@adobe/aem-cli 15.0.1 → 16.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,3 +1,27 @@
1
+ # [16.0.0](https://github.com/adobe/helix-cli/compare/v15.0.2...v16.0.0) (2023-10-20)
2
+
3
+
4
+ ### Bug Fixes
5
+
6
+ * ensure proper env prefix ([#2260](https://github.com/adobe/helix-cli/issues/2260)) ([29a42ba](https://github.com/adobe/helix-cli/commit/29a42ba5d182fa6d7410da6fac87327b293618c2)), closes [#2259](https://github.com/adobe/helix-cli/issues/2259)
7
+
8
+
9
+ ### Features
10
+
11
+ * major release attempt ([44298af](https://github.com/adobe/helix-cli/commit/44298af8d9aa4191c0819f0e0e48e5f668eff8e2))
12
+
13
+
14
+ ### BREAKING CHANGES
15
+
16
+ * switch to aws backend (#19) (fe09eca)
17
+
18
+ ## [15.0.2](https://github.com/adobe/helix-cli/compare/v15.0.1...v15.0.2) (2023-10-18)
19
+
20
+
21
+ ### Bug Fixes
22
+
23
+ * reject dangerous url characters (--open) ([#2258](https://github.com/adobe/helix-cli/issues/2258)) ([25df8e8](https://github.com/adobe/helix-cli/commit/25df8e88eea4875dc9a21d14df811fda55259717)), closes [#2257](https://github.com/adobe/helix-cli/issues/2257)
24
+
1
25
  ## [15.0.1](https://github.com/adobe/helix-cli/compare/v15.0.0...v15.0.1) (2023-10-03)
2
26
 
3
27
 
package/README.md CHANGED
@@ -1,4 +1,4 @@
1
- # Helix/AEM Command Line Interface (`aem`)
1
+ # AEM Command Line Interface (`aem`)
2
2
 
3
3
  ## Status
4
4
 
@@ -139,9 +139,10 @@ If present, `ALL_PROXY` is used as fallback if there is no other match.
139
139
  | `--tls-key` | `AEM_TLS_KEY` | undefined | Path to .key file (for enabling TLS) |
140
140
  | `--tls-cert` | `AEM_TLS_CERT` | undefined | Path to .pem file (for enabling TLS) |
141
141
 
142
- # Developing Helix CLI
142
+ # Developing AEM CLI
143
143
 
144
144
  ## Testing
145
145
 
146
146
  You can use `npm run check` to run the tests and check whether your code adheres
147
147
  to the aem-cli coding style.
148
+
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@adobe/aem-cli",
3
- "version": "15.0.1",
3
+ "version": "16.0.0",
4
4
  "description": "AEM CLI",
5
5
  "main": "index.js",
6
6
  "type": "module",
@@ -80,16 +80,16 @@
80
80
  "@semantic-release/changelog": "6.0.3",
81
81
  "@semantic-release/git": "10.0.1",
82
82
  "c8": "8.0.1",
83
- "eslint": "8.50.0",
84
- "esmock": "2.5.1",
83
+ "eslint": "8.51.0",
84
+ "esmock": "2.5.4",
85
85
  "husky": "8.0.3",
86
- "junit-report-builder": "3.0.1",
87
- "lint-staged": "14.0.1",
86
+ "junit-report-builder": "3.1.0",
87
+ "lint-staged": "15.0.1",
88
88
  "mocha": "10.2.0",
89
89
  "mocha-multi-reporters": "1.5.1",
90
- "nock": "13.3.3",
90
+ "nock": "13.3.4",
91
91
  "semantic-release": "22.0.5",
92
- "sinon": "16.0.0"
92
+ "sinon": "16.1.0"
93
93
  },
94
94
  "lint-staged": {
95
95
  "*.js": "eslint"
@@ -137,6 +137,9 @@ export class AbstractServerCommand extends AbstractCommand {
137
137
  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
138
138
  throw Error(`refuse to open non http(s) url (--open): ${url}`);
139
139
  }
140
+ if (!url.href.match(/^[a-zA-Z0-9._:/?%=&-]+$/)) {
141
+ throw Error(`refuse to open unsafe url (--open): ${url}`);
142
+ }
140
143
  this.log.info(`opening default browser: ${url.href}`);
141
144
  await opn(url.href);
142
145
  }
package/src/cli.js CHANGED
@@ -121,7 +121,7 @@ export default class CLI {
121
121
  .scriptName('aem')
122
122
  .usage('Usage: $0 <command> [options]')
123
123
  .parserConfiguration({ 'camel-case-expansion': false })
124
- .env('AEM')
124
+ .env('AEM_')
125
125
  .check((a) => envAwareStrict(a, argv.parsed.aliases))
126
126
  .showHelpOnFail(true)
127
127
  .fail(this._failFn)