Skip to content

Many many changes#60

Open
Eneris wants to merge 101 commits into
MatthieuLemoine:masterfrom
Eneris:master
Open

Many many changes#60
Eneris wants to merge 101 commits into
MatthieuLemoine:masterfrom
Eneris:master

Conversation

@Eneris

@Eneris Eneris commented Jun 3, 2022

Copy link
Copy Markdown

Hi. Please see the changes and consider using them :)

  • Udated modules
  • Typescript
  • Minor changes to data structure

dependabot Bot and others added 30 commits September 8, 2020 14:07
Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](npm/ini@v1.3.5...v1.3.7)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.5 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.5...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [merge](https://github.com/yeikos/js.merge) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/yeikos/js.merge/releases)
- [Commits](swordev/merge@v1.2.0...v1.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
Some developers just need a valid gcm token to work with some APIs.
Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/npm/node-tar/releases)
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v2.2.1...v2.2.2)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5.
- [Release notes](https://github.com/daaku/nodejs-tmpl/releases)
- [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5)

---
updated-dependencies:
- dependency-name: tmpl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@MatthieuLemoine MatthieuLemoine force-pushed the master branch 2 times, most recently from c507d64 to feb64e8 Compare February 7, 2026 18:49
edualm and others added 5 commits February 26, 2026 14:34
The crypto-key header can contain multiple parameters separated by
semicolons, e.g.:
  dh=BASE64KEY; p256ecdsa=BASE64SIG

The previous code used .slice(3) to strip the 'dh=' prefix, but this
left the '; p256ecdsa=...' suffix appended to the DH public key value,
causing ERR_CRYPTO_ECDH_INVALID_PUBLIC_KEY errors when the server
includes a p256ecdsa signature in the header.

Similarly, the encryption header was parsed with .slice(5) which is
fragile and would break if additional parameters were added.

This commit properly parses both headers by splitting on semicolons
and extracting parameters by name.
fix: properly parse crypto-key and encryption headers in decrypt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.