# express-content-length-validator

> Make sure your application is not vulnerable to large payload attacks

Latest version **1.0.0** (published 2015-07-13) · MIT license · 0 weekly downloads

## Install

```sh
npm install express-content-length-validator
pnpm add express-content-length-validator
yarn add express-content-length-validator
bun add express-content-length-validator
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.0.0 |
| Published | 2015-07-13 |
| First published | 2015-01-27 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 0 |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 45 |
| Author | Eric Mendes Dantas |
| Maintainers | ericmdantas |
| Keywords | express, validator, content-length, payload, attack, express-validator, middleware, express-content-length-validator |

## Links

- npm: https://www.npmjs.com/package/express-content-length-validator
- Repository: https://github.com/ericmdantas/express-content-length-validator
- Issues: https://github.com/ericmdantas/express-content-length-validator/issues
- npm.io page: https://npm.io/package/express-content-length-validator

## Alternatives

- [@sindresorhus/slugify](https://npm.io/package/@sindresorhus/slugify.md) — 3.7M weekly downloads
- [solid-js](https://npm.io/package/solid-js.md) — 2.7M weekly downloads
- [expo-glass-effect](https://npm.io/package/expo-glass-effect.md) — 2.5M weekly downloads
- [nanoassert](https://npm.io/package/nanoassert.md) — 780.8K weekly downloads
- [@ffmpeg/ffmpeg](https://npm.io/package/@ffmpeg/ffmpeg.md) — 529.5K weekly downloads

## Recent versions

- 1.0.0 (latest) — 2015-07-13
- 0.0.4 — 2015-02-19
- 0.0.3 — 2015-02-18
- 0.0.2 — 2015-02-05
- 0.0.1 — 2015-01-27

## README

# express-content-length-validator

[![Build Status](https://travis-ci.org/ericmdantas/express-content-length-validator.svg?branch=master)](https://travis-ci.org/ericmdantas/express-content-length-validator)
[![Coverage Status](https://coveralls.io/repos/ericmdantas/express-content-length-validator/badge.svg)](https://coveralls.io/r/ericmdantas/express-content-length-validator)

Make sure your application is not vulnerable to large payload attacks



# install

```$ npm install express-content-length-validator --save```



# api

Once you've gotten the content-length module:

```js

    var contentLength = require('express-content-length-validator');

```

You'll have a single function to work with: ```validateMax```.

## contentLength.validateMax(options)

```options``` is an object with three properties:

- ```max```, which defaults to 999;
- ```status```, which defaults to 400;
- ```message```, which defaults to "Invalid payload; too big.".


# usage as a middleware

```js

    var contentLength = require('express-content-length-validator');
    var app = require('express')();
    var MAX_CONTENT_LENGTH_ACCEPTED = 9999;

    app.use(contentLength.validateMax({max: MAX_CONTENT_LENGTH_ACCEPTED, status: 400, message: "stop it!"})); // max size accepted for the content-length

    // and then, when you're checking the routes

    app
        .post('/some/url/here', function(req, res)
        {
            /*all is good, the content-length is less than the expected
              so you can keep with your business logic*/
        });

    app.listen(8080);

```



# usage per endpoint

```js

    var contentLength = require('express-content-length-validator');
    var app = require('express')();
    var MAX_CONTENT_LENGTH_ACCEPTED = 9999;

    app.post('/some/url/here', contentLength.validateMax({max: MAX_CONTENT_LENGTH_ACCEPTED, status: 400, message: "send a smaller json, will ya?"}), function(req, res)
    {
        /*all is good, the content-length is less than the expected
        so you can keep with your business logic*/
    });

    app.listen(8080);
```


# It's that easy =]


# license

MIT

---
_Source: https://npm.io/package/express-content-length-validator · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._