mumuki-javascript-runner 1.3.2 → 1.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a4a4e866fb702c176bcc075c039f147e773a9289251430106f6bdb3baf895e3
-  data.tar.gz: 30ed0dec052be2274099624d062ccaa087c27ea62ae586563fe54039cb072021
+  metadata.gz: ec3828b95e23b39b3306bcb2a507cde9acbf3d98d444e9dd5bb95cf3c648a915
+  data.tar.gz: b286fa2b2764f084c4f1763cfabcace5e4a975403039d40d89ed20adf4872264
 SHA512:
-  metadata.gz: 28b7216bd532615a59599a0e7bf6704532a212c18268f578f24669fd49ab950af578f59ae1ef7e34c889ca8a67f1303eab790f86cfadbbc28747ef1945328854
-  data.tar.gz: d9504c226a9a77ae7e373eb8a6a4dba0fe1c8245f7d8dbc740926e972e980ee399fe7d1732c850ce855326c2315b96cee061a61b0e393a95a46b2955f3c7face
+  metadata.gz: d717df05b3e3dd99882730c368c13a753264d63bd6c8ded6b60eb13f90feef16a301b5ac240b9ac5bc67bb7b812f3222fbdb680b243da3bbc9c397f711b56e3a
+  data.tar.gz: e27e945d2adbe2720a3204a87f9a70ebc180eb26b2ae61bebb0ed9103dd81af91308529835ee4bd9e82baebe8e8de57d0ae1c56d209427a4ee7caceb285e43af

data/lib/javascript_runner.rb

@@ -9,6 +9,7 @@ end
 
 require_relative './version'
 require_relative './metadata_hook'
+require_relative './validation_hook'
 require_relative './test_hook'
 require_relative './expectations_hook'
 require_relative './query_hook'

data/lib/validation_hook.rb

@@ -0,0 +1,18 @@
+class JavascriptValidationHook < Mumukit::Hook
+  def validate!(request)
+    matches = request_matches?(request) do |it|
+      it =~ /\W*(require|process|os|fs|eval|cluster|v8|vm|tty|tls|root|global|crypto|stream|events)\W*/
+    end
+    raise Mumukit::RequestValidationError, "You can not use #{$1} here" if matches
+  end
+
+  private
+
+  def request_matches?(request, &block)
+    [
+        request.content,
+        request.extra,
+        request.query
+    ].compact.any?(&block)
+  end
+end

data/lib/version.rb

@@ -1,3 +1,3 @@
 module JavascriptVersionHook
-  VERSION = '1.3.2'
+  VERSION = '1.3.3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mumuki-javascript-runner
 version: !ruby/object:Gem::Version
-  version: 1.3.2
+  version: 1.3.3
 platform: ruby
 authors:
 - Franco Leonardo Bulgarelli
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-02-20 00:00:00.000000000 Z
+date: 2018-05-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: mumukit
@@ -106,6 +106,7 @@ files:
 - lib/metadata_hook.rb
 - lib/query_hook.rb
 - lib/test_hook.rb
+- lib/validation_hook.rb
 - lib/version.rb
 homepage: http://github.com/mumuki/mumuki-javascript-server
 licenses:
@@ -127,7 +128,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Javascript Runner for Mumuki