@fluid-app/fluid-cli-assets 0.1.53 → 0.1.55
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +2 -2
- package/src/commands/upload.ts +2 -3
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@fluid-app/fluid-cli-assets",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.55",
|
|
4
4
|
"description": "Fluid CLI commands for digital asset management (DAM)",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.mjs",
|
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
"access": "public"
|
|
18
18
|
},
|
|
19
19
|
"dependencies": {
|
|
20
|
-
"@fluid-app/fluid-cli": "0.1.
|
|
20
|
+
"@fluid-app/fluid-cli": "0.1.53",
|
|
21
21
|
"commander": "^12.0.0"
|
|
22
22
|
},
|
|
23
23
|
"devDependencies": {
|
package/src/commands/upload.ts
CHANGED
|
@@ -23,9 +23,8 @@ import type { CommandContext } from "@fluid-app/fluid-cli";
|
|
|
23
23
|
|
|
24
24
|
// Hard-coded — the bearer token we forward is the user's Fluid API
|
|
25
25
|
// token, so the destination MUST be a Fluid-controlled host or any
|
|
26
|
-
// `--upload-base evil.example` would exfiltrate it.
|
|
27
|
-
//
|
|
28
|
-
// you're running the upload service locally, point at it via the
|
|
26
|
+
// `--upload-base evil.example` would exfiltrate it. If you're running the
|
|
27
|
+
// upload service locally, point at it via the
|
|
29
28
|
// FLUID_UPLOAD_BASE env var instead (read at process start, not
|
|
30
29
|
// from an end-user-typed argv string).
|
|
31
30
|
const UPLOAD_BASE = (
|