npmpackage.info

ldap-escape

Escape functions for LDAP filters and distinguished names to prevent LDAP injection attacks.

2.0.6

ISC

JavaScript

Installations

npm install ldap-escape

Pull Requests

Open

3

Total

10

Closed

4

Merged

3

Issues

Open

1

Total

2

Closed

1

Releases

Unable to fetch releases

Developer

tcort

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

10.16.3

NPM Version

6.13.4 Statistics

10 Stars

51 Commits

1 Forks

2 Watching

4 Branches

1 Contributors

Updated on 28 Dec 2022

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

947,092

Last day

-36.3%

678

Compared to previous day

Last week

-16.3%

3,641

Compared to previous week

Last month

-10.3%

17,408

Compared to previous month

Last year

6.6%

195,369

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

jest jshint

Versions

ldap-escape

Template literal tag functions for LDAP filters and distinguished names to prevent LDAP injection attacks. Uses the escape codes from Active Directory: Characters to Escape.

Installation

npm install --save ldap-escape

Specification

escapes for search filter

Character	Escape
`*`	`\2A`
`(`	`\28`
`)`	`\29`
`\`	`\5C`
`NUL`	`\00`

escapes for distinguished names

Character	Escape
`,`	`\,`
`\`	`\\`
`#`	`\#`
`+`	`\+`
`<`	`\<`
`>`	`\>`
`;`	`\;`
`"`	`\"`
`=`	`\=`
`SPC` (leading or trailing)	`\`

Template Literal Tag Functions

ldapEscape.filter

Escapes input for use as an LDAP filter.

ldapEscape.dn

Escapes input for use as an LDAP distinguished name.

Examples

Escape a Search Filter

"use strict";

const ldapEscape = require('ldap-escape');

const uid = 1337;

console.log(ldapEscape.filter`uid=${uid}`); // -> 'uid=1337'

Escape a DN

"use strict";

const ldapEscape = require('ldap-escape');

const cn = 'alice';

console.log(ldapEscape.dn`cn=${cn},dc=test`); // -> 'cn=alice,dc=test'

Testing

npm test

License

See LICENSE.md

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

1

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

1.9

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to ldap-escape

@types/ldap-escape

2.0.2

TypeScript definitions for ldap-escape

escape-string-regexp

5.0.0

Escape RegExp special characters

@smithy/util-uri-escape

3.0.0

[![NPM version](https://img.shields.io/npm/v/@smithy/util-uri-escape/latest.svg)](https://www.npmjs.com/package/@smithy/util-uri-escape) [![NPM downloads](https://img.shields.io/npm/dm/@smithy/util-uri-escape.svg)](https://www.npmjs.com/package/@smithy/ut

escape-html

1.0.3

Escape string for use in HTML