@mongodb-js/shell-bson-parser 1.5.4 → 1.5.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/check.js +61 -60
- package/dist/check.js.map +1 -1
- package/package.json +5 -5
package/dist/check.js
CHANGED
|
@@ -3,70 +3,71 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.checkTree = void 0;
|
|
4
4
|
const scope_1 = require("./scope");
|
|
5
5
|
class Checker {
|
|
6
|
+
options;
|
|
6
7
|
constructor(options) {
|
|
7
8
|
this.options = options;
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
9
|
+
}
|
|
10
|
+
checkSafeCall = (node) => {
|
|
11
|
+
const allowMethods = this.options.allowMethods;
|
|
12
|
+
if (node.callee.type === 'Identifier') {
|
|
13
|
+
return (scope_1.GLOBAL_FUNCTIONS.indexOf(node.callee.name) >= 0 &&
|
|
14
|
+
node.arguments.every(this.checkSafeExpression));
|
|
15
|
+
}
|
|
16
|
+
if (allowMethods) {
|
|
17
|
+
if (node.callee.type === 'MemberExpression') {
|
|
18
|
+
const object = node.callee.object;
|
|
19
|
+
const property = node.callee.property;
|
|
20
|
+
if (object.type === 'Identifier' && property.type === 'Identifier') {
|
|
21
|
+
return ((0, scope_1.isMethodWhitelisted)(object.name, property.name) &&
|
|
22
|
+
node.arguments.every(this.checkSafeExpression));
|
|
23
|
+
}
|
|
24
|
+
else if ((object.type === 'NewExpression' ||
|
|
25
|
+
object.type === 'CallExpression') &&
|
|
26
|
+
object.callee.type === 'Identifier') {
|
|
27
|
+
const callee = object.callee;
|
|
28
|
+
return ((0, scope_1.isMethodWhitelisted)(callee.name, property.name) &&
|
|
29
|
+
node.arguments.every(this.checkSafeExpression));
|
|
30
|
+
}
|
|
31
|
+
else {
|
|
32
|
+
return (this.checkSafeExpression(object) &&
|
|
33
|
+
node.arguments.every(this.checkSafeExpression));
|
|
33
34
|
}
|
|
34
35
|
}
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
return
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
}
|
|
69
|
-
}
|
|
36
|
+
}
|
|
37
|
+
return false;
|
|
38
|
+
};
|
|
39
|
+
checkSafeExpression = (node) => {
|
|
40
|
+
switch (node?.type) {
|
|
41
|
+
case 'Identifier':
|
|
42
|
+
return Object.prototype.hasOwnProperty.call(scope_1.GLOBALS, node.name);
|
|
43
|
+
case 'Literal':
|
|
44
|
+
return true;
|
|
45
|
+
case 'ArrayExpression':
|
|
46
|
+
return node.elements.every(this.checkSafeExpression);
|
|
47
|
+
case 'UnaryExpression':
|
|
48
|
+
return this.checkSafeExpression(node.argument);
|
|
49
|
+
case 'BinaryExpression':
|
|
50
|
+
return (this.checkSafeExpression(node.left) &&
|
|
51
|
+
this.checkSafeExpression(node.right));
|
|
52
|
+
case 'CallExpression':
|
|
53
|
+
case 'NewExpression':
|
|
54
|
+
return this.checkSafeCall(node);
|
|
55
|
+
case 'ObjectExpression':
|
|
56
|
+
return node.properties.every((property) => {
|
|
57
|
+
if (('computed' in property && property.computed) ||
|
|
58
|
+
('method' in property && property.method))
|
|
59
|
+
return false;
|
|
60
|
+
if (!('key' in property) ||
|
|
61
|
+
!['Literal', 'Identifier'].includes(property.key.type))
|
|
62
|
+
return false;
|
|
63
|
+
return ('value' in property &&
|
|
64
|
+
(['FunctionExpression', 'ArrowFunctionExpression'].includes(property.value.type) ||
|
|
65
|
+
this.checkSafeExpression(property.value)));
|
|
66
|
+
});
|
|
67
|
+
default:
|
|
68
|
+
return false;
|
|
69
|
+
}
|
|
70
|
+
};
|
|
70
71
|
}
|
|
71
72
|
const checkTree = (node, options) => {
|
|
72
73
|
if (node.type === 'Program') {
|
package/dist/check.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":";;;AAEA,mCAAyE;AAGzE,MAAM,OAAO;
|
|
1
|
+
{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":";;;AAEA,mCAAyE;AAGzE,MAAM,OAAO;IACS;IAApB,YAAoB,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;IAKxC,aAAa,GAAG,CAAC,IAAwB,EAAE,EAAE;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,CACL,wBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAsB,CAAC;gBAEpD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACnE,OAAO,CACL,IAAA,2BAAmB,EAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;wBAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;gBACJ,CAAC;qBAAM,IACL,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe;oBAC9B,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC;oBACnC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EACnC,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC7B,OAAO,CACL,IAAA,2BAAmB,EAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;wBAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CACL,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;wBAChC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAMF,mBAAmB,GAAG,CAAC,IAAiB,EAAW,EAAE;QACnD,QAAQ,IAAI,EAAE,IAAI,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,eAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC;YACd,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACvD,KAAK,iBAAiB;gBAEpB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,KAAK,kBAAkB;gBAErB,OAAO,CACL,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;oBACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CACrC,CAAC;YACJ,KAAK,gBAAgB,CAAC;YACtB,KAAK,eAAe;gBAElB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAGxC,IACE,CAAC,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;wBAC7C,CAAC,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC;wBAEzC,OAAO,KAAK,CAAC;oBAEf,IACE,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC;wBACpB,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;wBAEtD,OAAO,KAAK,CAAC;oBAGf,OAAO,CACL,OAAO,IAAI,QAAQ;wBACnB,CAAC,CAAC,oBAAoB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CACzD,QAAQ,CAAC,KAAK,CAAC,IAAI,CACpB;4BACC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC5C,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;CACH;AAEM,MAAM,SAAS,GAAG,CAAC,IAAU,EAAE,OAAgB,EAAE,EAAE;IACxD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AARW,QAAA,SAAS,aAQpB"}
|
package/package.json
CHANGED
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"email": "compass@mongodb.com"
|
|
14
14
|
},
|
|
15
15
|
"homepage": "https://github.com/mongodb-js/devtools-shared",
|
|
16
|
-
"version": "1.5.
|
|
16
|
+
"version": "1.5.6",
|
|
17
17
|
"repository": {
|
|
18
18
|
"type": "git",
|
|
19
19
|
"url": "https://github.com/mongodb-js/devtools-shared.git"
|
|
@@ -58,10 +58,10 @@
|
|
|
58
58
|
"bson": "^4.6.3 || ^5 || ^6.10.3 || ^7.0.0"
|
|
59
59
|
},
|
|
60
60
|
"devDependencies": {
|
|
61
|
-
"@mongodb-js/eslint-config-devtools": "^0.11.
|
|
61
|
+
"@mongodb-js/eslint-config-devtools": "^0.11.3",
|
|
62
62
|
"@mongodb-js/mocha-config-devtools": "^1.1.0",
|
|
63
63
|
"@mongodb-js/prettier-config-devtools": "^1.0.2",
|
|
64
|
-
"@mongodb-js/tsconfig-devtools": "^1.1.
|
|
64
|
+
"@mongodb-js/tsconfig-devtools": "^1.1.1",
|
|
65
65
|
"@types/chai": "^4.2.21",
|
|
66
66
|
"@types/estree": "^0.0.41",
|
|
67
67
|
"@types/mocha": "^9.1.1",
|
|
@@ -76,7 +76,7 @@
|
|
|
76
76
|
"nyc": "^15.1.0",
|
|
77
77
|
"prettier": "^3.5.3",
|
|
78
78
|
"sinon": "^9.2.3",
|
|
79
|
-
"typescript": "^5.
|
|
79
|
+
"typescript": "^5.9.3"
|
|
80
80
|
},
|
|
81
|
-
"gitHead": "
|
|
81
|
+
"gitHead": "351125bdca5cc071e432b25605b411b00b2eb336"
|
|
82
82
|
}
|