Update

Author: ascorbic

packages/cache-handlers/deno.json

@@ -0,0 +1,9 @@
+{
+	"name": "@ascorbic/cache-handlers",
+	"version": "0.0.0",
+	"exports": "./src/index.ts",
+	"license": "MIT",
+	"publish": {
+		"include": ["README.md", "src"]
+	}
+}

packages/cache-handlers/package.json

@@ -14,6 +14,7 @@
     "build": "tsdown",
     "dev": "tsdown --watch",
     "prepublishOnly": "node --run build",
+		"lint": "deno lint",
     "test": "pnpm run '/^test:.*/'",
     "test:deno": "deno test test/deno",
     "test:node": "vitest run",
@@ -32,7 +33,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/ascorbic/cdn-cache-control.git",
+    "url": "git+https://github.com/ascorbic/cache-primitives.git",
     "directory": "packages/cache-handlers"
   },
   "homepage": "https://github.com/ascorbic/cdn-cache-control",

packages/cache-handlers/src/invalidation.ts

@@ -1,6 +1,6 @@
 import type { InvalidationOptions } from "./types.ts";
 import { getCache, parseCacheTags, validateCacheTag } from "./utils.ts";
-import { getErrorHandler, safeJsonParse } from "./errors.ts";
+import { safeJsonParse } from "./errors.ts";
 
 const METADATA_KEY = "https://cache-internal/cache-primitives-metadata";
 

packages/cache-handlers/test/deno/input-validation.test.ts

@@ -398,60 +398,6 @@ Deno.test(
 	},
 );
 
-Deno.test(
-	"Input Validation - Config object with malicious properties",
-	async () => {
-		const cache = await caches.open("test");
-
-		// Test with config objects containing malicious properties
-		const maliciousConfigs = [
-			{
-				__proto__: { admin: true },
-				cacheName: "test",
-			},
-			{
-				constructor: { prototype: { isAdmin: true } },
-				maxTtl: 3600,
-			},
-			{
-				toString: () => "malicious",
-				defaultTtl: 1800,
-			},
-			{
-				valueOf: () => ({ admin: true }),
-				features: { cacheControl: true },
-			},
-		] as const;
-
-		for (const config of maliciousConfigs) {
-			// Should create handlers without issues despite malicious config
-			// Construct helpers to ensure config doesn't break them
-			const mergedConfig = { cacheName: "test", ...config };
-			// Basic write then read cycle
-			const req = new Request("https://example.com/api/config-test");
-			const resp = new Response("data", {
-				headers: { "cache-control": "max-age=1" },
-			});
-			const written = await writeToCache(req, resp, mergedConfig);
-			assertExists(written);
-			const { cached } = await readFromCache(req, mergedConfig);
-			if (cached) {
-				await cached.text();
-			}
-
-			// Verify no prototype pollution occurred
-			assertEquals(
-				Object.prototype.hasOwnProperty.call(Object.prototype, "admin"),
-				false,
-			);
-			assertEquals(
-				Object.prototype.hasOwnProperty.call(Object.prototype, "isAdmin"),
-				false,
-			);
-		}
-	},
-);
-
 Deno.test(
 	"Input Validation - Extremely deep object nesting in metadata",
 	async () => {

packages/cache-handlers/test/workerd/worker-entry.ts

@@ -1,5 +1,5 @@
 import { defineConfig } from "tsdown";
-import baseConfig from "../../tsdown.config.js";
+import baseConfig from "../../tsdown.config.ts";
 
 export default defineConfig({
 	...baseConfig,

packages/cache-handlers/tsdown.config.ts

@@ -5,7 +5,7 @@
 	"homepage": "https://github.com/ascorbic/cache-primitives",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/ascorbic/cache-primitives.git",
+		"url": "git+https://github.com/ascorbic/cache-primitives.git",
 		"directory": "packages/cdn-cache-control"
 	},
 	"main": "dist/index.js",