Ohm-Management - Projektarbeit B-ME

History

Erik Römmelt 9dab5e2dbc Update Node_modules		5 years ago
..
test	node_modules updated, buefy add to lib folder	5 years ago
.travis.yml	node_modules updated, buefy add to lib folder	5 years ago
CHANGELOG.md	Update Node_modules	5 years ago
CONTRIBUTING.md	node_modules updated, buefy add to lib folder	5 years ago
LICENSE.md	node_modules updated, buefy add to lib folder	5 years ago
README.md	node_modules updated, buefy add to lib folder	5 years ago
index.js	node_modules updated, buefy add to lib folder	5 years ago
package.json	Update Node_modules	5 years ago

ldap-escape

Template literal tag functions for LDAP filters and distinguished names to prevent LDAP injection attacks. Uses the escape codes from Active Directory: Characters to Escape.

Installation

npm install --save ldap-escape

Specification

Character	Escape
`*`	`\2A`
`(`	`\28`
`)`	`\29`
`\`	`\5C`
`NUL`	`\00`

escapes for distinguished names

Character	Escape
`,`	`\,`
`\`	`\\`
`#`	`\#`
`+`	`\+`
`<`	`\<`
`>`	`\>`
`;`	`\;`
`"`	`\"`
`=`	`\=`
`SPC` (leading or trailing)	`\`

Template Literal Tag Functions

ldapEscape.filter

Escapes input for use as an LDAP filter.

ldapEscape.dn

Escapes input for use as an LDAP distinguished name.

Examples

"use strict";

const ldapEscape = require('ldap-escape');

const uid = 1337;

console.log(ldapEscape.filter`uid=${uid}`); // -> '(uid=1337)'

Escape a DN

"use strict";

const ldapEscape = require('ldap-escape');

const cn = 'alice';

console.log(ldapEscape.dn`cn=${cn},dc=test`); // -> 'cn=alice,dc=test'

Testing

npm test

License

See LICENSE.md

README.md