isvalid-legacy
v1.4.6
Published
Fork isvalid 1.6.7 - Patch merge 1.2.2 CVE (Prototype Pollution) The Unkillable Fork
Maintainers
Readme
🚀 isvalid 1.6.7 - The Unkillable Fork 🏴☠️
💀 Because Updating Code is for the Weak 💀
So, you’ve got a 10-year-old codebase held together by duct tape, dreams, and a million custom validations? Guess what? SAME.
This is a patched fork of [email protected], which originally depended on the infamously insecure [email protected]. We fixed that mess by upgrading to [email protected] and removing the risky deep merge operation.
Updating to a new library? Nah. Refactoring millions of validations? LOL, NO.
If you’ve found this repo, chances are:
✅ You’re stuck with legacy code.
✅ You have no time, energy, or patience to rewrite everything.
✅ You just want it to work without security nightmares.
Well, congratulations! You don’t have to choose between security and sanity. This patched version lets you keep using isvalid without getting wrecked by prototype pollution attacks.
🛠 What’s Changed?
- 🔒 Fixed the CVE in
[email protected]by upgrading to[email protected] - ⚡ Removed deep merging in
lib/schema.js- Before:
var formalizedSchema = merge(true, schema); - After:
let formalizedSchema = {}; for (let key in schema) { formalizedSchema[key] = schema[key]; }
- Before:
- 🦾 Keeps the
[email protected]API (because breaking changes are evil) - 🚀 No refactoring required – drop it in and move on with your life
🚧 Installation
npm install isvalid-legacy🤔 Why Not Just Upgrade?
Because:
- Your code is older than some of team mates junior devs.
- You have better things to do.
- Touching this code might summon the demons of tech debt.
🛑 Disclaimer
This package is basically a band-aid on a time bomb. But hey, at least it's a patched time bomb.
🚀 Enjoy your legacy code—safely! 🏴☠️
