deps: qs@4.0.0

expressjs · Jul 6, 2015 · 6f30fcb · 6f30fcb
1 parent 1eb4c9d
commit 6f30fcb
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/HISTORY.md b/HISTORY.md
@@ -2,6 +2,10 @@ unreleased
 ==========
 
   * deps: iconv-lite@0.4.11
+  * deps: qs@4.0.0
+    - Fix dropping parameters like `hasOwnProperty`
+    - Fix user-visible incompatibilities from 3.1.0
+    - Fix various parsing edge cases
   * deps: raw-body@~2.1.2
     - Fix error stack traces to skip `makeError`
     - deps: iconv-lite@0.4.11

diff --git a/lib/types/urlencoded.js b/lib/types/urlencoded.js
@@ -148,6 +148,8 @@ function extendedparser(options) {
 
     debug('parse extended urlencoding')
     return parse(body, {
+      allowDots: false,
+      allowPrototypes: true,
       arrayLimit: arrayLimit,
       depth: Infinity,
       parameterLimit: parameterLimit

diff --git a/package.json b/package.json
@@ -16,7 +16,7 @@
     "http-errors": "~1.3.1",
     "iconv-lite": "0.4.11",
     "on-finished": "~2.3.0",
-    "qs": "2.4.2",
+    "qs": "4.0.0",
     "raw-body": "~2.1.2",
     "type-is": "~1.6.4"
   },