* fix: return status 500 when using validator 'form'
When using `validator('form', ...)` hono is returning a 500 status
when receiving a POST request with a JSON in request body, instead
of a bad request 400, .
This is happenning due to a unhandled error in an
underlying library (@miniflare).
https://github.com/cloudflare/miniflare/pull/711
The code changes in this PR are responsible to prepare the code to
handle possible TypeError that can be thrown in the future, by the lib
doing the FormData parsing, as per, https://fetch.spec.whatwg.org/#dom-body-formdata.
This PR should wait for bugfix on @miniflare.
* fix: json validator allowing Content-Type value other than json/application
Forgery attacks will try to avoid preflight requests when POSTing JSON
payloads manipulating the HTTP header Content-Type. For example, it will
send a JSON payload with `Content-Type=text/plain`, but the request stills
containing a JSON in its body. Those requests must be rejected.
Thus, when using the validator with the target set to `json`, we must
check the Content-Type header.
* fix: change check for json Content-Type header
Change JSON validation to only allow Content-Type header starting with
'application/json'.
Change from regexp test to starsWith builtin function, to make code more
expressive.
---------
Co-authored-by: Bruno Nascimento <bruno.nascimento@csghq.com>
* feat: add "all" option to parseBody
* feat: add parseBody option to `req.parseBody()`
* test: add single value (override) and multiple value cases to praseBody
* test: split parse case of parseBody
* chore: denoify
* refactor(body): make clear parseBody logic
* chore: denoify
* fix: single value of the field should not be parsed to array
* test: add some case of single value's field in "all" option
* chore: denoify
* fix: error to retrieve cookie
TypeError: Cannot read properties of undefined (reading 'split')
* add a test and denoify
---------
Co-authored-by: Yusuke Wada <yusuke@cloudflare.com>
* feat: improvement of parse body
* feat: add test for improvement of parse body commit
* chore: denoify and fix:format
* rm: test file on deno_dist
---------
Co-authored-by: irvan hakim <irvanhakim.dev@gmail.com>
* feat: implement stream api utility-class
* test: write the test of StreamApi
* feat: implement `c.stream` to context
* test: write the test of `c.stream()`
* chore: denoify
* fix: extend for bytes, remove buffer system, add pipe and log interface
* test: update test about log, pipe, etc... for streaming API
* feat: extend textStream interface, remove utf-8 content-type
* test: add test about `c.textStream`
* refactor: update some args name
* chore: denoify
* fix: for deno, removed the optional parameter of `write` and `writeln`
* chore: denoify
* feat: add charset for textStream content-type header
* fix: rename textStream to streamText
* fix: reuse stream in streamText for bundle size
* feat: add `stream.wait()` api
* chore: denoify
* fix: rename `stream.wait` to `stream.sleep`
* test: use `stream.sleep` for waiting
* refactor: remove `stream.log`
* fix: remove preHeader from `c.stream()` and use `transfer-encoding` only `c.streamText()`
* chore: denoify
* refactoring: remove preHeader initialize
* test: reduce sleep duration
* chore: denoify
Co-authored-by: Glen Maddern <glenmaddern@gmail.com>
