qs@6.2.0

History.md

@@ -26,6 +26,8 @@ unreleased
     - IPv4 netmasks must be contingous
     - IPv6 addresses cannot be used as a netmask
     - deps: ipaddr.js@1.1.0
+  * qs@6.2.0
+    - Add `decoder` option in `parse` function
   * deps: range-parser@~1.1.0
     - Fix incorrectly returning -1 when there is at least one valid range
     - perf: remove internal function

lib/middleware/query.js

@@ -30,14 +30,9 @@ module.exports = function query(options) {
     opts = undefined;
   }
 
-  if (opts !== undefined) {
-    if (opts.allowDots === undefined) {
-      opts.allowDots = false;
-    }
-
-    if (opts.allowPrototypes === undefined) {
-      opts.allowPrototypes = true;
-    }
+  if (opts !== undefined && opts.allowPrototypes === undefined) {
+    // back-compat for qs module
+    opts.allowPrototypes = true;
   }
 
   return function query(req, res, next){

lib/utils.js

@@ -283,7 +283,6 @@ exports.setCharset = function setCharset(type, charset) {
 
 function parseExtendedQueryString(str) {
   return qs.parse(str, {
-    allowDots: false,
     allowPrototypes: true
   });
 }

package.json

@@ -45,7 +45,7 @@
     "parseurl": "~1.3.1",
     "path-to-regexp": "0.1.7",
     "proxy-addr": "~1.1.1",
-    "qs": "4.0.0",
+    "qs": "6.2.0",
     "range-parser": "~1.1.0",
     "send": "0.13.1",
     "serve-static": "~1.10.2",