Fabio/webssh2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: sanitize object no longer mutates original object

Browse source
This commit is contained in:
Bill Church 2024-08-16 22:47:42 +00:00
parent f14f0bccf5
commit ea017016b7
No known key found for this signature in database
1 changed files with 21 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
app/utils.js
View file

@ -2,31 +2,35 @@
// /app/utils.js
/**
* Recursively sanitizes a copy of an object by replacing the value of any `password`
* property with asterisks (*) matching the length of the original password.
*
* Sanitizes an object by replacing sensitive properties with asterisks.
* @param {Object} obj - The object to sanitize.
* @returns {Object} - The sanitized copy of the object.
* @param {Array} [properties=['password', 'key', 'secret', 'token']] - The list of properties to sanitize.
* @returns {Object} - The sanitized object.
*/
function sanitizeObject(obj) {
if (obj && typeof obj === 'object') {
const copy = Array.isArray(obj) ? [] : Object.assign({}, obj);
function sanitizeObject(
obj,
properties = ["password", "key", "secret", "token"]
) {
if (obj && typeof obj === "object") {
const copy = Array.isArray(obj) ? [] : Object.assign({}, obj)
for (const key in obj) {
if (obj.hasOwnProperty(key)) { // eslint-disable-line no-prototype-builtins
if (key === 'password' && typeof obj[key] === 'string') {
copy[key] = '*'.repeat(obj[key].length);
} else if (typeof obj[key] === 'object') {
copy[key] = sanitizeObject(obj[key]);
if (obj.hasOwnProperty(key)) {
// eslint-disable-line no-prototype-builtins
if (properties.includes(key) && typeof obj[key] === "string") {
copy[key] = "*".repeat(obj[key].length)
} else if (typeof obj[key] === "object") {
copy[key] = sanitizeObject(obj[key], properties)
} else {
copy[key] = obj[key];
copy[key] = obj[key]
}
}
}
return copy;
return copy
}
return obj;
return obj
}
exports.sanitizeObject = sanitizeObject;
exports.sanitizeObject = sanitizeObject