Clone incoming headers

hapijs · Dec 7, 2023 · ed98ebf · ed98ebf
1 parent 9a395d3
commit ed98ebf
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/lib/index.js b/lib/index.js
@@ -199,7 +199,7 @@ internals.BoomOutput = class {
 
         this.statusCode = statusCode;
         this.payload = payload;
-        this.headers = headers ?? {};
+        this.headers = headers ? Hoek.clone(headers, { prototype: false, symbols: false }) : {};
     }
 };
 

diff --git a/test/index.js b/test/index.js
@@ -79,6 +79,17 @@ describe('Boom', () => {
         expect(err.output.headers).to.equal({ custom: 'yes' });
     });
 
+    it('clones headers object', () => {
+
+        const headers = { custom: ['yes'] };
+        const err = new Boom.Boom('fail', { statusCode: 400, headers });
+        err.output.headers.custom.push('more');
+        err.output.headers.extra = 'added';
+
+        expect(err.output.headers).to.equal({ custom: ['yes', 'more'], extra: 'added' });
+        expect(headers).to.equal({ custom: ['yes'] });
+    });
+
     it('throws when statusCode is invalid', () => {
 
         expect(() => {