@forge/lint 0.0.0-experimental-4d15129 → 0.0.0-experimental-e3032d7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -4
- package/out/lint/linters/permission-linter/verifiers/external-fetch-verifier.d.ts +0 -1
- package/out/lint/linters/permission-linter/verifiers/external-fetch-verifier.d.ts.map +1 -1
- package/out/lint/linters/permission-linter/verifiers/external-fetch-verifier.js +1 -12
- package/package.json +3 -4
package/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,15 @@
|
|
|
1
1
|
# @forge/lint
|
|
2
2
|
|
|
3
|
-
## 0.0.0-experimental-
|
|
3
|
+
## 0.0.0-experimental-e3032d7
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Updated dependencies [ebb857c]
|
|
8
|
+
- Updated dependencies [2ae0afe]
|
|
9
|
+
- @forge/cli-shared@0.0.0-experimental-e3032d7
|
|
10
|
+
- @forge/manifest@0.0.0-experimental-e3032d7
|
|
11
|
+
|
|
12
|
+
## 3.2.0
|
|
4
13
|
|
|
5
14
|
### Minor Changes
|
|
6
15
|
|
|
@@ -11,11 +20,10 @@
|
|
|
11
20
|
- 7fe19b4: More resilient linting against handler exports
|
|
12
21
|
- Updated dependencies [69f42bd]
|
|
13
22
|
- Updated dependencies [b447be2]
|
|
14
|
-
- Updated dependencies [189ba71]
|
|
15
23
|
- Updated dependencies [4285fc3]
|
|
16
24
|
- Updated dependencies [74e00c8]
|
|
17
|
-
- @forge/cli-shared@
|
|
18
|
-
- @forge/manifest@
|
|
25
|
+
- @forge/cli-shared@2.6.0
|
|
26
|
+
- @forge/manifest@3.9.0
|
|
19
27
|
|
|
20
28
|
## 3.2.0-next.5
|
|
21
29
|
|
|
@@ -3,7 +3,6 @@ import { LintClass, LintResultRule } from '../../../linter-interface';
|
|
|
3
3
|
import { BaseLintIssueVerifier, LintIssueVerifier } from '../../verifier-interface';
|
|
4
4
|
import { ExternalApiCall } from '../api-call-interface';
|
|
5
5
|
export declare class ExternalFetchVerifier extends BaseLintIssueVerifier implements LintIssueVerifier<ExternalApiCall[]> {
|
|
6
|
-
private egressFilteringService;
|
|
7
6
|
constructor(environment: string, manifest: Manifest);
|
|
8
7
|
protected getLintClass(): LintClass;
|
|
9
8
|
private extractDomain;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"external-fetch-verifier.d.ts","sourceRoot":"","sources":["../../../../../src/lint/linters/permission-linter/verifiers/external-fetch-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;
|
|
1
|
+
{"version":3,"file":"external-fetch-verifier.d.ts","sourceRoot":"","sources":["../../../../../src/lint/linters/permission-linter/verifiers/external-fetch-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAElE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD,qBAAa,qBAAsB,SAAQ,qBAAsB,YAAW,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAClG,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAInD,SAAS,CAAC,YAAY,IAAI,SAAS;IAInC,OAAO,CAAC,aAAa,CAMnB;IAEW,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;CAY/E"}
|
|
@@ -1,14 +1,12 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.ExternalFetchVerifier = void 0;
|
|
4
|
-
const csp_1 = require("@forge/csp");
|
|
5
4
|
const linter_interface_1 = require("../../../linter-interface");
|
|
6
5
|
const verifier_interface_1 = require("../../verifier-interface");
|
|
7
6
|
const text_1 = require("../../../text");
|
|
8
7
|
const url_1 = require("url");
|
|
9
8
|
class ExternalFetchVerifier extends verifier_interface_1.BaseLintIssueVerifier {
|
|
10
9
|
constructor(environment, manifest) {
|
|
11
|
-
var _a, _b, _c, _d, _e, _f, _g;
|
|
12
10
|
super(environment, manifest);
|
|
13
11
|
this.extractDomain = (fetchCall) => {
|
|
14
12
|
try {
|
|
@@ -18,21 +16,12 @@ class ExternalFetchVerifier extends verifier_interface_1.BaseLintIssueVerifier {
|
|
|
18
16
|
return fetchCall.url;
|
|
19
17
|
}
|
|
20
18
|
};
|
|
21
|
-
const allowList = (_e = (_d = (_c = (_b = (_a = this.manifest) === null || _a === void 0 ? void 0 : _a.permissions) === null || _b === void 0 ? void 0 : _b.external) === null || _c === void 0 ? void 0 : _c.fetch) === null || _d === void 0 ? void 0 : _d.backend) !== null && _e !== void 0 ? _e : [];
|
|
22
|
-
const remoteList = (_g = (_f = this.manifest) === null || _f === void 0 ? void 0 : _f.remotes) !== null && _g !== void 0 ? _g : [];
|
|
23
|
-
const collectedUrls = allowList.filter((item) => typeof item === 'string');
|
|
24
|
-
const collectedRemotes = allowList
|
|
25
|
-
.map((item) => { var _a; return typeof item !== 'string' && ((_a = remoteList.find((remoteItem) => remoteItem.key === item.remote)) === null || _a === void 0 ? void 0 : _a.baseUrl); })
|
|
26
|
-
.filter((x) => typeof x === 'string');
|
|
27
|
-
this.egressFilteringService = new csp_1.EgressFilteringService(collectedUrls.concat(collectedRemotes));
|
|
28
19
|
}
|
|
29
20
|
getLintClass() {
|
|
30
21
|
return linter_interface_1.LintClass.Error;
|
|
31
22
|
}
|
|
32
23
|
async process(fetchCalls) {
|
|
33
|
-
return fetchCalls
|
|
34
|
-
.filter(({ url }) => !this.egressFilteringService.isValidUrl(url))
|
|
35
|
-
.map((fetchCall) => ({
|
|
24
|
+
return fetchCalls.map((fetchCall) => ({
|
|
36
25
|
class: this.getLintClass(),
|
|
37
26
|
message: text_1.messages.verifiers.externalFetch.message(fetchCall.url),
|
|
38
27
|
reference: text_1.messages.verifiers.externalFetch.reference,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@forge/lint",
|
|
3
|
-
"version": "0.0.0-experimental-
|
|
3
|
+
"version": "0.0.0-experimental-e3032d7",
|
|
4
4
|
"description": "Linting for forge apps",
|
|
5
5
|
"main": "out/index.js",
|
|
6
6
|
"license": "UNLICENSED",
|
|
@@ -15,9 +15,8 @@
|
|
|
15
15
|
"@types/node-fetch": "^2.5.7"
|
|
16
16
|
},
|
|
17
17
|
"dependencies": {
|
|
18
|
-
"@forge/cli-shared": "0.0.0-experimental-
|
|
19
|
-
"@forge/
|
|
20
|
-
"@forge/manifest": "0.0.0-experimental-4d15129",
|
|
18
|
+
"@forge/cli-shared": "0.0.0-experimental-e3032d7",
|
|
19
|
+
"@forge/manifest": "0.0.0-experimental-e3032d7",
|
|
21
20
|
"@typescript-eslint/typescript-estree": "^3.5.0",
|
|
22
21
|
"cross-spawn": "^7.0.1",
|
|
23
22
|
"node-fetch": "2.6.1",
|