Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: #438 default forbidUnknownValues to true #1390

Closed
wants to merge 9 commits into from

Conversation

mikeguta
Copy link

Description

This is an attempted fix for #438
It does so with a breaking change that uses a safe default of true for forbidUnknownValues. Only an explicit false value would preserve the previous default behaviour.

Checklist

  • the pull request title describes what this PR does (not a vague title like Update index.md)
  • the pull request targets the default branch of the repository (develop)
  • the code follows the established code style of the repository
    • npm run prettier:check passes
    • npm run lint:check passes
  • tests are added for the changes I made (if any source code was modified)
  • documentation added or updated
  • I have run the project locally and verified that there are no errors

Fixes

fixes #438

Other

2f3f241 Moved @types/validator to devDependencies
6b5d1d5 Fixed a couple of tests that were not returning promises and failing silently

@mikeguta mikeguta changed the title Fix issue #438: default forbidUnknownValues to true fix: #438 default forbidUnknownValues to true Nov 11, 2021
@mikeguta
Copy link
Author

will replace with with another PR

@mikeguta mikeguta closed this Nov 17, 2021
@github-actions
Copy link

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 18, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

Successfully merging this pull request may close these issues.

fix: default settings allows arbitrary bypass vulnerability
1 participant