When parsing JSON in FormData, creates an exception

[TiLopes]

{autor:asd,dataLimite:2023-02-21,dataOcorrencia:2023-02-21,descricao:asdas,infoAdicional:sadads,origem:asd,titulo:asdsa}
 ^

SyntaxError: Unexpected token a in JSON at position 1
    at JSON.parse (<anonymous>)
    at createOcorrencia (D:\Repos\PAP\backendv2\controllers\ocorrencias\controller.js:57:19)
    at Layer.handle [as handle_request] (D:\Repos\PAP\backendv2\node_modules\.pnpm\[email protected]\node_modules\express\lib\router\layer.js:95:5)
    at next (D:\Repos\PAP\backendv2\node_modules\.pnpm\[email protected]\node_modules\express\lib\router\route.js:144:13)
    at verifyPermission (D:\Repos\PAP\backendv2\middleware\verifyPermissions.js:47:5)      
    at processTicksAndRejections (node:internal/process/task_queues:96:5)

If I remove the middleware it starts working.

[pariazar]

Hi you have a syntax error inside of your code,
you need to use it as middleware like following code:

const sanitizer = require("perfect-express-sanitizer");
 
 app.use(sanitizer.clean({
     xss: true,
     noSql: true,
     sql: true
 }));

[TiLopes]

I have it just like that.

[TiLopes]

This is how my FormData is composed. First part json and then all the files to be sent.

 let formData = new FormData();
    const json = JSON.stringify({
      autor: data.autor,
      dataLimite: data.dataLimite.toISOString().slice(0, 10),
      dataOcorrencia: data.dataOcorrencia.toISOString().slice(0, 10),
      descricao: data.descricao,
      infoAdicional: data.infoAdicional,
      origem: data.origem,
      titulo: data.titulo,
    });

    formData.append("document", json);

    if (acceptedFiles.length > 0) {
      acceptedFiles.forEach((f) => {
        formData.append("files[]", f, f.name);
      });
    }

This is how I get the JSON information in the server

  const {
    autor,
    dataLimite,
    dataOcorrencia,
    descricao,
    infoAdicional,
    origem,
    titulo,
  } = JSON.parse(req.body.document);

[amansatija]

hey any solution to this. ??

[amansatija]

on further investigation i have found out that if you keep sql:false then it transmits multipart form data how ever when u keep sql as true then in that case it does transmit .. so the bug has got something to do with the sql module

[jvfrodrigues]

It seems to have to do also with having it on verification of headers normally formdata content type looks like this
multipart/form-data; boundary=---------------------------35408058081073067362132698594

Having the middleware makes it look like this
multipart/form-data boundary=35408058081073067362132698594