NPM Dependencies UPDATE
This commit is contained in:
1 parent
20c29bb4d6
commit
a9bfe7a413
599 files changed
+12369
-51423
No files matched your search
+123
-88
@@ -1,19 +1,42 @@
|
||||
# validator.js
|
||||
|
||||
[![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Coveralls Status][coveralls-image]][coveralls-url] [![Downloads][downloads-image]][npm-url]
|
||||
[![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Downloads][downloads-image]][npm-url]
|
||||
|
||||
A library of string validators and sanitizers.
|
||||
|
||||
## Strings only
|
||||
|
||||
**This library validates and sanitizes strings only.**
|
||||
|
||||
If you're not sure if your input is a string, coerce it using `input + ''`.
|
||||
Passing anything other than a string is an error.
|
||||
|
||||
## Installation and Usage
|
||||
|
||||
### Server-side usage
|
||||
|
||||
Install the library with `npm install validator`
|
||||
|
||||
#### No ES6
|
||||
|
||||
```javascript
|
||||
var validator = require('validator');
|
||||
|
||||
validator.isEmail('foo@bar.com'); //=> true
|
||||
```
|
||||
|
||||
#### ES6
|
||||
|
||||
```javascript
|
||||
import validator from 'validator';
|
||||
```
|
||||
|
||||
Or, import only a subset of the library:
|
||||
|
||||
```javascript
|
||||
import isEmail from 'validator/lib/isEmail';
|
||||
```
|
||||
|
||||
### Client-side usage
|
||||
|
||||
The library can be loaded either as a standalone script, or through an [AMD][amd]-compatible loader
|
||||
@@ -31,110 +54,125 @@ The library can also be installed through [bower][bower]
|
||||
$ bower install validator-js
|
||||
```
|
||||
|
||||
### Validators
|
||||
## Validators
|
||||
|
||||
- **equals(str, comparison)** - check if the string matches the comparison.
|
||||
- **contains(str, seed)** - check if the string contains the seed.
|
||||
- **matches(str, pattern [, modifiers])** - check if string matches the pattern. Either `matches('foo', /foo/i)` or `matches('foo', 'foo', 'i')`.
|
||||
- **isEmail(str [, options])** - check if the string is an email. `options` is an object which defaults to `{ allow_display_name: false, allow_utf8_local_part: true }`. If `allow_display_name` is set to true, the validator will also match `Display Name <email-address>`. If `allow_utf8_local_part` is set to false, the validator will not allow any non-English UTF8 character in email address' local part.
|
||||
- **isURL(str [, options])** - check if the string is an URL. `options` is an object which defaults to `{ protocols: ['http','https','ftp'], require_tld: true, require_protocol: false, allow_underscores: false, host_whitelist: false, host_blacklist: false, allow_trailing_dot: false, allow_protocol_relative_urls: false }`.
|
||||
- **isFQDN(str [, options])** - check if the string is a fully qualified domain name (e.g. domain.com). `options` is an object which defaults to `{ require_tld: true, allow_underscores: false, allow_trailing_dot: false }`.
|
||||
- **isIP(str [, version])** - check if the string is an IP (version 4 or 6).
|
||||
- **isAlpha(str)** - check if the string contains only letters (a-zA-Z).
|
||||
- **isNumeric(str)** - check if the string contains only numbers.
|
||||
- **isAlphanumeric(str)** - check if the string contains only letters and numbers.
|
||||
- **isBase64(str)** - check if a string is base64 encoded.
|
||||
- **isHexadecimal(str)** - check if the string is a hexadecimal number.
|
||||
- **isHexColor(str)** - check if the string is a hexadecimal color.
|
||||
- **isLowercase(str)** - check if the string is lowercase.
|
||||
- **isUppercase(str)** - check if the string is uppercase.
|
||||
- **isInt(str)** - check if the string is an integer.
|
||||
- **isFloat(str)** - check if the string is a float.
|
||||
- **isDivisibleBy(str, number)** - check if the string is a number that's divisible by another.
|
||||
- **isNull(str)** - check if the string is null.
|
||||
- **isLength(str, min [, max])** - check if the string's length falls in a range. Note: this function takes into account surrogate pairs.
|
||||
- **isByteLength(str, min [, max])** - check if the string's length (in bytes) falls in a range.
|
||||
- **isUUID(str [, version])** - check if the string is a UUID (version 3, 4 or 5).
|
||||
- **isDate(str)** - check if the string is a date.
|
||||
- **isAfter(str [, date])** - check if the string is a date that's after the specified date (defaults to now).
|
||||
- **isBefore(str [, date])** - check if the string is a date that's before the specified date.
|
||||
- **isIn(str, values)** - check if the string is in a array of allowed values.
|
||||
- **isCreditCard(str)** - check if the string is a credit card.
|
||||
- **isISIN(str)** - check if the string is an [ISIN][ISIN] (stock/security identifier).
|
||||
- **isISBN(str [, version])** - check if the string is an ISBN (version 10 or 13).
|
||||
- **isMobilePhone(str, locale)** - check if the string is a mobile phone number, (locale is one of `['zh-CN', 'en-ZA', 'en-AU', 'en-HK', 'pt-PT', 'fr-FR', 'el-GR', 'en-GB']`).
|
||||
- **isJSON(str)** - check if the string is valid JSON (note: uses JSON.parse).
|
||||
- **isMultibyte(str)** - check if the string contains one or more multibyte chars.
|
||||
- **isAscii(str)** - check if the string contains ASCII chars only.
|
||||
- **isFullWidth(str)** - check if the string contains any full-width chars.
|
||||
- **isHalfWidth(str)** - check if the string contains any half-width chars.
|
||||
- **isVariableWidth(str)** - check if the string contains a mixture of full and half-width chars.
|
||||
- **isSurrogatePair(str)** - check if the string contains any surrogate pairs chars.
|
||||
- **isMongoId(str)** - check if the string is a valid hex-encoded representation of a [MongoDB ObjectId][mongoid].
|
||||
- **isCurrency(str, options)** - check if the string is a valid currency amount. `options` is an object which defaults to `{symbol: '$', require_symbol: false, allow_space_after_symbol: false, symbol_after_digits: false, allow_negatives: true, parens_for_negatives: false, negative_sign_before_digits: false, negative_sign_after_digits: false, allow_negative_sign_placeholder: false, thousands_separator: ',', decimal_separator: '.', allow_space_after_digits: false }`.
|
||||
Here is a list of the validators currently available.
|
||||
|
||||
### Sanitizers
|
||||
Validator | Description
|
||||
--------------------------------------- | --------------------------------------
|
||||
***contains(str, seed)*** | check if the string contains the seed.
|
||||
**equals(str, comparison)** | check if the string matches the comparison.
|
||||
**isAfter(str [, date])** | check if the string is a date that's after the specified date (defaults to now).
|
||||
**isAlpha(str [, locale])** | check if the string contains only letters (a-zA-Z).<br/><br/>Locale is one of `['ar', 'ar-AE', 'ar-BH', 'ar-DZ', 'ar-EG', 'ar-IQ', 'ar-JO', 'ar-KW', 'ar-LB', 'ar-LY', 'ar-MA', 'ar-QA', 'ar-QM', 'ar-SA', 'ar-SD', 'ar-SY', 'ar-TN', 'ar-YE', 'bg-BG', 'cs-CZ', 'da-DK', 'de-DE', 'el-GR', 'en-AU', 'en-GB', 'en-HK', 'en-IN', 'en-NZ', 'en-US', 'en-ZA', 'en-ZM', 'es-ES', 'fr-FR', 'hu-HU', 'it-IT', 'nb-NO', 'nl-NL', 'nn-NO', 'pl-PL', 'pt-BR', 'pt-PT', 'ru-RU', 'sk-SK', 'sr-RS', 'sr-RS@latin', 'sv-SE', 'tr-TR', 'uk-UA']`) and defaults to `en-US`.
|
||||
**isAlphanumeric(str [, locale])** | check if the string contains only letters and numbers.<br/><br/>Locale is one of `['ar', 'ar-AE', 'ar-BH', 'ar-DZ', 'ar-EG', 'ar-IQ', 'ar-JO', 'ar-KW', 'ar-LB', 'ar-LY', 'ar-MA', 'ar-QA', 'ar-QM', 'ar-SA', 'ar-SD', 'ar-SY', 'ar-TN', 'ar-YE', 'bg-BG', 'cs-CZ', 'da-DK', 'de-DE', 'el-GR', 'en-AU', 'en-GB', 'en-HK', 'en-IN', 'en-NZ', 'en-US', 'en-ZA', 'en-ZM', 'es-ES', 'fr-FR', 'hu-HU', 'it-IT', 'nb-NO', 'nl-NL', 'nn-NO', 'pl-PL', 'pt-BR', 'pt-PT', 'ru-RU', 'sk-SK', 'sr-RS', 'sr-RS@latin', 'sv-SE', 'tr-TR', 'uk-UA']`) and defaults to `en-US`.
|
||||
**isAscii(str)** | check if the string contains ASCII chars only.
|
||||
**isBase64(str)** | check if a string is base64 encoded.
|
||||
**isBefore(str [, date])** | check if the string is a date that's before the specified date.
|
||||
**isBoolean(str)** | check if a string is a boolean.
|
||||
**isByteLength(str, options)** | check if the string's length (in UTF-8 bytes) falls in a range.<br/><br/>`options` is an object which defaults to `{min:0, max: undefined}`.
|
||||
**isCreditCard(str)** | check if the string is a credit card.
|
||||
**isCurrency(str, options)** | check if the string is a valid currency amount.<br/><br/>`options` is an object which defaults to `{symbol: '$', require_symbol: false, allow_space_after_symbol: false, symbol_after_digits: false, allow_negatives: true, parens_for_negatives: false, negative_sign_before_digits: false, negative_sign_after_digits: false, allow_negative_sign_placeholder: false, thousands_separator: ',', decimal_separator: '.', allow_decimal: true, require_decimal: false, digits_after_decimal: [2], allow_space_after_digits: false}`.<br/>**Note:** The array `digits_after_decimal` is filled with the exact number of digits allowd not a range, for example a range 1 to 3 will be given as [1, 2, 3].
|
||||
**isDataURI(str)** | check if the string is a [data uri format](https://developer.mozilla.org/en-US/docs/Web/HTTP/data_URIs).
|
||||
**isDecimal(str, options)** | check if the string represents a decimal number, such as 0.1, .3, 1.1, 1.00003, 4.0, etc.<br/><br/>`options` is an object which defaults to `{force_decimal: false, decimal_digits: '1,', locale: 'en-US'}`<br/><br/>`locale` determine the decimal separator and is one of `['ar', 'ar-AE', 'ar-BH', 'ar-DZ', 'ar-EG', 'ar-IQ', 'ar-JO', 'ar-KW', 'ar-LB', 'ar-LY', 'ar-MA', 'ar-QA', 'ar-QM', 'ar-SA', 'ar-SD', 'ar-SY', 'ar-TN', 'ar-YE', 'bg-BG', 'cs-CZ', 'da-DK', 'de-DE', 'en-AU', 'en-GB', 'en-HK', 'en-IN', 'en-NZ', 'en-US', 'en-ZA', 'en-ZM', 'es-ES', 'fr-FR', 'hu-HU', 'it-IT', 'nb-NO', 'nl-NL', 'nn-NO', 'pl-PL', 'pt-BR', 'pt-PT', 'ru-RU', 'sr-RS', 'sr-RS@latin', 'sv-SE', 'tr-TR', 'uk-UA']`.<br/>**Note:** `decimal_digits` is given as a range like '1,3', a specific value like '3' or min like '1,'.
|
||||
**isDivisibleBy(str, number)** | check if the string is a number that's divisible by another.
|
||||
**isEmail(str [, options])** | check if the string is an email.<br/><br/>`options` is an object which defaults to `{ allow_display_name: false, require_display_name: false, allow_utf8_local_part: true, require_tld: true }`. If `allow_display_name` is set to true, the validator will also match `Display Name <email-address>`. If `require_display_name` is set to true, the validator will reject strings without the format `Display Name <email-address>`. If `allow_utf8_local_part` is set to false, the validator will not allow any non-English UTF8 character in email address' local part. If `require_tld` is set to false, e-mail addresses without having TLD in their domain will also be matched.
|
||||
**isEmpty(str)** | check if the string has a length of zero.
|
||||
**isFQDN(str [, options])** | check if the string is a fully qualified domain name (e.g. domain.com).<br/><br/>`options` is an object which defaults to `{ require_tld: true, allow_underscores: false, allow_trailing_dot: false }`.
|
||||
**isFloat(str [, options])** | check if the string is a float.<br/><br/>`options` is an object which can contain the keys `min`, `max`, `gt`, and/or `lt` to validate the float is within boundaries (e.g. `{ min: 7.22, max: 9.55 }`) it also has `locale` as an option.<br/><br/>`min` and `max` are equivalent to 'greater or equal' and 'less or equal', respectively while `gt` and `lt` are their strict counterparts.<br/><br/>`locale` determine the decimal separator and is one of `['ar', 'ar-AE', 'ar-BH', 'ar-DZ', 'ar-EG', 'ar-IQ', 'ar-JO', 'ar-KW', 'ar-LB', 'ar-LY', 'ar-MA', 'ar-QA', 'ar-QM', 'ar-SA', 'ar-SD', 'ar-SY', 'ar-TN', 'ar-YE', 'bg-BG', 'cs-CZ', 'da-DK', 'de-DE', 'en-AU', 'en-GB', 'en-HK', 'en-IN', 'en-NZ', 'en-US', 'en-ZA', 'en-ZM', 'es-ES', 'fr-FR', 'hu-HU', 'it-IT', 'nb-NO', 'nl-NL', 'nn-NO', 'pl-PL', 'pt-BR', 'pt-PT', 'ru-RU', 'sr-RS', 'sr-RS@latin', 'sv-SE', 'tr-TR', 'uk-UA']`.
|
||||
**isFullWidth(str)** | check if the string contains any full-width chars.
|
||||
**isHalfWidth(str)** | check if the string contains any half-width chars.
|
||||
**isHash(str, algorithm)** | check if the string is a hash of type algorithm.<br/><br/>Algorithm is one of `['md4', 'md5', 'sha1', 'sha256', 'sha384', 'sha512', 'ripemd128', 'ripemd160', 'tiger128', 'tiger160', 'tiger192', 'crc32', 'crc32b']`
|
||||
**isHexColor(str)** | check if the string is a hexadecimal color.
|
||||
**isHexadecimal(str)** | check if the string is a hexadecimal number.
|
||||
**isIP(str [, version])** | check if the string is an IP (version 4 or 6).
|
||||
**isISBN(str [, version])** | check if the string is an ISBN (version 10 or 13).
|
||||
**isISSN(str [, options])** | check if the string is an [ISSN](https://en.wikipedia.org/wiki/International_Standard_Serial_Number).<br/><br/>`options` is an object which defaults to `{ case_sensitive: false, require_hyphen: false }`. If `case_sensitive` is true, ISSNs with a lowercase `'x'` as the check digit are rejected.
|
||||
**isISIN(str)** | check if the string is an [ISIN][ISIN] (stock/security identifier).
|
||||
**isISO8601(str)** | check if the string is a valid [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) date.
|
||||
**isISO31661Alpha2(str)** | check if the string is a valid [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) officially assigned country code.
|
||||
**isISRC(str)** | check if the string is a [ISRC](https://en.wikipedia.org/wiki/International_Standard_Recording_Code).
|
||||
**isIn(str, values)** | check if the string is in a array of allowed values.
|
||||
**isInt(str [, options])** | check if the string is an integer.<br/><br/>`options` is an object which can contain the keys `min` and/or `max` to check the integer is within boundaries (e.g. `{ min: 10, max: 99 }`). `options` can also contain the key `allow_leading_zeroes`, which when set to false will disallow integer values with leading zeroes (e.g. `{ allow_leading_zeroes: false }`). Finally, `options` can contain the keys `gt` and/or `lt` which will enforce integers being greater than or less than, respectively, the value provided (e.g. `{gt: 1, lt: 4}` for a number between 1 and 4).
|
||||
**isJSON(str)** | check if the string is valid JSON (note: uses JSON.parse).
|
||||
**isLatLong(str)** | check if the string is a valid latitude-longitude coordinate in the format `lat,long` or `lat, long`.
|
||||
**isLength(str, options)** | check if the string's length falls in a range.<br/><br/>`options` is an object which defaults to `{min:0, max: undefined}`. Note: this function takes into account surrogate pairs.
|
||||
**isLowercase(str)** | check if the string is lowercase.
|
||||
**isMACAddress(str)** | check if the string is a MAC address.
|
||||
**isMD5(str)** | check if the string is a MD5 hash.
|
||||
**isMimeType(str)** | check if the string matches to a valid [MIME type](https://en.wikipedia.org/wiki/Media_type) format
|
||||
**isMobilePhone(str, locale)** | check if the string is a mobile phone number,<br/><br/>(locale is one of `['ar-AE', 'ar-DZ', 'ar-EG', 'ar-JO', 'ar-SA', 'ar-SY', 'be-BY', 'bg-BG', 'cs-CZ', 'de-DE', 'da-DK', 'el-GR', 'en-AU', 'en-CA', 'en-GB', 'en-HK', 'en-IN', 'en-KE', 'en-NG', 'en-NZ', 'en-RW', 'en-SG', 'en-UG', 'en-US', 'en-TZ', 'en-ZA', 'en-ZM', 'en-PK', 'es-ES', 'et-EE', 'fa-IR', 'fi-FI', 'fr-FR', 'he-IL', 'hu-HU', 'it-IT', 'ja-JP', 'kk-KZ', 'ko-KR', 'lt-LT', 'ms-MY', 'nb-NO', 'nn-NO', 'pl-PL', 'pt-PT', 'pt-BR', 'ro-RO', 'ru-RU', 'sk-SK', 'sr-RS', 'th-TH', 'tr-TR', 'uk-UA', 'vi-VN', 'zh-CN', 'zh-HK', 'zh-TW']` OR 'any'. If 'any' is used, function will check if any of the locales match).<br/><br/>`options` is an optional object that can be supplied with the following keys: `strictMode`, if this is set to `true`, the mobile phone number must be supplied with the country code and therefore must start with `+`.
|
||||
**isMongoId(str)** | check if the string is a valid hex-encoded representation of a [MongoDB ObjectId][mongoid].
|
||||
**isMultibyte(str)** | check if the string contains one or more multibyte chars.
|
||||
**isNumeric(str)** | check if the string contains only numbers.
|
||||
**isPort(str)** | check if the string is a valid port number.
|
||||
**isPostalCode(str, locale)** | check if the string is a postal code,<br/><br/>(locale is one of `[ 'AT', 'AU', 'BE', 'BG', 'CA', 'CH', 'CZ', 'DE', 'DK', 'DZ', 'ES', 'FI', 'FR', 'GB', 'GR', 'IL', 'IN', 'IS', 'IT', 'JP', 'KE', 'LI', 'MX', 'NL', 'NO', 'PL', 'PT', 'RO', 'RU', 'SA', 'SE', 'TW', 'US', 'ZA', 'ZM' ]` OR 'any'. If 'any' is used, function will check if any of the locals match).
|
||||
**isSurrogatePair(str)** | check if the string contains any surrogate pairs chars.
|
||||
**isURL(str [, options])** | check if the string is an URL.<br/><br/>`options` is an object which defaults to `{ protocols: ['http','https','ftp'], require_tld: true, require_protocol: false, require_host: true, require_valid_protocol: true, allow_underscores: false, host_whitelist: false, host_blacklist: false, allow_trailing_dot: false, allow_protocol_relative_urls: false }`.
|
||||
**isUUID(str [, version])** | check if the string is a UUID (version 3, 4 or 5).
|
||||
**isUppercase(str)** | check if the string is uppercase.
|
||||
**isVariableWidth(str)** | check if the string contains a mixture of full and half-width chars.
|
||||
**isWhitelisted(str, chars)** | checks characters if they appear in the whitelist.
|
||||
**matches(str, pattern [, modifiers])** | check if string matches the pattern.<br/><br/>Either `matches('foo', /foo/i)` or `matches('foo', 'foo', 'i')`.
|
||||
|
||||
- **toString(input)** - convert the input to a string.
|
||||
- **toDate(input)** - convert the input to a date, or `null` if the input is not a date.
|
||||
- **toFloat(input)** - convert the input to a float, or `NaN` if the input is not a float.
|
||||
- **toInt(input [, radix])** - convert the input to an integer, or `NaN` if the input is not an integer.
|
||||
- **toBoolean(input [, strict])** - convert the input to a boolean. Everything except for `'0'`, `'false'` and `''` returns `true`. In strict mode only `'1'` and `'true'` return `true`.
|
||||
- **trim(input [, chars])** - trim characters (whitespace by default) from both sides of the input.
|
||||
- **ltrim(input [, chars])** - trim characters from the left-side of the input.
|
||||
- **rtrim(input [, chars])** - trim characters from the right-side of the input.
|
||||
- **escape(input)** - replace `<`, `>`, `&`, `'`, `"` and `/` with HTML entities.
|
||||
- **stripLow(input [, keep_new_lines])** - remove characters with a numerical value < 32 and 127, mostly control characters. If `keep_new_lines` is `true`, newline characters are preserved (`\n` and `\r`, hex `0xA` and `0xD`). Unicode-safe in JavaScript.
|
||||
- **whitelist(input, chars)** - remove characters that do not appear in the whitelist. The characters are used in a RegExp and so you will need to escape some chars, e.g. whitelist(input, '\\[\\]').
|
||||
- **blacklist(input, chars)** - remove characters that appear in the blacklist. The characters are used in a RegExp and so you will need to escape some chars, e.g. blacklist(input, '\\[\\]').
|
||||
- **normalizeEmail(email [, options])** - canonicalize an email address. `options` is an object which defaults to `{ lowercase: true }`. With `lowercase` set to `true`, the local part of the email address is lowercased for all domains; the hostname is always lowercased and the local part of the email address is always lowercased for hosts that are known to be case-insensitive (currently only GMail). Normalization follows special rules for known providers: currently, GMail addresses have dots removed in the local part and are stripped of tags (e.g. `some.one+tag@gmail.com` becomes `someone@gmail.com`) and all `@googlemail.com` addresses are normalized to `@gmail.com`.
|
||||
## Sanitizers
|
||||
|
||||
Here is a list of the sanitizers currently available.
|
||||
|
||||
Sanitizer | Description
|
||||
-------------------------------------- | -------------------------------
|
||||
**blacklist(input, chars)** | remove characters that appear in the blacklist. The characters are used in a RegExp and so you will need to escape some chars, e.g. `blacklist(input, '\\[\\]')`.
|
||||
**escape(input)** | replace `<`, `>`, `&`, `'`, `"` and `/` with HTML entities.
|
||||
**unescape(input)** | replaces HTML encoded entities with `<`, `>`, `&`, `'`, `"` and `/`.
|
||||
**ltrim(input [, chars])** | trim characters from the left-side of the input.
|
||||
**normalizeEmail(email [, options])** | canonicalizes an email address. (This doesn't validate that the input is an email, if you want to validate the email use isEmail beforehand)<br/><br/>`options` is an object with the following keys and default values:<br/><ul><li>*all_lowercase: true* - Transforms the local part (before the @ symbol) of all email addresses to lowercase. Please note that this may violate RFC 5321, which gives providers the possibility to treat the local part of email addresses in a case sensitive way (although in practice most - yet not all - providers don't). The domain part of the email address is always lowercased, as it's case insensitive per RFC 1035.</li><li>*gmail_lowercase: true* - GMail addresses are known to be case-insensitive, so this switch allows lowercasing them even when *all_lowercase* is set to false. Please note that when *all_lowercase* is true, GMail addresses are lowercased regardless of the value of this setting.</li><li>*gmail_remove_dots: true*: Removes dots from the local part of the email address, as GMail ignores them (e.g. "john.doe" and "johndoe" are considered equal).</li><li>*gmail_remove_subaddress: true*: Normalizes addresses by removing "sub-addresses", which is the part following a "+" sign (e.g. "foo+bar@gmail.com" becomes "foo@gmail.com").</li><li>*gmail_convert_googlemaildotcom: true*: Converts addresses with domain @googlemail.com to @gmail.com, as they're equivalent.</li><li>*outlookdotcom_lowercase: true* - Outlook.com addresses (including Windows Live and Hotmail) are known to be case-insensitive, so this switch allows lowercasing them even when *all_lowercase* is set to false. Please note that when *all_lowercase* is true, Outlook.com addresses are lowercased regardless of the value of this setting.</li><li>*outlookdotcom_remove_subaddress: true*: Normalizes addresses by removing "sub-addresses", which is the part following a "+" sign (e.g. "foo+bar@outlook.com" becomes "foo@outlook.com").</li><li>*yahoo_lowercase: true* - Yahoo Mail addresses are known to be case-insensitive, so this switch allows lowercasing them even when *all_lowercase* is set to false. Please note that when *all_lowercase* is true, Yahoo Mail addresses are lowercased regardless of the value of this setting.</li><li>*yahoo_remove_subaddress: true*: Normalizes addresses by removing "sub-addresses", which is the part following a "-" sign (e.g. "foo-bar@yahoo.com" becomes "foo@yahoo.com").</li><li>*icloud_lowercase: true* - iCloud addresses (including MobileMe) are known to be case-insensitive, so this switch allows lowercasing them even when *all_lowercase* is set to false. Please note that when *all_lowercase* is true, iCloud addresses are lowercased regardless of the value of this setting.</li><li>*icloud_remove_subaddress: true*: Normalizes addresses by removing "sub-addresses", which is the part following a "+" sign (e.g. "foo+bar@icloud.com" becomes "foo@icloud.com").</li></ul>
|
||||
**rtrim(input [, chars])** | trim characters from the right-side of the input.
|
||||
**stripLow(input [, keep_new_lines])** | remove characters with a numerical value < 32 and 127, mostly control characters. If `keep_new_lines` is `true`, newline characters are preserved (`\n` and `\r`, hex `0xA` and `0xD`). Unicode-safe in JavaScript.
|
||||
**toBoolean(input [, strict])** | convert the input string to a boolean. Everything except for `'0'`, `'false'` and `''` returns `true`. In strict mode only `'1'` and `'true'` return `true`.
|
||||
**toDate(input)** | convert the input string to a date, or `null` if the input is not a date.
|
||||
**toFloat(input)** | convert the input string to a float, or `NaN` if the input is not a float.
|
||||
**toInt(input [, radix])** | convert the input string to an integer, or `NaN` if the input is not an integer.
|
||||
**trim(input [, chars])** | trim characters (whitespace by default) from both sides of the input.
|
||||
**whitelist(input, chars)** | remove characters that do not appear in the whitelist. The characters are used in a RegExp and so you will need to escape some chars, e.g. `whitelist(input, '\\[\\]')`.
|
||||
|
||||
### XSS Sanitization
|
||||
|
||||
XSS sanitization was removed from the library in [2d5d6999](https://github.com/chriso/validator.js/commit/2d5d6999541add350fb396ef02dc42ca3215049e).
|
||||
|
||||
For an alternative, look at Yahoo's [xss-filters library](https://github.com/yahoo/xss-filters).
|
||||
For an alternative, have a look at Yahoo's [xss-filters library](https://github.com/yahoo/xss-filters) or at [DOMPurify](https://github.com/cure53/DOMPurify).
|
||||
|
||||
### Strings only
|
||||
## Contributing
|
||||
|
||||
This library validates and sanitizes **strings** only. All input will be coerced to a string using the following rules
|
||||
In general, we follow the "fork-and-pull" Git workflow.
|
||||
|
||||
- Call the `toString` property if available.
|
||||
- Replace `null`, `undefined` or `NaN` with an empty string.
|
||||
- Everything else is coerced with `input + ''`.
|
||||
1. Fork the repo on GitHub
|
||||
2. Clone the project to your own machine
|
||||
3. Work on your fork
|
||||
1. Make your changes and additions
|
||||
2. Change or add tests if needed
|
||||
3. Run tests and make sure they pass
|
||||
4. Add changes to README.md if needed
|
||||
4. Commit changes to your own branch
|
||||
5. **Make sure** you merge the latest from "upstream" and resolve conflicts if there is any
|
||||
6. Repeat step 3(3) above
|
||||
7. Push your work back up to your fork
|
||||
8. Submit a Pull request so that we can review your changes
|
||||
|
||||
### Extensions
|
||||
## Tests
|
||||
|
||||
You can add your own validators using `validator.extend(name, fn)`
|
||||
Tests are using mocha, to run the tests use:
|
||||
|
||||
```javascript
|
||||
validator.extend('isWhitespace', function (str) {
|
||||
return /^\s+$/.test(str);
|
||||
});
|
||||
```sh
|
||||
$ npm test
|
||||
```
|
||||
|
||||
Note that the first argument will be automatically coerced to a string.
|
||||
## Reading
|
||||
|
||||
```javascript
|
||||
validator.isWhitespace(' \t\r\n');
|
||||
// => true
|
||||
Remember, validating can be troublesome sometimes. See [A list of articles about programming assumptions commonly made that aren't true](https://github.com/jameslk/awesome-falsehoods).
|
||||
|
||||
validator.isWhitespace('foo bar');
|
||||
// => false
|
||||
```
|
||||
|
||||
### Tests
|
||||
|
||||
- `make test` - run the test suite.
|
||||
- `make test V=1` - run the test suite with added verbosity.
|
||||
- `make test TEST=pattern` - run tests that match a pattern.
|
||||
- `make coverage` - run a coverage analysis tool.
|
||||
- `make lint` - run a lint tool.
|
||||
|
||||
### License (MIT)
|
||||
## License (MIT)
|
||||
|
||||
```
|
||||
Copyright (c) 2015 Chris O'Hara <cohara87@gmail.com>
|
||||
Copyright (c) 2017 Chris O'Hara <cohara87@gmail.com>
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining
|
||||
a copy of this software and associated documentation files (the
|
||||
@@ -164,9 +202,6 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
[travis-url]: https://travis-ci.org/chriso/validator.js
|
||||
[travis-image]: http://img.shields.io/travis/chriso/validator.js.svg
|
||||
|
||||
[coveralls-url]: https://coveralls.io/r/chriso/validator.js
|
||||
[coveralls-image]: http://img.shields.io/coveralls/chriso/validator.js/master.svg
|
||||
|
||||
[amd]: http://requirejs.org/docs/whyamd.html
|
||||
[bower]: http://bower.io/
|
||||
|
||||
|
||||
Reference in new issue
Block a user