@contentstack/datasync-manager 2.0.5 → 2.0.6

package/LICENSE

@@ -1,6 +1,6 @@
 The MIT License
 
-Copyright (c) 2023 Contentstack LLC <https://www.contentstack.com/>
+Copyright (c) 2024 Contentstack LLC <https://www.contentstack.com/>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/plugins/helper.js

@@ -193,3 +193,6 @@ exports.buildAssetObject = (asset, locale, entry_uid, content_type_uid) => {
     asset.filename = matches[5];
     return Object.assign(Object.assign({ _content_type_uid: '_assets' }, asset), { _type: 'publish', entry_content_type: content_type_uid, entry_reffered_in: entry_uid, locale, uid: asset.uid });
 };
+exports.sanitizePath = (str) => {
+    return str === null || str === void 0 ? void 0 : str.replace(/^(\.\.(\/|\\|$))+/, '');
+};

package/dist/util/index.js

@@ -27,6 +27,7 @@ const fs_1 = require("./fs");
 const logger_1 = require("./logger");
 const unprocessible_1 = require("./unprocessible");
 const validations_1 = require("./validations");
+const helper_1 = require("./../plugins/helper");
 const debug = (0, debug_1.default)('util:index');
 const formattedAssetType = '_assets';
 const formattedContentType = '_content_types';
@@ -130,8 +131,8 @@ const formatItems = (items, config) => {
                 items[i]._type = config.contentstack.actions.publish;
                 // extra keys
                 items[i]._synced_at = time;
-                items[i] = (0, lodash_1.merge)(items[i], items[i].data);
                 items[i].locale = items[i].data.publish_details.locale;
+                items[i] = (0, lodash_1.merge)(items[i], items[i].data);
                 break;
             case 'asset_unpublished':
                 delete items[i].type;
@@ -151,8 +152,8 @@ const formatItems = (items, config) => {
                 items[i]._content_type_uid = items[i].content_type_uid;
                 // extra keys
                 items[i]._synced_at = time;
-                items[i] = (0, lodash_1.merge)(items[i], items[i].data);
                 items[i].locale = items[i].data.publish_details.locale;
+                items[i] = (0, lodash_1.merge)(items[i], items[i].data);
                 break;
             case 'entry_unpublished':
                 delete items[i].type;
@@ -396,19 +397,19 @@ const normalizePluginPath = (config, plugin, isInternal) => {
             }
             return plugin.path;
         }
-        pluginPath = (0, path_1.resolve)((0, path_1.join)(config.paths.baseDir, plugin.name, 'index.js'));
+        pluginPath = (0, path_1.resolve)((0, path_1.join)((0, helper_1.sanitizePath)(config.paths.baseDir), (0, helper_1.sanitizePath)(plugin.name), 'index.js'));
         if (!(0, fs_1.existsSync)(pluginPath)) {
             throw new Error(`${pluginPath} does not exist!`);
         }
         return pluginPath;
     }
     if (isInternal) {
-        pluginPath = (0, path_1.join)(__dirname, '..', 'plugins', plugin.name.slice(13), 'index.js');
+        pluginPath = (0, path_1.join)((0, helper_1.sanitizePath)(__dirname), '..', 'plugins', (0, helper_1.sanitizePath)(plugin.name.slice(13)), 'index.js');
         if ((0, fs_1.existsSync)(pluginPath)) {
             return pluginPath;
         }
     }
-    pluginPath = (0, path_1.resolve)((0, path_1.join)(config.paths.plugin, plugin.name, 'index.js'));
+    pluginPath = (0, path_1.resolve)((0, path_1.join)((0, helper_1.sanitizePath)(config.paths.plugin), (0, helper_1.sanitizePath)(plugin.name), 'index.js'));
     if (!(0, fs_1.existsSync)(pluginPath)) {
         throw new Error(`Unable to find plugin: ${JSON.stringify(plugin)}`);
     }

package/package.json

@@ -1,41 +1,41 @@
 {
   "name": "@contentstack/datasync-manager",
   "author": "Contentstack LLC <support@contentstack.com>",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "The primary module of Contentstack DataSync. Syncs Contentstack data with your server using Contentstack Sync API",
   "main": "dist/index.js",
   "dependencies": {
     "@braintree/sanitize-url": "^6.0.4",
-    "debug": "^4.3.4",
+    "debug": "^4.3.7",
     "dns-socket": "^4.2.2",
     "lodash": "^4.17.21",
-    "marked": "^4.1.0",
+    "marked": "^4.3.0",
     "write-file-atomic": "4.0.2"
   },
   "devDependencies": {
     "@semantic-release/commit-analyzer": "^9.0.2",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/npm": "^10.0.5",
+    "@semantic-release/npm": "^12.0.1",
     "@semantic-release/release-notes-generator": "^10.0.3",
     "@types/debug": "0.0.31",
-    "@types/jest": "23.3.11",
-    "@types/lodash": "4.14.119",
-    "@types/marked": "^4.0.7",
+    "@types/jest": "23.3.14",
+    "@types/lodash": "4.14.202",
+    "@types/marked": "^4.3.2",
     "@types/mkdirp": "0.5.2",
-    "@types/nock": "9.3.0",
-    "@types/node": "10.12.12",
-    "@types/rimraf": "2.0.2",
-    "@types/write-file-atomic": "2.1.1",
-    "eslint": "^8.14.0",
-    "jest": "^29.0.3",
-    "jest-html-reporter": "^3.7.0",
+    "@types/nock": "9.3.1",
+    "@types/node": "10.12.30",
+    "@types/rimraf": "2.0.5",
+    "@types/write-file-atomic": "2.1.2",
+    "eslint": "^8.57.1",
+    "jest": "^29.7.0",
+    "jest-html-reporter": "^3.10.2",
     "mkdirp": "^1.0.4",
     "nock": "^10.0.6",
-    "rimraf": "^2.6.2",
-    "semantic-release": "^21.1.1",
-    "ts-jest": "^29.0.1",
-    "tslint": "^5.18.0",
-    "typescript": "^4.9.4"
+    "rimraf": "^2.7.1",
+    "semantic-release": "^24.1.2",
+    "ts-jest": "^29.2.5",
+    "tslint": "^5.20.1",
+    "typescript": "^4.9.5"
   },
   "scripts": {
     "clean": "rimraf dist typings coverage .tokens .ledger .checkpoint",