
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
url地址操作工具。
1.可将JSON对象,作为参数拼接进地址,支持安全编码
2.地址检查,比对地址的合法性
npm安装命令
npm install --save mod-path
引入包
import P from "mod-path"
范例
import P from "../src/index.js";
//拼装Data
let data={
name:"MOD",
age:12,
gender:"male",
hobby:["videogame","tree",{new:"keep"}],
}
var strData = P.encodeData("")
console.log(strData);
console.log(P.encodeData(data))
var URL = P.encodeURL("www.baidu.com",data,{encode:true})
var URL2 = P.encodeURL("www.baidu.com#wechat",data,{encode:false})
console.log(URL,"\n",URL2);
console.log(P.decodeURL(URL,{encode:true}).query)
console.log(P.decodeURL(URL2,{encode:false}))
console.log(P.validURL('http://user:pass@host.com:8080/p/a/t/h?name=mod',"http://user:pass@host.com:8080/p/a/t/h?name=mod"));
console.log(P.validURL('http://user:pass@host.com:8080/p/a/t/h?name=mod',"http://user:pass@host.com:8080/p/a/t/h?name=ssse"));
console.log(P.validURL('https://user:pass@host.com:8080/p/a/t/h?name=mod',"http://user:pass@host.com:8080/p/a/t/h?name=mod"));
[instance].encode 是否自动在生成地址时采用安全编码 默认 true ,启用安全编码 false 则取消安全编码
import P from "../src/index.js";
console.log(P.encode) // true
P.encode = false
console.log(P.encode) // false
将地址拼接参数 baseURL:String,//需要拼接参数的地址 data:JSON Object,//参数JSON格式 config:Object,//同全局配置属性,可每次调用该方法时,灵活设置,如空则默认全局配置。
import P from "../src/index.js";
P.encodeURL('www.baiduc.com',{name:"MOD",age:12,gender:"male",hobby:["videogame","tree",{new:"keep"}]});
//www.baidu.com%3Fname%3DMOD%26age%3D12%26gender%3Dmale%26hobby%3D%5B%22videogame%22%2C%22tree%22%2C%7B%22new%22%3A%22keep%22%7D%5D
P.encodeURL('www.baiduc.com#wechat',{name:"MOD",age:12,gender:"male",hobby:["videogame","tree",{new:"keep"}]},{encode:false});
//www.baidu.com?name=MOD&age=12&gender=male&hobby=["videogame","tree",{"new":"keep"}]#wechat
可将携参地址的参数解析成对象 locationURL:String,//携参地址 config:Object,//同全局配置属性,可每次调用该方法时,灵活设置,如空则默认全局配置方式进行解析。
P.decodeURL('www.baidu.com%3Fname%3DMOD%26age%3D12%26gender%3Dmale%26hobby%3D%5B%22videogame%22%2C%22tree%22%2C%7B%22new%22%3A%22keep%22%7D%5D').query;
//{name:"MOD",age:12,gender:"male",hobby:["videogame","tree",{new:"keep"}]}
配置对象结构说明
{
encode:true,//Boolean是否在本次调用时启用安全编码,如缺省 则依照全局配置
hash:"wechat",//可添入哈希值
}
FAQs
encodeURIComponent decodeURIComponent
We found that mod-path demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.