@onibi/sanitize

Basic input validation tools, although the package does provide some sanitization and is called sanitize for historic reasons, this package should be viewed mostly as a tool for user input validation and is focused on providing descriptive and useful error messages which have built in methods for converting to a HttpError from the @onibi/errors package for seamless integration into express.js based REST API's.

Usage examples

import sanitize from '@onibi/sanitize';

// Sanitizers have flexible settings that avoid throwing errors by default.
let x = sanitize.int.signed(34.7);     // Rounded to 35
let x = sanitize.int.unsigned(-73);    // Clamped to 0.
let y = sanitize.int.unsigned(null);   // Defaults to 0

Express integration

All SanitizerError types implement the ToHttpError interface from @onibi/errors, which means that they can be converted http errors that can be caught and converted to JSON by the @onibi/errorhandler.

Basic documentation

Listed below is a basic list of sanitizer functions to help you get started, checkout the full documentation on GitHub for more details like the specific rules to change the sanitizer behaviour.

| Function | Description | | :------- | :---------- | | int | Basic integer sanitizer, note that this is just an alias for int.signed. | int.signed | Signed integers, will round numbers to the nearest whole number and default to 0 for non numeric types. | int.unsigned | Unsigned integers, based on the signed integers parser but will clamp any negative input to 0. | int.ranged | Ranged integers, will clamp any input to integers within the given range. | bool | Basic boolean sanitizer, will convert input like "Yes" or "TRUE" to true and input like "No" or "FALSE" to false, note that you might want to customize the rules for stricter behavior. | enums | Basic enum sanitizer, will try to convert the given input to one of the provided enum values. | email | Email address, note that this is just an alias for email.htmlInput. | email.rfc5322 | RFC5322 email address, will throw an error for any strings that are not valid email addresses according to the RFC5322 specification. | email.htmlInput | Email address, will throw an error for any email address that would not be valid according to the checks used by the HTML <input type="email"> element, note that this is stricter than email.rfc5322 and will not allow technically valid emails like john.doe@[84.39.39.29]. | | uuid | UUID string sanitizer, will throw an error by default, but can also be provided with a default value or generator function.