fix(middleware): remove unsafe clone

_dev_deps.ts

@@ -2,6 +2,6 @@ export {
   assert,
   assertEquals,
   assertThrows,
-} from "https://deno.land/std@0.180.0/testing/asserts.ts";
-export { describe, it } from "https://deno.land/std@0.180.0/testing/bdd.ts";
-export { equalsResponse } from "https://deno.land/x/http_utils@1.0.0-beta.13/response.ts";
+} from "https://deno.land/std@0.181.0/testing/asserts.ts";
+export { describe, it } from "https://deno.land/std@0.181.0/testing/bdd.ts";
+export { equalsResponse } from "https://deno.land/x/http_utils@1.0.0/response.ts";

_tools/meta.ts

@@ -47,5 +47,10 @@ export const makeOptions = (version: string): BuildOptions => ({
       name: "@httpland/hsts-parser",
       version: "1.0.0-beta.1",
     },
+    "https://deno.land/x/http_utils@1.0.0/message.ts": {
+      name: "@httpland/http-utils",
+      version: "1.0.0",
+      subPath: "message.js",
+    },
   },
 });

deps.ts

@@ -9,6 +9,7 @@ export {
   type StrictTransportSecurity,
   stringify,
 } from "https://deno.land/x/hsts_parser@1.0.0-beta.1/mod.ts";
+export { withHeader } from "https://deno.land/x/http_utils@1.0.0/message.ts";
 
 export const enum SecurityHeaders {
   StrictTransportSecurity = "strict-transport-security",

middleware.ts

@@ -6,6 +6,7 @@ import {
   SecurityHeaders,
   type StrictTransportSecurity,
   stringify,
+  withHeader,
 } from "./deps.ts";
 
 /**
@@ -52,16 +53,14 @@ export function hsts(
   return async (request, next) => {
     const response = await next(request);
 
-    return withSts(response, stsValue);
-  };
-}
-
-export function withSts(response: Response, fieldValue: string): Response {
-  response = response.clone();
+    if (response.headers.has(SecurityHeaders.StrictTransportSecurity)) {
+      return response;
+    }
 
-  if (!response.headers.has(SecurityHeaders.StrictTransportSecurity)) {
-    response.headers.set(SecurityHeaders.StrictTransportSecurity, fieldValue);
-  }
-
-  return response;
+    return withHeader(
+      response,
+      SecurityHeaders.StrictTransportSecurity,
+      stsValue,
+    );
+  };
 }

middleware_test.ts

@@ -1,4 +1,4 @@
-import { hsts, withSts } from "./middleware.ts";
+import { hsts } from "./middleware.ts";
 import {
   assert,
   assertThrows,
@@ -59,17 +59,3 @@ describe("hsts", () => {
     assertThrows(() => hsts({ maxAge: NaN }));
   });
 });
-
-describe("withSts", () => {
-  it("should add sts header", async () => {
-    assert(
-      await equalsResponse(
-        withSts(new Response(), "max-age=100"),
-        new Response(null, {
-          headers: { "strict-transport-security": "max-age=100" },
-        }),
-        true,
-      ),
-    );
-  });
-});