@contentstack/cli-utilities 1.6.1 → 1.6.2

package/lib/helpers.d.ts

@@ -13,3 +13,7 @@ export declare const isManagementTokenValid: (stackAPIKey: any, managementToken:
 export declare const createDeveloperHubUrl: (developerHubBaseUrl: string) => string;
 export declare const validatePath: (input: string) => boolean;
 export declare const escapeRegExp: (str: string) => string;
+export declare const sanitizePath: (str: string) => string;
+export declare const validateUids: (uid: any) => boolean;
+export declare const validateFileName: (fileName: any) => boolean;
+export declare const validateRegex: (str: any) => import("recheck").Diagnostics;

package/lib/helpers.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.escapeRegExp = exports.validatePath = exports.createDeveloperHubUrl = exports.isManagementTokenValid = exports.doesBranchExist = exports.isAuthenticated = void 0;
+exports.validateRegex = exports.validateFileName = exports.validateUids = exports.sanitizePath = exports.escapeRegExp = exports.validatePath = exports.createDeveloperHubUrl = exports.isManagementTokenValid = exports.doesBranchExist = exports.isAuthenticated = void 0;
 const tslib_1 = require("tslib");
+const recheck_1 = require("recheck");
 const auth_handler_1 = tslib_1.__importDefault(require("./auth-handler"));
 const _1 = require(".");
 const isAuthenticated = () => auth_handler_1.default.isAuthenticated();
@@ -60,3 +61,15 @@ exports.validatePath = validatePath;
 // To escape special characters in a string
 const escapeRegExp = (str) => str === null || str === void 0 ? void 0 : str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 exports.escapeRegExp = escapeRegExp;
+// To remove the relative path 
+const sanitizePath = (str) => str === null || str === void 0 ? void 0 : str.replace(/^(\.\.(\/|\\|$))+/, '');
+exports.sanitizePath = sanitizePath;
+// To validate the UIDs of assets 
+const validateUids = (uid) => /^[a-zA-Z0-9]+$/.test(uid);
+exports.validateUids = validateUids;
+// Validate File name
+const validateFileName = (fileName) => /^[a-zA-Z0-9-_\.]+$/.test(fileName);
+exports.validateFileName = validateFileName;
+// Validate Regex for ReDDos
+const validateRegex = (str) => (0, recheck_1.checkSync)(str, "");
+exports.validateRegex = validateRegex;

package/lib/logger.js

@@ -17,7 +17,7 @@ class LoggerService {
         const logger = winston_1.default.createLogger({
             transports: [
                 new winston_1.default.transports.File({
-                    filename: path_1.default.resolve(process.env.CS_CLI_LOG_PATH || `${pathToLog}/logs`, `${name}.log`),
+                    filename: path_1.default.resolve((0, index_1.sanitizePath)(process.env.CS_CLI_LOG_PATH) || `${(0, index_1.sanitizePath)(pathToLog)}/logs`, `${(0, index_1.sanitizePath)(name)}.log`),
                 }),
             ],
             format: winston_1.default.format.combine(winston_1.default.format.colorize(), winston_1.default.format.printf((info) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-utilities",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "description": "Utilities for contentstack projects",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -55,7 +55,8 @@
     "unique-string": "^2.0.0",
     "uuid": "^9.0.0",
     "winston": "^3.7.2",
-    "xdg-basedir": "^4.0.0"
+    "xdg-basedir": "^4.0.0",
+    "recheck": "^4.4.5"
   },
   "devDependencies": {
     "@contentstack/cli-dev-dependencies": "^1.2.4",