npm - @microsoft/teamsfx-core - Versions diffs - 3.0.4 → 3.0.5-alpha.8a544ede4.0 - Mend

@microsoft/teamsfx-core 3.0.4 → 3.0.5-alpha.8a544ede4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (173) hide show

package/resource/yaml-schema/yaml.schema.json CHANGED Viewed

@@ -14,7 +14,7 @@
     "version": {
       "type": "string",
       "description": "The version of the yaml file schema",
-      "const": "v1.8"
+      "const": "v1.9"
     },
     "additionalMetadata": {
       "type": "object",
@@ -1706,7 +1706,7 @@
       "type": "object",
       "additionalProperties": false,
       "description": "Get deployment key from Azure Static Web App.",
-      "required": ["uses", "with", "writeToEnvironmentFile"],
+      "required": ["uses", "with"],
       "properties": {
         "uses": {
           "type": "string",

package/templates/fallback/common.zip CHANGED Viewed

Binary file

package/templates/fallback/csharp.zip CHANGED Viewed

Binary file

package/templates/fallback/js.zip CHANGED Viewed

Binary file

package/templates/fallback/python.zip CHANGED Viewed

Binary file

package/templates/fallback/ts.zip CHANGED Viewed

Binary file

package/templates/plugins/resource/aad/auth/bot/js/public/auth-end.html CHANGED Viewed

@@ -2,68 +2,79 @@
 <!--This file is used during the Teams Bot authentication flow to assist with retrieval of the access token.-->
 <!--If you're not familiar with this, do not alter or remove this file from your project.-->
 <html>
-  <head>
-    <title>Login End Page</title>
-    <meta charset="utf-8" />
-  </head>
-  <body>
-    <script
-      src="https://res.cdn.office.net/teams-js/2.31.1/js/MicrosoftTeams.min.js"
-      integrity="sha384-ihAqYgEJz9hzEU+HaYodG1aTzjebC/wKXQi1nWKZG7OLAUyOL9ZrzD/SfZu79Jeu"
-      crossorigin="anonymous"
-    ></script>
-    <div id="divError"></div>
-    <script type="text/javascript">
-      microsoftTeams.app.initialize().then(() => {
-        let hashParams = getHashParameters();
+<head>
+  <title>Login End Page</title>
+  <meta charset="utf-8" />
+</head>
-        if (hashParams.get("error")) {
-          // Authentication failed
-          handleAuthError(hashParams.get("error"), hashParams);
-        } else if (hashParams.get("code")) {
-          // Get the stored state parameter and compare with incoming state
-          let expectedState = localStorage.getItem("state");
-          if (expectedState !== hashParams.get("state")) {
-            // State does not match, report error
-            handleAuthError("StateDoesNotMatch", hashParams);
-          } else {
-            microsoftTeams.authentication.notifySuccess();
-          }
+<body>
+  <script src="https://res.cdn.office.net/teams-js/2.31.1/js/MicrosoftTeams.min.js"
+    integrity="sha384-ihAqYgEJz9hzEU+HaYodG1aTzjebC/wKXQi1nWKZG7OLAUyOL9ZrzD/SfZu79Jeu"
+    crossorigin="anonymous"></script>
+  <div id="divError"></div>
+  <script type="text/javascript">
+    microsoftTeams.app.initialize().then(() => {
+      let hashParams = getHashParameters();
+      if (hashParams.get("error")) {
+        // Authentication failed
+        handleAuthError(hashParams.get("error"), hashParams);
+      } else if (hashParams.get("code")) {
+        // Get the stored state parameter and compare with incoming state
+        let expectedState = localStorage.getItem("state");
+        if (expectedState !== hashParams.get("state")) {
+          // State does not match, report error
+          handleAuthError("StateDoesNotMatch", hashParams);
         } else {
-          // Unexpected condition: hash does not contain error or access_token parameter
-          handleAuthError("UnexpectedFailure", hashParams);
+          microsoftTeams.authentication.notifySuccess();
         }
-      });
+      } else {
+        // Unexpected condition: hash does not contain error or access_token parameter
+        handleAuthError("UnexpectedFailure", hashParams);
+      }
+    });
-      // Parse hash parameters into key-value pairs
-      function getHashParameters() {
-        let hashParams = new Map();
+    // Parse hash parameters into key-value pairs
+    function getHashParameters() {
+      // Using ES6 Map instead of plain object to prevent prototype pollution
+      let hashParams = new Map();
+      if (location.hash && location.hash.length > 1) {
         location.hash
           .substr(1)
           .split("&")
           .forEach(function (item) {
+            if (!item) return;
             let s = item.split("="),
               k = s[0],
               v = s[1] && decodeURIComponent(s[1]);
-            hashParams.set(k, v);
+            if (k) {
+              // Store parameters in the Map
+              hashParams.set(k, v);
+            }
           });
-        return hashParams;
       }
+      // Convert Map back to a plain object for compatibility with the rest of the code
+      return Object.fromEntries(hashParams);
+    }
-      // Show error information
-      function handleAuthError(errorType, errorMessage) {
-        const err = JSON.stringify({
-          error: encodeURIComponent(errorType),
-          message: encodeURIComponent(JSON.stringify(errorMessage)),
-        });
-        let para = document.createElement("p");
-        let node = document.createTextNode(err);
-        para.appendChild(node);
+    // Show error information
+    function handleAuthError(errorType, errorMessage) {
+      const err = JSON.stringify({
+        error: encodeURIComponent(errorType),
+        message: encodeURIComponent(JSON.stringify(errorMessage)),
+      });
+      let para = document.createElement("p");
+      let node = document.createTextNode(err);
+      para.appendChild(node);
-        let element = document.getElementById("divError");
-        element.appendChild(para);
-      }
-    </script>
-  </body>
-</html>
+      let element = document.getElementById("divError");
+      element.appendChild(para);
+    }
+  </script>
+</body>
+</html>

package/templates/plugins/resource/aad/auth/bot/ts/public/auth-end.html CHANGED Viewed

@@ -2,67 +2,78 @@
 <!--This file is used during the Teams Bot authentication flow to assist with retrieval of the access token.-->
 <!--If you're not familiar with this, do not alter or remove this file from your project.-->
 <html>
-  <head>
-    <title>Login End Page</title>
-    <meta charset="utf-8" />
-  </head>
-  <body>
-    <script
-      src="https://res.cdn.office.net/teams-js/2.31.1/js/MicrosoftTeams.min.js"
-      integrity="sha384-ihAqYgEJz9hzEU+HaYodG1aTzjebC/wKXQi1nWKZG7OLAUyOL9ZrzD/SfZu79Jeu"
-      crossorigin="anonymous"
-    ></script>
-    <div id="divError"></div>
-    <script type="text/javascript">
-      microsoftTeams.app.initialize().then(() => {
-        let hashParams = getHashParameters();
+<head>
+  <title>Login End Page</title>
+  <meta charset="utf-8" />
+</head>
-        if (hashParams.get("error")) {
-          // Authentication failed
-          handleAuthError(hashParams.get("error"), hashParams);
-        } else if (hashParams.get("code")) {
-          // Get the stored state parameter and compare with incoming state
-          let expectedState = localStorage.getItem("state");
-          if (expectedState !== hashParams.get("state")) {
-            // State does not match, report error
-            handleAuthError("StateDoesNotMatch", hashParams);
-          } else {
-            microsoftTeams.authentication.notifySuccess();
-          }
+<body>
+  <script src="https://res.cdn.office.net/teams-js/2.31.1/js/MicrosoftTeams.min.js"
+    integrity="sha384-ihAqYgEJz9hzEU+HaYodG1aTzjebC/wKXQi1nWKZG7OLAUyOL9ZrzD/SfZu79Jeu"
+    crossorigin="anonymous"></script>
+  <div id="divError"></div>
+  <script type="text/javascript">
+    microsoftTeams.app.initialize().then(() => {
+      let hashParams = getHashParameters();
+      if (hashParams.get("error")) {
+        // Authentication failed
+        handleAuthError(hashParams.get("error"), hashParams);
+      } else if (hashParams.get("code")) {
+        // Get the stored state parameter and compare with incoming state
+        let expectedState = localStorage.getItem("state");
+        if (expectedState !== hashParams.get("state")) {
+          // State does not match, report error
+          handleAuthError("StateDoesNotMatch", hashParams);
         } else {
-          // Unexpected condition: hash does not contain error or access_token parameter
-          handleAuthError("UnexpectedFailure", hashParams);
+          microsoftTeams.authentication.notifySuccess();
         }
-      });
-      // Parse hash parameters into key-value pairs
-      function getHashParameters() {
-        let hashParams = new Map();
+      } else {
+        // Unexpected condition: hash does not contain error or access_token parameter
+        handleAuthError("UnexpectedFailure", hashParams);
+      }
+    });
+    // Parse hash parameters into key-value pairs
+    function getHashParameters() {
+      // Using ES6 Map instead of plain object to prevent prototype pollution
+      let hashParams = new Map();
+      if (location.hash && location.hash.length > 1) {
         location.hash
           .substr(1)
           .split("&")
           .forEach(function (item) {
+            if (!item) return;
             let s = item.split("="),
               k = s[0],
               v = s[1] && decodeURIComponent(s[1]);
-            hashParams.set(k, v);
+            if (k) {
+              // Store parameters in the Map
+              hashParams.set(k, v);
+            }
           });
-        return hashParams;
       }
+      // Convert Map back to a plain object for compatibility with the rest of the code
+      return Object.fromEntries(hashParams);
+    }
-      // Show error information
-      function handleAuthError(errorType, errorMessage) {
-        const err = JSON.stringify({
-          error: encodeURIComponent(errorType),
-          message: encodeURIComponent(JSON.stringify(errorMessage)),
-        });
-        let para = document.createElement("p");
-        let node = document.createTextNode(err);
-        para.appendChild(node);
+    // Show error information
+    function handleAuthError(errorType, errorMessage) {
+      const err = JSON.stringify({
+        error: encodeURIComponent(errorType),
+        message: encodeURIComponent(JSON.stringify(errorMessage)),
+      });
+      let para = document.createElement("p");
+      let node = document.createTextNode(err);
+      para.appendChild(node);
-        let element = document.getElementById("divError");
-        element.appendChild(para);
-      }
-    </script>
-  </body>
-</html>
+      let element = document.getElementById("divError");
+      element.appendChild(para);
+    }
+  </script>
+</body>
+</html>