How to use @commercial/joi - 2 common examples
To help you get started, we’ve selected a few @commercial/joi examples, based on popular ways it is used in public projects.
Secure your code as it's written. Use Snyk Code to scan source code in minutes - no build needed - and fix issues immediately.
hapijs / hapi / test / security.js View on Github 
it('prevents xss in path validation response message', (done) => {
const server = new Hapi.Server();
server.connection();
server.state('encoded', { encoding: 'iron' });
server.route({
method: 'GET', path: '/fail/{name}', handler: function (request, reply) {
return reply('Success');
},
config: {
validate: { params: { name: Joi.number() } }
}
});
server.inject({
method: 'GET',
url: '/fail/it('prevents xss in query validation response message', (done) => {
const server = new Hapi.Server();
server.connection();
server.route({
method: 'GET', path: '/fail/query', handler: function (request, reply) {
return reply('Success');
},
config: {
validate: { query: { name: Joi.string() } }
}
});
server.inject({
method: 'GET',
url: '/fail/query?=value'
},
(res) => {
expect(res.result.message).to.not.contain('
