Comments (9)
Wow, that is a crazy bug. I reported to to qs
to get is fixed soon: ljharb/qs#11
from body-parser.
When switching to old version of body parser ~1.0.0 (1.0.2) which uses ~0.6.6 for qs, everything works as expected.
from body-parser.
Found that bug yesterday. Wanted to investigate a little bit more before reporting it. 👍
But using body-parser@~1.0.0
does not fix the problem.
Try with this: myArray[0][a]=aaa&myArray[0][b]=bbb&myArray[1][a]=aa&myArray[1][b]=bb
You'll only get b in the inner-objects
from body-parser.
I have made a PR ljharb/qs#13 to fix this. Just have to wait now :)
from body-parser.
Cool. As soon as there is a new qs I'll publish another patch version of this module with it.
Sorry for any problems this caused :( there wasn't an easy way to get just the security fix without the using the qs rewrite, since the fix was only in 1.0.0.
from body-parser.
@dougwilson [email protected]
will have the fix according to ljharb/qs#13
from body-parser.
\m/
from body-parser.
You guys work fast - thanks!
from body-parser.
Published as 1.6.2
from body-parser.
Related Issues (20)
- bodyParser is deprecated HOT 24
- 'bodyParser' function is deprecated in index.d.ts file HOT 1
- HTTP:413 Request Entity Too Large HOT 5
- Conform with express-validator on parameter representation
- bodyParser is deprecated, error HOT 1
- bodyparser.json() shown as deprecated? (question) HOT 7
- pass options to qs thru urlencoded? HOT 4
- Cannot catch SyntaxError when user provides invalid JSON in body and content-type: application/json HOT 3
- Support for content-encoding: deflate raw HOT 7
- req.body could not be accessed when send as form data, but works fine with JSON HOT 3
- Pass custom parameters to `qs` HOT 3
- Update iconv-lite to latest 0.6.3 HOT 7
- support for ndjson
- Regular Expression Denial of Service (ReDoS) in [email protected] HOT 3
- Update `debug` dependency (memory leak leading to vulnerability) HOT 1
- api calls made with invalid json HOT 5
- Add support for removing body parser limit HOT 8
- BadRequestError: request size did not match content length HOT 7
- How to handle content-type mismatch? HOT 1
- CVE-2017-20165 - debug HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from body-parser.