http-headers-validation

import { validateHeaderName, validateHeaderValue, validateHeader } from 'http-headers-validation'; // Validate a header name const isValidName1 = validateHeaderName('If-Unmodified-Since'); // true const isValidName2 = validateHeaderName('Front-End-[]'); // false console.log(`'If-Unmodified-Since' is valid: ${isValidName1}`); console.log(`'Front-End-[]' is valid: ${isValidName2}`); // Validate a header value const isValidValue1 = validateHeaderValue('VQcFUFFRCBABUFhaAwQOVw=='); // true const isValidValue2 = validateHeaderValue('\n\b'); // false console.log(`'VQcFUFFRC...' is valid: ${isValidValue1}`); console.log(`'\n\b' is valid: ${isValidValue2}`); // Validate both name and value combined const isValidHeader1 = validateHeader('Cache-Control', 'public, max-age=2000'); // true const isValidHeader2 = validateHeader('Front-End-[]', 'backspace\bValue'); // false console.log(`'Cache-Control: public, max-age=2000' is valid: ${isValidHeader1}`); console.log(`'Front-End-[]: backspace\bValue' is valid: ${isValidHeader2}`); // Example of how it might be used in a server middleware function processHeaders(headers: Record<string, string>) { for (const name in headers) { const value = headers[name]; if (!validateHeader(name, value)) { console.warn(`Invalid header detected: ${name}: ${value}`); // Potentially throw an error or sanitize } } } processHeaders({ 'Accept': 'application/json', 'Custom-Bad-Header[]': 'oops\tbad value' });