@contentstack/cli-utilities 1.6.1 → 1.6.3

package/lib/helpers.d.ts

@@ -13,3 +13,7 @@ export declare const isManagementTokenValid: (stackAPIKey: any, managementToken:
 export declare const createDeveloperHubUrl: (developerHubBaseUrl: string) => string;
 export declare const validatePath: (input: string) => boolean;
 export declare const escapeRegExp: (str: string) => string;
+export declare const sanitizePath: (str: string) => string;
+export declare const validateUids: (uid: any) => boolean;
+export declare const validateFileName: (fileName: any) => boolean;
+export declare const validateRegex: (str: any) => import("recheck").Diagnostics;

package/lib/helpers.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.escapeRegExp = exports.validatePath = exports.createDeveloperHubUrl = exports.isManagementTokenValid = exports.doesBranchExist = exports.isAuthenticated = void 0;
+exports.validateRegex = exports.validateFileName = exports.validateUids = exports.sanitizePath = exports.escapeRegExp = exports.validatePath = exports.createDeveloperHubUrl = exports.isManagementTokenValid = exports.doesBranchExist = exports.isAuthenticated = void 0;
 const tslib_1 = require("tslib");
+const recheck_1 = require("recheck");
 const auth_handler_1 = tslib_1.__importDefault(require("./auth-handler"));
 const _1 = require(".");
 const isAuthenticated = () => auth_handler_1.default.isAuthenticated();
@@ -60,3 +61,15 @@ exports.validatePath = validatePath;
 // To escape special characters in a string
 const escapeRegExp = (str) => str === null || str === void 0 ? void 0 : str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 exports.escapeRegExp = escapeRegExp;
+// To remove the relative path 
+const sanitizePath = (str) => str === null || str === void 0 ? void 0 : str.replace(/^(\.\.(\/|\\|$))+/, '');
+exports.sanitizePath = sanitizePath;
+// To validate the UIDs of assets 
+const validateUids = (uid) => /^[a-zA-Z0-9]+$/.test(uid);
+exports.validateUids = validateUids;
+// Validate File name
+const validateFileName = (fileName) => /^[a-zA-Z0-9-_\.]+$/.test(fileName);
+exports.validateFileName = validateFileName;
+// Validate Regex for ReDDos
+const validateRegex = (str) => (0, recheck_1.checkSync)(str, "");
+exports.validateRegex = validateRegex;

package/lib/logger.js

@@ -17,7 +17,7 @@ class LoggerService {
         const logger = winston_1.default.createLogger({
             transports: [
                 new winston_1.default.transports.File({
-                    filename: path_1.default.resolve(process.env.CS_CLI_LOG_PATH || `${pathToLog}/logs`, `${name}.log`),
+                    filename: path_1.default.resolve((0, index_1.sanitizePath)(process.env.CS_CLI_LOG_PATH) || `${(0, index_1.sanitizePath)(pathToLog)}/logs`, `${(0, index_1.sanitizePath)(name)}.log`),
                 }),
             ],
             format: winston_1.default.format.combine(winston_1.default.format.colorize(), winston_1.default.format.printf((info) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-utilities",
-  "version": "1.6.1",
+  "version": "1.6.3",
   "description": "Utilities for contentstack projects",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -33,7 +33,7 @@
   "license": "MIT",
   "dependencies": {
     "@contentstack/management": "~1.15.3",
-    "@contentstack/marketplace-sdk": "^1.0.1",
+    "@contentstack/marketplace-sdk": "^1.2.0",
     "@oclif/core": "^3.26.5",
     "axios": "^1.6.4",
     "chalk": "^4.0.0",
@@ -50,6 +50,7 @@
     "mkdirp": "^1.0.4",
     "open": "^8.4.2",
     "ora": "^5.4.0",
+    "recheck": "^4.4.5",
     "rxjs": "^6.6.7",
     "traverse": "^0.6.7",
     "unique-string": "^2.0.0",
@@ -83,4 +84,4 @@
     "tslib": "^1.13.0",
     "typescript": "^4.9.3"
   }
-}
+}