@checkly/playwright-core 1.51.17-beta.2 → 1.51.17

package/lib/server/utils/fileUtils.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.SerializedFS = void 0;
+exports.SerializedFS = exports.SecretSerializedFS = void 0;
 exports.canAccessFile = canAccessFile;
 exports.copyFileAndMakeWritable = copyFileAndMakeWritable;
 exports.existsAsync = void 0;
@@ -201,4 +201,67 @@ class SerializedFS {
     }
   }
 }
-exports.SerializedFS = SerializedFS;
+
+// [Checkly] SecretSerializedFS extends SerializedFS to apply secret scrubbing to all file writes
+exports.SerializedFS = SerializedFS;
+class SecretSerializedFS extends SerializedFS {
+  constructor(secretsFilter) {
+    super();
+    this._secretsFilter = void 0;
+    this._secretsFilter = secretsFilter;
+  }
+  writeFile(file, content, skipIfExists) {
+    const scrubbedContent = this._scrubContent(content);
+    super.writeFile(file, scrubbedContent, skipIfExists);
+  }
+  appendFile(file, text, flush) {
+    const scrubbedText = this._scrubContent(text);
+    super.appendFile(file, scrubbedText, flush);
+  }
+
+  // [Checkly] Create a scrubbing-enabled zip file wrapper
+  createScrubbingZipFile(ZipFileClass) {
+    const scrubContent = this._scrubContent.bind(this);
+    return class ScrubbingZipFile extends ZipFileClass {
+      addBuffer(buffer, metadataPath) {
+        const scrubbedBuffer = scrubContent(buffer);
+        super.addBuffer(scrubbedBuffer, metadataPath);
+      }
+    };
+  }
+
+  // [Checkly] Apply secret scrubbing to any content being written
+  _scrubContent(content) {
+    if (Buffer.isBuffer(content)) {
+      // Handle buffer content - only scrub if it looks like text
+      try {
+        const text = content.toString('utf8');
+        if (this._isLikelyTextContent(text)) {
+          const scrubbedText = this._secretsFilter(text);
+          return Buffer.from(scrubbedText, 'utf8');
+        }
+        return content; // Return original buffer for non-text content
+      } catch {
+        return content; // Return original if can't decode as UTF-8
+      }
+    } else {
+      // Handle string content
+      return this._secretsFilter(content);
+    }
+  }
+
+  // [Checkly] Check if content looks like text that could contain secrets
+  _isLikelyTextContent(text) {
+    if (text.length === 0) return false;
+
+    // Check if the string contains mostly printable characters, but only sample the first 1000 chars
+    const sampleSize = Math.min(1000, text.length);
+    let printableCount = 0;
+    for (let i = 0; i < sampleSize; i++) {
+      const code = text.charCodeAt(i);
+      if (code >= 32 && code <= 126 || code === 9 || code === 10 || code === 13) printableCount++;
+    }
+    return printableCount / sampleSize > 0.8;
+  }
+}
+exports.SecretSerializedFS = SecretSerializedFS;