@contentstack/cli-cm-import 1.15.5 → 1.15.7

package/README.md

@@ -47,7 +47,7 @@ $ npm install -g @contentstack/cli-cm-import
 $ csdx COMMAND
 running command...
 $ csdx (--version)
-@contentstack/cli-cm-import/1.15.5 linux-x64 node-v18.20.2
+@contentstack/cli-cm-import/1.15.7 linux-x64 node-v18.20.3
 $ csdx --help [COMMAND]
 USAGE
   $ csdx COMMAND

package/lib/import/modules/content-types.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ModuleClassParams } from '../../types';

package/lib/import/modules/content-types.js

@@ -2,7 +2,7 @@
 /* eslint-disable no-prototype-builtins */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -12,6 +12,7 @@ const lodash_1 = require("lodash");
 const utils_1 = require("../../utils");
 const base_class_1 = tslib_1.__importDefault(require("./base-class"));
 const content_type_helper_1 = require("../../utils/content-type-helper");
+const cli_utilities_1 = require("@contentstack/cli-utilities");
 class ContentTypesImport extends base_class_1.default {
     constructor({ importConfig, stackAPIClient }) {
         super({ importConfig, stackAPIClient });
@@ -19,13 +20,13 @@ class ContentTypesImport extends base_class_1.default {
         this.cTsConfig = importConfig.modules['content-types'];
         this.gFsConfig = importConfig.modules['global-fields'];
         this.reqConcurrency = this.cTsConfig.writeConcurrency || this.importConfig.writeConcurrency;
-        this.cTsFolderPath = path.join(this.importConfig.data, this.cTsConfig.dirName);
-        this.cTsMapperPath = path.join(this.importConfig.data, 'mapper', 'content_types');
-        this.cTsSuccessPath = path.join(this.cTsMapperPath, 'success.json');
-        this.gFsFolderPath = path.resolve(this.importConfig.data, this.gFsConfig.dirName);
-        this.gFsMapperFolderPath = path.join(importConfig.data, 'mapper', 'global_fields', 'success.json');
-        this.gFsPendingPath = path.join(importConfig.data, 'mapper', 'global_fields', 'pending_global_fields.js');
-        this.marketplaceAppMapperPath = path.join(this.importConfig.data, 'mapper', 'marketplace_apps', 'uid-mapping.json');
+        this.cTsFolderPath = path.join((0, cli_utilities_1.sanitizePath)(this.importConfig.data), (0, cli_utilities_1.sanitizePath)(this.cTsConfig.dirName));
+        this.cTsMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.importConfig.data), 'mapper', 'content_types');
+        this.cTsSuccessPath = path.join((0, cli_utilities_1.sanitizePath)(this.cTsMapperPath), 'success.json');
+        this.gFsFolderPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.importConfig.data), (0, cli_utilities_1.sanitizePath)(this.gFsConfig.dirName));
+        this.gFsMapperFolderPath = path.join((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'global_fields', 'success.json');
+        this.gFsPendingPath = path.join((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'global_fields', 'pending_global_fields.js');
+        this.marketplaceAppMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.importConfig.data), 'mapper', 'marketplace_apps', 'uid-mapping.json');
         this.ignoredFilesInContentTypesFolder = new Map([
             ['__master.json', 'true'],
             ['__priority.json', 'true'],
@@ -39,8 +40,8 @@ class ContentTypesImport extends base_class_1.default {
         this.gFs = [];
         this.createdGFs = [];
         this.pendingGFs = [];
-        this.taxonomiesPath = path.join(importConfig.data, 'mapper/taxonomies', 'success.json');
-        this.extPendingPath = path.join(importConfig.data, 'mapper', 'extensions', 'pending_extensions.js');
+        this.taxonomiesPath = path.join((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper/taxonomies', 'success.json');
+        this.extPendingPath = path.join((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'extensions', 'pending_extensions.js');
     }
     async start() {
         /**

package/lib/import/modules/entries.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ModuleClassParams } from '../../types';

package/lib/import/modules/entries.js

@@ -2,7 +2,7 @@
 /* eslint-disable no-prototype-builtins */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -15,19 +15,19 @@ const base_class_1 = tslib_1.__importDefault(require("./base-class"));
 class EntriesImport extends base_class_1.default {
     constructor({ importConfig, stackAPIClient }) {
         super({ importConfig, stackAPIClient });
-        this.assetUidMapperPath = path.resolve(importConfig.data, 'mapper', 'assets', 'uid-mapping.json');
-        this.assetUrlMapperPath = path.resolve(importConfig.data, 'mapper', 'assets', 'url-mapping.json');
-        this.entriesMapperPath = path.resolve(importConfig.data, 'mapper', 'entries');
-        this.envPath = path.resolve(importConfig.data, 'environments', 'environments.json');
-        this.entriesUIDMapperPath = path.join(this.entriesMapperPath, 'uid-mapping.json');
-        this.uniqueUidMapperPath = path.join(this.entriesMapperPath, 'unique-mapping.json');
-        this.modifiedCTsPath = path.join(this.entriesMapperPath, 'modified-schemas.json');
-        this.marketplaceAppMapperPath = path.join(this.importConfig.data, 'mapper', 'marketplace_apps', 'uid-mapping.json');
-        this.taxonomiesPath = path.join(this.importConfig.data, 'mapper', 'taxonomies', 'terms', 'success.json');
+        this.assetUidMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'assets', 'uid-mapping.json');
+        this.assetUrlMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'assets', 'url-mapping.json');
+        this.entriesMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), 'mapper', 'entries');
+        this.envPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), 'environments', 'environments.json');
+        this.entriesUIDMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.entriesMapperPath), 'uid-mapping.json');
+        this.uniqueUidMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.entriesMapperPath), 'unique-mapping.json');
+        this.modifiedCTsPath = path.join((0, cli_utilities_1.sanitizePath)(this.entriesMapperPath), 'modified-schemas.json');
+        this.marketplaceAppMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.importConfig.data), 'mapper', 'marketplace_apps', 'uid-mapping.json');
+        this.taxonomiesPath = path.join((0, cli_utilities_1.sanitizePath)(this.importConfig.data), 'mapper', 'taxonomies', 'terms', 'success.json');
         this.entriesConfig = importConfig.modules.entries;
-        this.entriesPath = path.resolve(importConfig.data, this.entriesConfig.dirName);
-        this.cTsPath = path.resolve(importConfig.data, importConfig.modules['content-types'].dirName);
-        this.localesPath = path.resolve(importConfig.data, importConfig.modules.locales.dirName, importConfig.modules.locales.fileName);
+        this.entriesPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), (0, cli_utilities_1.sanitizePath)(this.entriesConfig.dirName));
+        this.cTsPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), (0, cli_utilities_1.sanitizePath)(importConfig.modules['content-types'].dirName));
+        this.localesPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.data), (0, cli_utilities_1.sanitizePath)(importConfig.modules.locales.dirName), (0, cli_utilities_1.sanitizePath)(importConfig.modules.locales.fileName));
         this.importConcurrency = this.entriesConfig.importConcurrency || importConfig.importConcurrency;
         this.entriesUidMapper = {};
         this.modifiedCTs = [];
@@ -243,7 +243,7 @@ class EntriesImport extends base_class_1.default {
                 (0, utils_1.log)(this.importConfig, `Localized entry: '${entry.title}' of content type ${cTUid} in locale ${locale}`, 'info');
                 entry.uid = oldUid;
                 entry.entryOldUid = oldUid;
-                entry.sourceEntryFilePath = path.join(basePath, additionalInfo.entryFileName); // stores source file path temporarily
+                entry.sourceEntryFilePath = path.join((0, cli_utilities_1.sanitizePath)(basePath), (0, cli_utilities_1.sanitizePath)(additionalInfo.entryFileName)); // stores source file path temporarily
                 entriesCreateFileHelper.writeIntoFile({ [oldUid]: entry }, { mapKeyVal: true });
             }
             else {
@@ -256,7 +256,7 @@ class EntriesImport extends base_class_1.default {
                     this.autoCreatedEntries.push({ cTUid, locale, entryUid: response.uid });
                 }
                 this.entriesUidMapper[entry.uid] = response.uid;
-                entry.sourceEntryFilePath = path.join(basePath, additionalInfo.entryFileName); // stores source file path temporarily
+                entry.sourceEntryFilePath = path.join((0, cli_utilities_1.sanitizePath)(basePath), (0, cli_utilities_1.sanitizePath)(additionalInfo.entryFileName)); // stores source file path temporarily
                 entry.entryOldUid = entry.uid; // stores old uid temporarily
                 entriesCreateFileHelper.writeIntoFile({ [entry.uid]: entry }, { mapKeyVal: true });
             }
@@ -269,7 +269,7 @@ class EntriesImport extends base_class_1.default {
                 if (((_a = error === null || error === void 0 ? void 0 : error.errors) === null || _a === void 0 ? void 0 : _a.title) || ((_b = error === null || error === void 0 ? void 0 : error.errors) === null || _b === void 0 ? void 0 : _b.uid)) {
                     if (this.importConfig.replaceExisting) {
                         entry.entryOldUid = uid;
-                        entry.sourceEntryFilePath = path.join(basePath, additionalInfo.entryFileName); // stores source file path temporarily
+                        entry.sourceEntryFilePath = path.join((0, cli_utilities_1.sanitizePath)(basePath), (0, cli_utilities_1.sanitizePath)(additionalInfo.entryFileName)); // stores source file path temporarily
                         existingEntriesFileHelper.writeIntoFile({ [uid]: entry }, { mapKeyVal: true });
                     }
                     if (!this.importConfig.skipExisting) {

package/lib/import/modules/global-fields.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ModuleClassParams } from '../../types';

package/lib/import/modules/global-fields.js

@@ -2,13 +2,14 @@
 /* eslint-disable no-prototype-builtins */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 const path = tslib_1.__importStar(require("path"));
 const lodash_1 = require("lodash");
+const cli_utilities_1 = require("@contentstack/cli-utilities");
 const utils_1 = require("../../utils");
 const base_class_1 = tslib_1.__importDefault(require("./base-class"));
 class ImportGlobalFields extends base_class_1.default {
@@ -23,13 +24,13 @@ class ImportGlobalFields extends base_class_1.default {
         this.pendingGFs = [];
         this.existingGFs = [];
         this.reqConcurrency = this.gFsConfig.writeConcurrency || this.config.writeConcurrency;
-        this.gFsMapperPath = path.resolve(this.config.data, 'mapper', 'global_fields');
-        this.gFsFolderPath = path.resolve(this.config.data, this.gFsConfig.dirName);
-        this.gFsFailsPath = path.resolve(this.config.data, 'mapper', 'global_fields', 'fails.json');
-        this.gFsSuccessPath = path.resolve(this.config.data, 'mapper', 'global_fields', 'success.json');
-        this.gFsUidMapperPath = path.resolve(this.config.data, 'mapper', 'global_fields', 'uid-mapping.json');
-        this.gFsPendingPath = path.resolve(this.config.data, 'mapper', 'global_fields', 'pending_global_fields.js');
-        this.marketplaceAppMapperPath = path.join(this.config.data, 'mapper', 'marketplace_apps', 'uid-mapping.json');
+        this.gFsMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'global_fields');
+        this.gFsFolderPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), (0, cli_utilities_1.sanitizePath)(this.gFsConfig.dirName));
+        this.gFsFailsPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'global_fields', 'fails.json');
+        this.gFsSuccessPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'global_fields', 'success.json');
+        this.gFsUidMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'global_fields', 'uid-mapping.json');
+        this.gFsPendingPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'global_fields', 'pending_global_fields.js');
+        this.marketplaceAppMapperPath = path.join((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'marketplace_apps', 'uid-mapping.json');
     }
     async start() {
         this.gFs = utils_1.fsUtil.readFile(path.join(this.gFsFolderPath, this.gFsConfig.fileName));

package/lib/import/modules/locales.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ModuleClassParams } from '../../types';

package/lib/import/modules/locales.js

@@ -2,7 +2,7 @@
 /* eslint-disable no-prototype-builtins */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -25,11 +25,11 @@ class ImportLocales extends base_class_1.default {
         this.createdLocales = [];
         this.failedLocales = [];
         this.reqConcurrency = this.localeConfig.writeConcurrency || this.config.writeConcurrency;
-        this.langMapperPath = path.resolve(this.config.data, 'mapper', 'languages');
-        this.langFolderPath = path.resolve(this.config.data, this.localeConfig.dirName);
-        this.langFailsPath = path.resolve(this.config.data, 'mapper', 'languages', 'fails.json');
-        this.langSuccessPath = path.resolve(this.config.data, 'mapper', 'languages', 'success.json');
-        this.langUidMapperPath = path.resolve(this.config.data, 'mapper', 'languages', 'uid-mapper.json');
+        this.langMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'languages');
+        this.langFolderPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), (0, cli_utilities_1.sanitizePath)(this.localeConfig.dirName));
+        this.langFailsPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'languages', 'fails.json');
+        this.langSuccessPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'languages', 'success.json');
+        this.langUidMapperPath = path.resolve((0, cli_utilities_1.sanitizePath)(this.config.data), 'mapper', 'languages', 'uid-mapper.json');
     }
     async start() {
         this.languages = utils_1.fsUtil.readFile(path.join(this.langFolderPath, this.localeConfig.fileName));

package/lib/import/modules-js/assets.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const fs = require('fs');
@@ -11,6 +11,7 @@ const mkdirp = require('mkdirp');
 const Promise = require('bluebird');
 let { default: config } = require('../../config');
 const { fileHelper, log, uploadAssetHelper } = require('../../utils');
+const { sanitizePath, validateUids, validateFileName } = require('@contentstack/cli-utilities');
 module.exports = class ImportAssets {
     constructor(importConfig, stackAPIClient) {
         this.fails = [];
@@ -66,7 +67,10 @@ module.exports = class ImportAssets {
                             // the asset has been already imported
                             return void 0;
                         }
-                        let currentAssetFolderPath = path.join(self.assetsFolderPath, assetUid);
+                        if (!validateUids(assetUid)) {
+                            reject(`UID Not Valid`);
+                        }
+                        let currentAssetFolderPath = path.join(sanitizePath(self.assetsFolderPath), sanitizePath(assetUid));
                         if (fs.existsSync(currentAssetFolderPath)) {
                             // if this is true, means, the exported asset data is versioned
                             // hence, upload each asset with its version
@@ -77,7 +81,10 @@ module.exports = class ImportAssets {
                             }
                             let uidContainer = {};
                             let urlContainer = {};
-                            let assetPath = path.resolve(currentAssetFolderPath, self.assets[assetUid].filename);
+                            if (!validateFileName(self.assets[assetUid].filename)) {
+                                reject(`File Name Not Valid`);
+                            }
+                            let assetPath = path.resolve(sanitizePath(currentAssetFolderPath), sanitizePath(self.assets[assetUid].filename));
                             if (self.assets[assetUid].parent_uid && typeof self.assets[assetUid].parent_uid === 'string') {
                                 if (self.mappedFolderUids.hasOwnProperty(self.assets[assetUid].parent_uid)) {
                                     self.assets[assetUid].parent_uid = self.mappedFolderUids[self.assets[assetUid].parent_uid];
@@ -142,7 +149,10 @@ module.exports = class ImportAssets {
     uploadVersionedAssets(uid, assetFolderPath) {
         let self = this;
         return new Promise(function (resolve, reject) {
-            let versionedAssetMetadata = fileHelper.readFileSync(path.join(assetFolderPath, '_contentstack_' + uid + '.json'));
+            if (!validateUids(uid)) {
+                reject(`UID not valid`);
+            }
+            let versionedAssetMetadata = fileHelper.readFileSync(path.join(sanitizePath(assetFolderPath), '_contentstack_' + sanitizePath(uid) + '.json'));
             // using last version, find asset's parent
             let lastVersion = versionedAssetMetadata[versionedAssetMetadata.length - 1];
             if (typeof lastVersion.parent_uid === 'string') {
@@ -165,7 +175,10 @@ module.exports = class ImportAssets {
             let filesStreamed = [];
             return Promise.map(versionedAssetMetadata, function () {
                 let assetMetadata = versionedAssetMetadata[counter];
-                let assetPath = path.join(assetFolderPath, assetMetadata.filename);
+                if (!validateFileName(assetMetadata.filename)) {
+                    reject(`File Name not valid`);
+                }
+                let assetPath = path.join(sanitizePath(assetFolderPath), sanitizePath(assetMetadata.filename));
                 if (++counter === 1) {
                     return self
                         .uploadAsset(assetPath, assetMetadata, uidContainer, urlContainer)

package/lib/import/modules-js/content-types.js

@@ -3,6 +3,7 @@ const path = require('path');
 const chalk = require('chalk');
 const { cloneDeep, find, findIndex } = require('lodash');
 const { fileHelper, log, executeTask, formatError, schemaTemplate, lookupExtension } = require('../../utils');
+const { sanitizePath } = require('@contentstack/cli-utilities');
 class ContentTypesImport {
     constructor(importConfig, stackAPIClient) {
         this.stackAPIClient = stackAPIClient;
@@ -11,12 +12,12 @@ class ContentTypesImport {
         this.globalFieldConfig = importConfig.modules.globalfields;
         this.importConcurrency = this.contentTypeConfig.importConcurrency || this.importConfig.importConcurrency;
         this.writeConcurrency = this.contentTypeConfig.writeConcurrency || this.importConfig.writeConcurrency;
-        this.contentTypesFolderPath = path.join(this.importConfig.data, this.contentTypeConfig.dirName);
-        this.mapperFolderPath = path.join(this.importConfig.data, 'mapper', 'content_types');
-        this.existingContentTypesPath = path.join(this.mapperFolderPath, 'success.json');
-        this.globalFieldsFolderPath = path.resolve(this.importConfig.data, this.globalFieldConfig.dirName);
-        this.globalFieldMapperFolderPath = path.join(importConfig.data, 'mapper', 'global_fields', 'success.json');
-        this.globalFieldPendingPath = path.join(importConfig.data, 'mapper', 'global_fields', 'pending_global_fields.js');
+        this.contentTypesFolderPath = path.join(sanitizePath(this.importConfig.data), sanitizePath(this.contentTypeConfig.dirName));
+        this.mapperFolderPath = path.join(sanitizePath(this.importConfig.data), 'mapper', 'content_types');
+        this.existingContentTypesPath = path.join(sanitizePath(this.mapperFolderPath), 'success.json');
+        this.globalFieldsFolderPath = path.resolve(sanitizePath(this.importConfig.data), sanitizePath(this.globalFieldConfig.dirName));
+        this.globalFieldMapperFolderPath = path.join(sanitizePath(importConfig.data), 'mapper', 'global_fields', 'success.json');
+        this.globalFieldPendingPath = path.join(sanitizePath(importConfig.data), 'mapper', 'global_fields', 'pending_global_fields.js');
         this.ignoredFilesInContentTypesFolder = new Map([
             ['__master.json', 'true'],
             ['__priority.json', 'true'],

package/lib/import/modules-js/entries.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const Promise = require('bluebird');
@@ -11,6 +11,7 @@ const mkdirp = require('mkdirp');
 const chalk = require('chalk');
 const { fileHelper, log, formatError, lookupExtension, suppressSchemaReference, lookupAssets, lookupEntries, } = require('../../utils');
 const { default: config } = require('../../config');
+const { sanitizePath } = require('@contentstack/cli-utilities');
 const addlogs = log;
 module.exports = class ImportEntries {
     constructor(importConfig, stackAPIClient) {
@@ -665,7 +666,7 @@ module.exports = class ImportEntries {
                     return resolve();
                 }
                 self.mappedUids[query.entry.uid] = response.body.entries[0].uid;
-                let _ePath = path.join(this.entryMapperPath, query.locale, query.content_type, 'success.json');
+                let _ePath = path.join(sanitizePath(this.entryMapperPath), sanitizePath(query.locale), sanitizePath(query.content_type), 'success.json');
                 let entries = fileHelper.readFileSync(_ePath);
                 entries.push(query.entry);
                 fileHelper.writeFileSync(_ePath, entries);

package/lib/import/modules-js/environments.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const fs = require('fs');

package/lib/import/modules-js/extensions.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const mkdirp = require('mkdirp');

package/lib/import/modules-js/global-fields.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 let fs = require('fs');

package/lib/import/modules-js/labels.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const path = require('path');

package/lib/import/modules-js/locales.js

@@ -1,7 +1,7 @@
 /* eslint-disable no-prototype-builtins */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 let fs = require('fs');

package/lib/import/modules-js/marketplace-apps.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Export
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const fs = require('fs');

package/lib/import/modules-js/webhooks.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const mkdirp = require('mkdirp');

package/lib/import/modules-js/workflows.js

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const fs = require('fs');

package/lib/utils/asset-helper.js

@@ -70,13 +70,14 @@ const lookupAssets = function (data, mappedAssetUids, mappedAssetUrls, assetUidM
     let matchedUids = [];
     let matchedUrls = [];
     let find = function (schema, entryToFind) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
         for (let i = 0, _i = schema.length; i < _i; i++) {
             if (schema[i].data_type === 'text' &&
                 schema[i].field_metadata &&
-                (schema[i].field_metadata.markdown || schema[i].field_metadata.rich_text_type)) {
+                (((_b = (_a = schema[i]) === null || _a === void 0 ? void 0 : _a.field_metadata) === null || _b === void 0 ? void 0 : _b.markdown) || ((_d = (_c = schema[i]) === null || _c === void 0 ? void 0 : _c.field_metadata) === null || _d === void 0 ? void 0 : _d.rich_text_type))) {
                 parent.push(schema[i].uid);
                 findFileUrls(schema[i], entryToFind, assetUrls);
-                if (schema[i].field_metadata.rich_text_type) {
+                if ((_f = (_e = schema[i]) === null || _e === void 0 ? void 0 : _e.field_metadata) === null || _f === void 0 ? void 0 : _f.rich_text_type) {
                     findAssetIdsFromHtmlRte(entryToFind, schema[i]);
                 }
                 parent.pop();
@@ -99,7 +100,7 @@ const lookupAssets = function (data, mappedAssetUids, mappedAssetUrls, assetUidM
             }
             // added rich_text_type field check because some marketplace extensions also
             // have data_type has json
-            if (schema[i].data_type === 'json' && schema[i].field_metadata.rich_text_type) {
+            if (schema[i].data_type === 'json' && ((_h = (_g = schema[i]) === null || _g === void 0 ? void 0 : _g.field_metadata) === null || _h === void 0 ? void 0 : _h.rich_text_type)) {
                 parent.push(schema[i].uid);
                 // findFileUrls(schema[i], entry, assetUrls)
                 findAssetIdsFromJsonRte(data.entry, data.content_type.schema);
@@ -144,6 +145,7 @@ const lookupAssets = function (data, mappedAssetUids, mappedAssetUrls, assetUidM
         }
     }
     function findAssetIdsFromJsonRte(entryObj, ctSchema) {
+        var _a;
         for (const element of ctSchema) {
             switch (element.data_type) {
                 case 'blocks': {
@@ -173,7 +175,7 @@ const lookupAssets = function (data, mappedAssetUids, mappedAssetUrls, assetUidM
                     break;
                 }
                 case 'json': {
-                    if (entryObj[element.uid] && element.field_metadata.rich_text_type) {
+                    if (entryObj[element.uid] && ((_a = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _a === void 0 ? void 0 : _a.rich_text_type)) {
                         if (element.multiple) {
                             entryObj[element.uid].forEach((jsonRteData) => {
                                 gatherJsonRteAssetIds(jsonRteData);
@@ -250,8 +252,12 @@ const lookupAssets = function (data, mappedAssetUids, mappedAssetUrls, assetUidM
         let uid = mappedAssetUids[assetUid];
         if (typeof uid !== 'undefined') {
             const escapedAssetUid = assetUid.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-            entry = entry.replace(new RegExp(escapedAssetUid, 'img'), uid);
-            matchedUids.push(assetUid);
+            const regex = new RegExp(`\\b${escapedAssetUid}\\b`, 'img');
+            let { status } = (0, cli_utilities_1.validateRegex)(new RegExp(regex, 'img'));
+            if (status === 'safe') {
+                entry = entry.replace(regex, uid);
+                matchedUids.push(assetUid);
+            }
         }
         else {
             unmatchedUids.push(assetUid);

package/lib/utils/backup-handler.js

@@ -12,7 +12,7 @@ async function backupHandler(importConfig) {
     let backupDirPath;
     const subDir = isSubDirectory(importConfig);
     if (subDir) {
-        backupDirPath = path.resolve(importConfig.contentDir, '..', '_backup_' + Math.floor(Math.random() * 1000));
+        backupDirPath = path.resolve((0, cli_utilities_1.sanitizePath)(importConfig.contentDir), '..', '_backup_' + Math.floor(Math.random() * 1000));
         if (importConfig.createBackupDir) {
             cli_utilities_1.cliux.print(`Warning!!! Provided backup directory path is a sub directory of the content directory, Cannot copy to a sub directory. Hence new backup directory created - ${backupDirPath}`, {
                 color: 'yellow',

package/lib/utils/common-helper.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ImportConfig } from '../types';

package/lib/utils/common-helper.js

@@ -2,7 +2,7 @@
 /* eslint-disable no-console */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -65,7 +65,7 @@ const sanitizeStack = (importConfig) => {
             if (stackDetails.data && stackDetails.data.stack && stackDetails.data.stack.settings) {
                 const newStackVersion = stackDetails.data.stack.settings.version;
                 const newStackDate = new Date(newStackVersion).toString();
-                const stackFilePath = path.join(importConfig.data, importConfig.modules.stack.dirName, importConfig.modules.stack.fileName);
+                const stackFilePath = path.join((0, cli_utilities_1.sanitizePath)(importConfig.data), (0, cli_utilities_1.sanitizePath)(importConfig.modules.stack.dirName), (0, cli_utilities_1.sanitizePath)(importConfig.modules.stack.fileName));
                 const oldStackDetails = (0, file_helper_1.readFileSync)(stackFilePath);
                 if (!oldStackDetails || !oldStackDetails.settings || !oldStackDetails.settings.hasOwnProperty('version')) {
                     throw new Error(`${JSON.stringify(oldStackDetails)} is invalid!`);

package/lib/utils/content-type-helper.d.ts

@@ -42,7 +42,7 @@ export declare const schemaTemplate: {
 };
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 export declare const suppressSchemaReference: (schema: any, flag: any) => void;

package/lib/utils/content-type-helper.js

@@ -47,10 +47,11 @@ exports.schemaTemplate = {
 };
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const suppressSchemaReference = function (schema, flag) {
+    var _a, _b, _c, _d;
     for (var i in schema) {
         if (schema[i].data_type === 'group' || schema[i].data_type === 'global_field') {
             (0, exports.suppressSchemaReference)(schema[i].schema, flag);
@@ -63,12 +64,12 @@ const suppressSchemaReference = function (schema, flag) {
         else if (schema[i].data_type === 'reference') {
             flag.references = true;
         }
-        else if (schema[i].data_type === 'json' && schema[i].field_metadata.rich_text_type) {
+        else if (schema[i].data_type === 'json' && ((_b = (_a = schema[i]) === null || _a === void 0 ? void 0 : _a.field_metadata) === null || _b === void 0 ? void 0 : _b.rich_text_type)) {
             flag.jsonRte = true;
             if (schema[i].field_metadata.embed_entry === true)
                 flag.jsonRteEmbeddedEntries = true;
         }
-        else if (schema[i].data_type === 'text' && schema[i].field_metadata.rich_text_type) {
+        else if (schema[i].data_type === 'text' && ((_d = (_c = schema[i]) === null || _c === void 0 ? void 0 : _c.field_metadata) === null || _d === void 0 ? void 0 : _d.rich_text_type)) {
             flag.rte = true;
             if (schema[i].field_metadata.embed_entry === true)
                 flag.rteEmbeddedEntries = true;
@@ -85,6 +86,7 @@ const suppressSchemaReference = function (schema, flag) {
 };
 exports.suppressSchemaReference = suppressSchemaReference;
 const removeReferenceFields = async function (schema, flag = { supressed: false }, stackAPIClient) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
     for (let i = 0; i < schema.length; i++) {
         if (schema[i].data_type === 'group') {
             await (0, exports.removeReferenceFields)(schema[i].schema, flag, stackAPIClient);
@@ -146,18 +148,18 @@ const removeReferenceFields = async function (schema, flag = { supressed: false
         else if (
         // handling entry references in json rte
         schema[i].data_type === 'json' &&
-            schema[i].field_metadata.rich_text_type &&
-            schema[i].field_metadata.embed_entry &&
-            schema[i].reference_to.length > 1) {
+            ((_b = (_a = schema[i]) === null || _a === void 0 ? void 0 : _a.field_metadata) === null || _b === void 0 ? void 0 : _b.rich_text_type) &&
+            ((_d = (_c = schema[i]) === null || _c === void 0 ? void 0 : _c.field_metadata) === null || _d === void 0 ? void 0 : _d.embed_entry) &&
+            ((_f = (_e = schema[i]) === null || _e === void 0 ? void 0 : _e.reference_to) === null || _f === void 0 ? void 0 : _f.length) > 1) {
             flag.supressed = true;
             schema[i].reference_to = ['sys_assets'];
         }
         else if (
         // handling entry references in rte
         schema[i].data_type === 'text' &&
-            schema[i].field_metadata.rich_text_type &&
-            schema[i].field_metadata.embed_entry &&
-            schema[i].reference_to.length >= 1) {
+            ((_h = (_g = schema[i]) === null || _g === void 0 ? void 0 : _g.field_metadata) === null || _h === void 0 ? void 0 : _h.rich_text_type) &&
+            ((_k = (_j = schema[i]) === null || _j === void 0 ? void 0 : _j.field_metadata) === null || _k === void 0 ? void 0 : _k.embed_entry) &&
+            ((_m = (_l = schema[i]) === null || _l === void 0 ? void 0 : _l.reference_to) === null || _m === void 0 ? void 0 : _m.length) >= 1) {
             flag.supressed = true;
             schema[i].reference_to = ['sys_assets'];
         }

package/lib/utils/entries-helper.js

@@ -47,15 +47,15 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
         });
     }
     const update = function (_parent, form_id, updateEntry) {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         let _entry = updateEntry;
         let len = _parent === null || _parent === void 0 ? void 0 : _parent.length;
         for (let j = 0; j < len; j++) {
             if (_entry && _parent[j]) {
                 if (j === len - 1 && _entry[_parent[j]]) {
                     if (form_id !== '_assets') {
-                        if ((_a = _entry[_parent[j]]) === null || _a === void 0 ? void 0 : _a.length) {
-                            _entry[_parent[j]].forEach((item, idx) => {
+                        if (((_a = _entry[_parent[j]]) === null || _a === void 0 ? void 0 : _a.length) && Object.keys(_entry).includes(_parent[j])) {
+                            (_b = _entry[_parent[j]]) === null || _b === void 0 ? void 0 : _b.forEach((item, idx) => {
                                 if (typeof item.uid === 'string' && item._content_type_uid) {
                                     uids.push(item.uid);
                                 }
@@ -74,38 +74,41 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
                     }
                     else if (Array.isArray(_entry[_parent[j]])) {
                         for (const element of _entry[_parent[j]]) {
-                            if ((_b = element.uid) === null || _b === void 0 ? void 0 : _b.length) {
+                            if ((_c = element.uid) === null || _c === void 0 ? void 0 : _c.length) {
                                 uids.push(element.uid);
                             }
                         }
                     }
-                    else if ((_c = _entry[_parent[j]].uid) === null || _c === void 0 ? void 0 : _c.length) {
+                    else if ((_d = _entry[_parent[j]].uid) === null || _d === void 0 ? void 0 : _d.length) {
                         uids.push(_entry[_parent[j]].uid);
                     }
                 }
                 else {
-                    _entry = _entry[_parent[j]];
-                    let _keys = _.clone(_parent).splice(j + 1, len);
-                    if (Array.isArray(_entry)) {
-                        for (let i = 0, _i = _entry === null || _entry === void 0 ? void 0 : _entry.length; i < _i; i++) {
-                            update(_keys, form_id, _entry[i]);
+                    const key = _parent[j];
+                    if (Object.prototype.hasOwnProperty.call(_entry, key)) {
+                        _entry = _entry[key];
+                        let _keys = _.clone(_parent).splice(j + 1, len);
+                        if (Array.isArray(_entry)) {
+                            for (let i = 0, _i = _entry === null || _entry === void 0 ? void 0 : _entry.length; i < _i; i++) {
+                                update(_keys, form_id, _entry[i]);
+                            }
+                        }
+                        else if (!(_entry instanceof Object)) {
+                            break;
                         }
-                    }
-                    else if (!(_entry instanceof Object)) {
-                        break;
                     }
                 }
             }
         }
     };
     const find = function (schema = [], _entry) {
-        var _a;
+        var _a, _b, _c, _d, _e;
         for (let i = 0, _i = schema === null || schema === void 0 ? void 0 : schema.length; i < _i; i++) {
             switch (schema[i].data_type) {
                 case 'reference':
                     if (Array.isArray(schema[i].reference_to)) {
                         isNewRefFields = true;
-                        schema[i].reference_to.forEach((reference) => {
+                        (_b = (_a = schema[i]) === null || _a === void 0 ? void 0 : _a.reference_to) === null || _b === void 0 ? void 0 : _b.forEach((reference) => {
                             parent.push(schema[i].uid);
                             update(parent, reference, _entry);
                             parent.pop();
@@ -124,7 +127,7 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
                     parent.pop();
                     break;
                 case 'blocks':
-                    for (let j = 0, _j = (_a = schema[i].blocks) === null || _a === void 0 ? void 0 : _a.length; j < _j; j++) {
+                    for (let j = 0, _j = (_c = schema[i].blocks) === null || _c === void 0 ? void 0 : _c.length; j < _j; j++) {
                         parent.push(schema[i].uid);
                         parent.push(schema[i].blocks[j].uid);
                         find(schema[i].blocks[j].schema, _entry);
@@ -133,7 +136,7 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
                     }
                     break;
                 case 'json':
-                    if (schema[i].field_metadata.rich_text_type) {
+                    if ((_e = (_d = schema[i]) === null || _d === void 0 ? void 0 : _d.field_metadata) === null || _e === void 0 ? void 0 : _e.rich_text_type) {
                         findEntryIdsFromJsonRte(data.entry, data.content_type.schema);
                     }
                     break;
@@ -141,7 +144,7 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
         }
     };
     function findEntryIdsFromJsonRte(entry, ctSchema = []) {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         for (const element of ctSchema) {
             switch (element.data_type) {
                 case 'blocks': {
@@ -171,9 +174,9 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
                     break;
                 }
                 case 'json': {
-                    if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                    if (entry[element.uid] && ((_c = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _c === void 0 ? void 0 : _c.rich_text_type)) {
                         if (element.multiple) {
-                            (_c = entry[element.uid]) === null || _c === void 0 ? void 0 : _c.forEach((jsonRteData) => {
+                            (_d = entry[element.uid]) === null || _d === void 0 ? void 0 : _d.forEach((jsonRteData) => {
                                 gatherJsonRteEntryIds(jsonRteData);
                             });
                         }
@@ -197,12 +200,16 @@ const lookupEntries = function (data, mappedUids, uidMapperPath) {
     }
     uids = _.uniq(uids);
     let entry = JSON.stringify(data.entry);
-    uids.forEach(function (uid) {
+    uids === null || uids === void 0 ? void 0 : uids.forEach(function (uid) {
         if (mappedUids.hasOwnProperty(uid)) {
             const sanitizedUid = (0, cli_utilities_1.escapeRegExp)(uid);
             const escapedMappedUid = (0, cli_utilities_1.escapeRegExp)(mappedUids[uid]);
-            entry = entry.replace(new RegExp(sanitizedUid, 'img'), escapedMappedUid);
-            mapped.push(uid);
+            const uidRegex = new RegExp(`\\b${sanitizedUid}\\b`, 'img');
+            let { status } = (0, cli_utilities_1.validateRegex)(uidRegex);
+            if (status === 'safe') {
+                entry = entry.replace(uidRegex, escapedMappedUid);
+                mapped.push(uid);
+            }
         }
         else {
             unmapped.push(uid);
@@ -245,7 +252,7 @@ function findUidsInNewRefFields(entry, uids) {
             uids.push(entry.uid);
         }
         else if (Array.isArray(entry) && entry.length) {
-            entry.forEach(function (elem) {
+            entry === null || entry === void 0 ? void 0 : entry.forEach(function (elem) {
                 findUidsInNewRefFields(elem, uids);
             });
         }
@@ -259,6 +266,7 @@ function findUidsInNewRefFields(entry, uids) {
     }
 }
 const removeUidsFromJsonRteFields = (entry, ctSchema = []) => {
+    var _a;
     for (const element of ctSchema) {
         switch (element.data_type) {
             case 'blocks': {
@@ -291,7 +299,7 @@ const removeUidsFromJsonRteFields = (entry, ctSchema = []) => {
                 break;
             }
             case 'json': {
-                if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                if (entry[element.uid] && ((_a = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _a === void 0 ? void 0 : _a.rich_text_type)) {
                     if (element.multiple) {
                         entry[element.uid] = entry[element.uid].map((jsonRteData) => {
                             delete jsonRteData.uid; // remove uid
@@ -350,7 +358,7 @@ function removeUidsFromChildren(children) {
     }
 }
 const removeEntryRefsFromJSONRTE = (entry, ctSchema = []) => {
-    var _a, _b;
+    var _a, _b, _c, _d;
     for (const element of ctSchema) {
         switch (element.data_type) {
             case 'blocks': {
@@ -384,7 +392,7 @@ const removeEntryRefsFromJSONRTE = (entry, ctSchema = []) => {
             }
             case 'json': {
                 const structuredPTag = '{"type":"p","attrs":{},"children":[{"text":""}]}';
-                if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                if (entry[element.uid] && ((_a = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _a === void 0 ? void 0 : _a.rich_text_type)) {
                     if (element.multiple) {
                         entry[element.uid] = entry[element.uid].map(removeReferenceInJsonRTE);
                         entry[element.uid] = entry[element.uid].map((jsonRteData) => {
@@ -407,10 +415,10 @@ const removeEntryRefsFromJSONRTE = (entry, ctSchema = []) => {
                     else {
                         // NOTE Clean up all the reference
                         entry[element.uid] = removeReferenceInJsonRTE(entry[element.uid]);
-                        let entryReferences = (_a = entry[element.uid].children) === null || _a === void 0 ? void 0 : _a.filter((e) => doEntryReferencesExist(e));
+                        let entryReferences = (_b = entry[element.uid].children) === null || _b === void 0 ? void 0 : _b.filter((e) => doEntryReferencesExist(e));
                         if ((entryReferences === null || entryReferences === void 0 ? void 0 : entryReferences.length) > 0) {
                             entry[element.uid].children = entry[element.uid].children.filter((e) => !doEntryReferencesExist(e));
-                            if (((_b = entry[element.uid].children) === null || _b === void 0 ? void 0 : _b.length) === 0) {
+                            if (((_c = entry[element.uid].children) === null || _c === void 0 ? void 0 : _c.length) === 0) {
                                 entry[element.uid].children.push(JSON.parse(structuredPTag));
                             }
                         }
@@ -419,7 +427,7 @@ const removeEntryRefsFromJSONRTE = (entry, ctSchema = []) => {
                 break;
             }
             case 'text': {
-                if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                if (entry[element.uid] && ((_d = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _d === void 0 ? void 0 : _d.rich_text_type)) {
                     if (element.multiple) {
                         let rteContent = [];
                         for (let i = 0; i < entry[element.uid].length; i++) {
@@ -470,6 +478,7 @@ function isEntryRef(element) {
     return element.type === 'reference' && ((_a = element.attrs) === null || _a === void 0 ? void 0 : _a.type) === 'entry';
 }
 const restoreJsonRteEntryRefs = (entry, sourceStackEntry, ctSchema = [], { uidMapper, mappedAssetUids, mappedAssetUrls }) => {
+    var _a, _b;
     for (const element of ctSchema) {
         switch (element.data_type) {
             case 'blocks': {
@@ -517,7 +526,7 @@ const restoreJsonRteEntryRefs = (entry, sourceStackEntry, ctSchema = [], { uidMa
                 break;
             }
             case 'json': {
-                if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                if (entry[element.uid] && ((_a = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _a === void 0 ? void 0 : _a.rich_text_type)) {
                     if (element.multiple && Array.isArray(entry[element.uid])) {
                         entry[element.uid] = sourceStackEntry[element.uid].map((jsonRTE) => {
                             jsonRTE = restoreReferenceInJsonRTE(jsonRTE, uidMapper);
@@ -541,7 +550,7 @@ const restoreJsonRteEntryRefs = (entry, sourceStackEntry, ctSchema = [], { uidMa
                 break;
             }
             case 'text': {
-                if (entry[element.uid] && element.field_metadata.rich_text_type) {
+                if (entry[element.uid] && ((_b = element === null || element === void 0 ? void 0 : element.field_metadata) === null || _b === void 0 ? void 0 : _b.rich_text_type)) {
                     entry[element.uid] = sourceStackEntry[element.uid];
                     const matches = Object.keys(uidMapper).filter((uid) => {
                         if (sourceStackEntry[element.uid].indexOf(uid) !== -1)
@@ -566,7 +575,11 @@ const restoreJsonRteEntryRefs = (entry, sourceStackEntry, ctSchema = [], { uidMa
 };
 exports.restoreJsonRteEntryRefs = restoreJsonRteEntryRefs;
 function updateUids(str, match, uidMapper) {
-    return str.replace(new RegExp(match, 'g'), (match) => uidMapper[match]);
+    const sanitizedMatch = (0, cli_utilities_1.escapeRegExp)(match);
+    const regex = new RegExp(`\\b${sanitizedMatch}\\b`, 'g');
+    let { status } = (0, cli_utilities_1.validateRegex)(regex);
+    if (status === 'safe')
+        return str.replace(regex, (matchedString) => uidMapper[matchedString]);
 }
 function setDirtyTrue(jsonRteChild) {
     // also removing uids in this function

package/lib/utils/extension-helper.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.lookupExtension = void 0;
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 const node_path_1 = require("node:path");

package/lib/utils/file-helper.js

@@ -9,7 +9,7 @@ const bigJSON = tslib_1.__importStar(require("big-json"));
 const cli_utilities_1 = require("@contentstack/cli-utilities");
 const readFileSync = function (filePath, parse = true) {
     let data;
-    filePath = path.resolve(filePath);
+    filePath = path.resolve((0, cli_utilities_1.sanitizePath)(filePath));
     if (fs.existsSync(filePath)) {
         try {
             data = parse ? JSON.parse(fs.readFileSync(filePath, 'utf-8')) : data;
@@ -24,7 +24,7 @@ exports.readFileSync = readFileSync;
 // by default file type is json
 const readFile = async (filePath, options = { type: 'json' }) => {
     return new Promise((resolve, reject) => {
-        filePath = path.resolve(filePath);
+        filePath = path.resolve((0, cli_utilities_1.sanitizePath)(filePath));
         fs.readFile(filePath, 'utf-8', (error, data) => {
             if (error) {
                 if (error.code === 'ENOENT') {
@@ -46,7 +46,7 @@ const readLargeFile = function (filePath, opts) {
     if (typeof filePath !== 'string') {
         return;
     }
-    filePath = path.resolve(filePath);
+    filePath = path.resolve((0, cli_utilities_1.sanitizePath)(filePath));
     if (fs.existsSync(filePath)) {
         return new Promise((resolve, reject) => {
             const readStream = fs.createReadStream(filePath, { encoding: 'utf-8' });
@@ -87,7 +87,7 @@ const writeLargeFile = function (filePath, data) {
     if (typeof filePath !== 'string' || typeof data !== 'object') {
         return;
     }
-    filePath = path.resolve(filePath);
+    filePath = path.resolve((0, cli_utilities_1.sanitizePath)(filePath));
     return new Promise((resolve, reject) => {
         const stringifyStream = bigJSON.createStringifyStream({
             body: data,
@@ -123,7 +123,7 @@ const readdirSync = function (dirPath) {
 exports.readdirSync = readdirSync;
 const isFolderExist = async (folderPath) => {
     return new Promise((resolve, reject) => {
-        folderPath = path.resolve(folderPath);
+        folderPath = path.resolve((0, cli_utilities_1.sanitizePath)(folderPath));
         fs.access(folderPath, (error) => {
             if (error) {
                 return resolve(false);

package/lib/utils/import-config-handler.js

@@ -75,7 +75,7 @@ const setupConfig = async (importCmdFlags) => {
     config.skipPrivateAppRecreationIfExist = importCmdFlags['skip-app-recreation'];
     if (importCmdFlags['branch']) {
         config.branchName = importCmdFlags['branch'];
-        config.branchDir = path.join(config.contentDir, config.branchName);
+        config.branchDir = path.join((0, cli_utilities_1.sanitizePath)(config.contentDir), (0, cli_utilities_1.sanitizePath)(config.branchName));
     }
     if (importCmdFlags['module']) {
         config.moduleName = importCmdFlags['module'];

package/lib/utils/log.js

@@ -22,7 +22,7 @@ exports.log = log;
 function initLogger(config) {
     var _a;
     if (!logger) {
-        const basePath = (0, cli_utilities_1.pathValidator)((0, path_1.join)((_a = config === null || config === void 0 ? void 0 : config.cliLogsPath) !== null && _a !== void 0 ? _a : process.cwd(), 'logs', 'import'));
+        const basePath = (0, cli_utilities_1.pathValidator)((0, path_1.join)((0, cli_utilities_1.sanitizePath)((_a = config === null || config === void 0 ? void 0 : config.cliLogsPath) !== null && _a !== void 0 ? _a : process.cwd()), 'logs', 'import'));
         exports.logger = logger = new cli_utilities_1.Logger(Object.assign(config !== null && config !== void 0 ? config : {}, { basePath }));
     }
     return logger;

package/lib/utils/logger.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Export
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ImportConfig } from '../types';

package/lib/utils/logger.js

@@ -1,7 +1,7 @@
 "use strict";
 /*!
  * Contentstack Export
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -9,6 +9,7 @@ exports.unlinkFileLogger = exports.log = void 0;
 const tslib_1 = require("tslib");
 const winston = tslib_1.__importStar(require("winston"));
 const path = tslib_1.__importStar(require("path"));
+const cli_utilities_1 = require("@contentstack/cli-utilities");
 const slice = Array.prototype.slice;
 const ansiRegexPattern = [
     '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
@@ -54,16 +55,16 @@ let successTransport;
 let errorTransport;
 function init(_logPath) {
     if (!logger || !errorLogger) {
-        const logsDir = path.resolve(_logPath, 'logs', 'import');
+        const logsDir = path.resolve((0, cli_utilities_1.sanitizePath)(_logPath), 'logs', 'import');
         successTransport = {
-            filename: path.join(logsDir, 'success.log'),
+            filename: path.join((0, cli_utilities_1.sanitizePath)(logsDir), 'success.log'),
             maxFiles: 20,
             maxsize: 1000000,
             tailable: true,
             level: 'info',
         };
         errorTransport = {
-            filename: path.join(logsDir, 'error.log'),
+            filename: path.join((0, cli_utilities_1.sanitizePath)(logsDir), 'error.log'),
             maxFiles: 20,
             maxsize: 1000000,
             tailable: true,

package/lib/utils/login-handler.d.ts

@@ -1,6 +1,6 @@
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 import { ImportConfig } from '../types';

package/lib/utils/login-handler.js

@@ -4,7 +4,7 @@
 /* eslint-disable no-empty */
 /*!
  * Contentstack Import
- * Copyright (c) 2019 Contentstack LLC
+ * Copyright (c) 2024 Contentstack LLC
  * MIT Licensed
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.15.5",
+  "version": "1.15.7",
   "commands": {
     "cm:stacks:import": {
       "id": "cm:stacks:import",

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@contentstack/cli-cm-import",
   "description": "Contentstack CLI plugin to import content into stack",
-  "version": "1.15.5",
+  "version": "1.15.7",
   "author": "Contentstack",
   "bugs": "https://github.com/contentstack/cli/issues",
   "dependencies": {
-    "@contentstack/cli-audit": "~1.6.1",
+    "@contentstack/cli-audit": "~1.6.2",
     "@contentstack/cli-command": "~1.2.18",
-    "@contentstack/cli-utilities": "~1.6.1",
+    "@contentstack/cli-utilities": "~1.6.2",
     "@contentstack/management": "~1.15.3",
     "@oclif/core": "^3.26.5",
     "big-json": "^3.2.0",
@@ -99,4 +99,4 @@
     }
   },
   "repository": "https://github.com/contentstack/cli"
-}
+}