habsi/elasticsearch-js
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Backport 6.x] Secure json parsing (#1112)

Browse Source 
* Safe json parsing

* Updated test

Co-authored-by: Tomas Della Vedova <delvedor@users.noreply.github.com>
This commit is contained in:
github-actions[bot]
2020-03-13 09:29:55 +01:00
committed by GitHub
parent 4c9b2630cf
commit 6839df018a
3 changed files with 72 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/Serializer.js
View File

@ -6,6 +6,7 @@
const { stringify } = require('querystring')
const debug = require('debug')('elasticsearch')
const sjson = require('secure-json-parse')
const { SerializationError, DeserializationError } = require('./errors')
class Serializer {
@ -22,7 +23,7 @@ class Serializer {
deserialize (json) {
debug('Deserializing', json)
try {
var object = JSON.parse(json)
var object = sjson.parse(json)
} catch (err) {
throw new DeserializationError(err.message)
}