.string().escape()
FAQs
Joi with extra rules for string and array.
The npm package joi-plus receives a total of 40 weekly downloads. As such, joi-plus popularity was classified as not popular.
We found that joi-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.