isabella232 / querystring-strict

THIS REPOSITORY IS NOW DEPRECATED

THIS REPOSITORY IS NOW DEPRECATED

This module had been merged into koa-qs, please use the first mode.

require('koa-qs')(app, 'first')

querystring-strict

This patches a koa app with this.query.foo return strict string. Disable multi values.

In 95% use cases, application only want string query params.

This patch can avoid some stupid TypeError and some security issues like MongoDB inject when the developers forget handling query params type check.

What's different

A normal request GET /foo?p=a,b&p=b,c.

• before patch

console.log('%j', this.query.p);
["a,b", "b,c"]

• after patch

console.log('%j', this.query.p);
"a,b"

Install

$ npm i koa-querystring-strict

Usage

var koa = require('koa');
var app = koa();
require('koa-querystring-strict')(app);

License

MIT