feathersjs / feathers

The API and real-time application framework
https://feathersjs.com
MIT License
14.98k stars 743 forks source link

fix(transport-commons): Handle invalid service paths on socket lookups #3241

Closed daffl closed 1 year ago

daffl commented 1 year ago

This is a fix for a security issue where the conversion of the following template string:

const message = `${{ toString: '' }}`

Triggers an error killing the NodeJS process. This error happens when e.g. sending a socket.emit('find', { toString: '' }) message.