i18next-http-middleware/lib/utils.js

i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno.

export function setPath (object, path, newValue) {
  let stack
  if (typeof path !== 'string') stack = [].concat(path)
  if (typeof path === 'string') stack = path.split('.')

  while (stack.length > 1) {
    let key = stack.shift()
    if (key.indexOf('###') > -1) key = key.replace(/###/g, '.')
    if (!object[key]) object[key] = {}
    object = object[key]
  }

  let key = stack.shift()
  if (key.indexOf('###') > -1) key = key.replace(/###/g, '.')
  object[key] = newValue
}

const arr = []
const each = arr.forEach
const slice = arr.slice

export function defaults (obj) {
  each.call(slice.call(arguments, 1), function (source) {
    if (source) {
      for (const prop in source) {
        if (obj[prop] === undefined) obj[prop] = source[prop]
      }
    }
  })
  return obj
}

export function extend (obj) {
  each.call(slice.call(arguments, 1), function (source) {
    if (source) {
      for (const prop in source) {
        obj[prop] = source[prop]
      }
    }
  })
  return obj
}

export function removeLngFromUrl (url, lookupFromPathIndex) {
  let first = ''
  let pos = lookupFromPathIndex

  if (url[0] === '/') {
    pos++
    first = '/'
  }

  // Build new url
  const parts = url.split('/')
  parts.splice(pos, 1)
  url = parts.join('/')
  if (url[0] !== '/') url = first + url

  return url
}

export function escape (str) {
  return (str.replace(/&/g, '&')
    .replace(/"/g, '"')
    .replace(/'/g, ''')
    .replace(/</g, '&lt;')
    .replace(/>/g, '&gt;')
    .replace(/\//g, '&#x2F;')
    .replace(/\\/g, '&#x5C;')
    .replace(/`/g, '&#96;'))
}

export function hasXSS (input) {
  if (typeof input !== 'string') return false

  // Common XSS attack patterns
  const xssPatterns = [
    /<\s*script.*?>/i,
    /<\s*\/\s*script\s*>/i,
    /<\s*img.*?on\w+\s*=/i,
    /<\s*\w+\s*on\w+\s*=.*?>/i,
    /javascript\s*:/i,
    /vbscript\s*:/i,
    /expression\s*\(/i,
    /eval\s*\(/i,
    /alert\s*\(/i,
    /document\.cookie/i,
    /document\.write\s*\(/i,
    /window\.location/i,
    /innerHTML/i
  ]

  return xssPatterns.some((pattern) => pattern.test(input))
}