@adobe/aem-cli 15.0.0 → 15.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,3 +1,17 @@
1
+ ## [15.0.2](https://github.com/adobe/helix-cli/compare/v15.0.1...v15.0.2) (2023-10-18)
2
+
3
+
4
+ ### Bug Fixes
5
+
6
+ * reject dangerous url characters (--open) ([#2258](https://github.com/adobe/helix-cli/issues/2258)) ([25df8e8](https://github.com/adobe/helix-cli/commit/25df8e88eea4875dc9a21d14df811fda55259717)), closes [#2257](https://github.com/adobe/helix-cli/issues/2257)
7
+
8
+ ## [15.0.1](https://github.com/adobe/helix-cli/compare/v15.0.0...v15.0.1) (2023-10-03)
9
+
10
+
11
+ ### Bug Fixes
12
+
13
+ * switch order of binaries ([#2252](https://github.com/adobe/helix-cli/issues/2252)) ([64152db](https://github.com/adobe/helix-cli/commit/64152db0a61c776aea6ae49b6ea37d498614a47a))
14
+
1
15
  # [15.0.0](https://github.com/adobe/helix-cli/compare/v14.26.1...v15.0.0) (2023-09-29)
2
16
 
3
17
 
package/README.md CHANGED
@@ -1,4 +1,4 @@
1
- # Helix/AEM Command Line Interface (`aem`)
1
+ # AEM Command Line Interface (`aem`)
2
2
 
3
3
  ## Status
4
4
 
@@ -139,7 +139,7 @@ If present, `ALL_PROXY` is used as fallback if there is no other match.
139
139
  | `--tls-key` | `AEM_TLS_KEY` | undefined | Path to .key file (for enabling TLS) |
140
140
  | `--tls-cert` | `AEM_TLS_CERT` | undefined | Path to .pem file (for enabling TLS) |
141
141
 
142
- # Developing Helix CLI
142
+ # Developing AEM CLI
143
143
 
144
144
  ## Testing
145
145
 
package/package.json CHANGED
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "name": "@adobe/aem-cli",
3
- "version": "15.0.0",
3
+ "version": "15.0.2",
4
4
  "description": "AEM CLI",
5
5
  "main": "index.js",
6
6
  "type": "module",
7
7
  "bin": {
8
- "hlx": "./index.js",
9
- "aem": "./index.js"
8
+ "aem": "./index.js",
9
+ "hlx": "./index.js"
10
10
  },
11
11
  "scripts": {
12
12
  "check": "npm run lint && npm run test",
@@ -52,9 +52,9 @@
52
52
  "express": "4.18.2",
53
53
  "faye-websocket": "0.11.4",
54
54
  "fs-extra": "11.1.1",
55
- "glob": "10.3.6",
55
+ "glob": "10.3.10",
56
56
  "glob-to-regexp": "0.4.1",
57
- "hast-util-select": "6.0.0",
57
+ "hast-util-select": "6.0.1",
58
58
  "http-proxy-agent": "7.0.0",
59
59
  "https-proxy-agent": "7.0.2",
60
60
  "ignore": "5.2.4",
@@ -69,7 +69,7 @@
69
69
  "rehype-parse": "9.0.0",
70
70
  "semver": "7.5.4",
71
71
  "shelljs": "0.8.5",
72
- "unified": "11.0.2",
72
+ "unified": "11.0.3",
73
73
  "uuid": "9.0.1",
74
74
  "yargs": "17.7.2"
75
75
  },
@@ -80,16 +80,16 @@
80
80
  "@semantic-release/changelog": "6.0.3",
81
81
  "@semantic-release/git": "10.0.1",
82
82
  "c8": "8.0.1",
83
- "eslint": "8.50.0",
84
- "esmock": "2.5.1",
83
+ "eslint": "8.51.0",
84
+ "esmock": "2.5.4",
85
85
  "husky": "8.0.3",
86
- "junit-report-builder": "3.0.1",
87
- "lint-staged": "14.0.1",
86
+ "junit-report-builder": "3.1.0",
87
+ "lint-staged": "15.0.1",
88
88
  "mocha": "10.2.0",
89
89
  "mocha-multi-reporters": "1.5.1",
90
- "nock": "13.3.3",
91
- "semantic-release": "22.0.4",
92
- "sinon": "16.0.0"
90
+ "nock": "13.3.4",
91
+ "semantic-release": "22.0.5",
92
+ "sinon": "16.1.0"
93
93
  },
94
94
  "lint-staged": {
95
95
  "*.js": "eslint"
@@ -137,6 +137,9 @@ export class AbstractServerCommand extends AbstractCommand {
137
137
  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
138
138
  throw Error(`refuse to open non http(s) url (--open): ${url}`);
139
139
  }
140
+ if (!url.href.match(/^[a-zA-Z0-9._:/?%=&-]+$/)) {
141
+ throw Error(`refuse to open unsafe url (--open): ${url}`);
142
+ }
140
143
  this.log.info(`opening default browser: ${url.href}`);
141
144
  await opn(url.href);
142
145
  }