Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
The raw-body npm package is used to obtain the raw body of an incoming stream and supports decoding, parsing, and handling of different encodings. It is commonly used in the context of HTTP server handling, where it can be used to read and parse request bodies before they are processed by request handlers or middleware.
Getting raw body from a stream
This code creates an HTTP server that uses raw-body to read the request body as a string. It takes into account the content length and encoding specified in the request headers.
const http = require('http');
const getRawBody = require('raw-body');
http.createServer((req, res) => {
getRawBody(req, {
length: req.headers['content-length'],
encoding: 'utf8'
}, function (err, string) {
if (err) return res.end('Error');
res.end('Received: ' + string);
});
}).listen(3000);
Handling different encodings
This code demonstrates how to use raw-body to handle different text encodings by specifying the encoding option. The promise interface is used for asynchronous handling.
const getRawBody = require('raw-body');
function handleRequest(req) {
return getRawBody(req, {
encoding: 'utf8'
}).then(body => {
// body is now a string in utf8 encoding
}).catch(err => {
// handle error
});
}
Limiting body size
This code shows how to limit the size of the request body using raw-body by setting a limit option, which can help prevent denial of service attacks or other resource exhaustion issues.
const getRawBody = require('raw-body');
function handleRequest(req) {
return getRawBody(req, {
limit: '1mb'
}).then(body => {
// body will not be larger than 1mb
}).catch(err => {
// handle error if body is too large
});
}
body-parser is a popular Express middleware that parses incoming request bodies before your handlers, available under the req.body property. It wraps around raw-body and adds additional parsing capabilities for JSON, URL-encoded, and other formats. Unlike raw-body, which provides the raw buffer, body-parser converts the body into more usable formats.
co-body is a body parser for koa and express, built on top of raw-body, designed to work with co for generator-based flow control. It supports json, form and text types of bodies, but is more tailored for use with Koa and generators.
busboy is a streaming parser for HTML form data for node.js. It handles multipart/form-data, which is primarily used for uploading files. It differs from raw-body in that it's specialized for file uploads and form submissions, whereas raw-body is more about getting the entire raw request body.
Gets the entire buffer of a stream and validates its length against an expected length and limit. Ideal for parsing request bodies.
This is the callback version of cat-stream, which is much more convoluted because streams suck.
var getRawBody = require('raw-body')
app.use(function (req, res, next) {
getRawBody(req, {
expected: req.headers['content-length'],
limit: 1 * 1024 * 1024 // 1 mb
}, function (err, buffer) {
if (err)
return next(err)
req.rawBody = buffer
next()
})
})
expected
- The expected length of the stream.
If the contents of the stream do not add up to this length,
an 400
error code is returned.limit
- The byte limit of the body.
If the body ends up being larger than this limit,
a 413
error code is returned.This library only returns the raw buffer. If you want the string, you can do something like this:
getRawBody(req, function (err, buffer) {
if (err)
return next(err)
req.text = buffer.toString('utf8')
next()
})
The MIT License (MIT)
Copyright (c) 2013 Jonathan Ong me@jongleberry.com
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
Get and validate the raw body of a readable stream.
The npm package raw-body receives a total of 22,362,255 weekly downloads. As such, raw-body popularity was classified as popular.
We found that raw-body demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.