@openzeppelin/wizard-stellar 0.6.1 → 0.6.2

package/dist/set-info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"set-info.d.ts","sourceRoot":"","sources":["../src/set-info.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,WAAW;;EAAsC,CAAC;AAE/D,eAAO,MAAM,QAAQ,EAAE,IAAyB,CAAC;AAEjD,MAAM,MAAM,IAAI,GAAG;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wBAAgB,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,GAAG,IAAI,CAIpF"}
+{"version":3,"file":"set-info.d.ts","sourceRoot":"","sources":["../src/set-info.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAelD,eAAO,MAAM,WAAW;;EAAsC,CAAC;AAE/D,eAAO,MAAM,QAAQ,EAAE,IAAyB,CAAC;AAEjD,MAAM,MAAM,IAAI,GAAG;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wBAAgB,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,GAAG,IAAI,CAUpF"}

package/dist/set-info.js

@@ -2,12 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.defaults = exports.infoOptions = void 0;
 exports.setInfo = setInfo;
+const error_1 = require("./error");
+// These values are printed into a // comment line in the generated Rust. LF
+// ends that comment, letting following text become source. CR and U+2028/U+2029
+// cannot break out in Rust, but are rejected as defense in depth (review tools
+// render U+2028/U+2029 as line breaks).
+const LINE_TERMINATOR = /[\n\r\u2028\u2029]/u;
+function checkSingleLine(value, field) {
+    if (LINE_TERMINATOR.test(value)) {
+        throw new error_1.OptionsError({ [field]: 'Must not contain line breaks' });
+    }
+}
 exports.infoOptions = [{}, { license: 'WTFPL' }];
 exports.defaults = { license: 'MIT' };
 function setInfo(c, { securityContact, license }) {
-    if (securityContact)
+    if (securityContact) {
+        checkSingleLine(securityContact, 'securityContact');
         c.addContractMetadata({ key: 'security_contact', value: securityContact });
-    if (license)
+    }
+    if (license) {
+        checkSingleLine(license, 'license');
         c.license = license;
+    }
 }
 //# sourceMappingURL=set-info.js.map

package/dist/set-info.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-info.js","sourceRoot":"","sources":["../src/set-info.ts"],"names":[],"mappings":";;;AAWA,0BAIC;AAbY,QAAA,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAU,CAAC;AAElD,QAAA,QAAQ,GAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAOjD,SAAgB,OAAO,CAAC,CAAkB,EAAE,EAAE,eAAe,EAAE,OAAO,EAAQ;IAC5E,IAAI,eAAe;QAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IAEhG,IAAI,OAAO;QAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;AACnC,CAAC"}
+{"version":3,"file":"set-info.js","sourceRoot":"","sources":["../src/set-info.ts"],"names":[],"mappings":";;;AAwBA,0BAUC;AAjCD,mCAAuC;AAEvC,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,wCAAwC;AACxC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,oBAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAEY,QAAA,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAU,CAAC;AAElD,QAAA,QAAQ,GAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAOjD,SAAgB,OAAO,CAAC,CAAkB,EAAE,EAAE,eAAe,EAAE,OAAO,EAAQ;IAC5E,IAAI,eAAe,EAAE,CAAC;QACpB,eAAe,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACpD,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/wizard-stellar",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "A boilerplate generator to get started with OpenZeppelin Stellar Soroban Contracts",
   "license": "AGPL-3.0-only",
   "repository": "https://github.com/OpenZeppelin/contracts-wizard",

package/src/set-info.ts

@@ -1,4 +1,17 @@
 import type { ContractBuilder } from './contract';
+import { OptionsError } from './error';
+
+// These values are printed into a // comment line in the generated Rust. LF
+// ends that comment, letting following text become source. CR and U+2028/U+2029
+// cannot break out in Rust, but are rejected as defense in depth (review tools
+// render U+2028/U+2029 as line breaks).
+const LINE_TERMINATOR = /[\n\r\u2028\u2029]/u;
+
+function checkSingleLine(value: string, field: string): void {
+  if (LINE_TERMINATOR.test(value)) {
+    throw new OptionsError({ [field]: 'Must not contain line breaks' });
+  }
+}
 
 export const infoOptions = [{}, { license: 'WTFPL' }] as const;
 
@@ -10,7 +23,13 @@ export type Info = {
 };
 
 export function setInfo(c: ContractBuilder, { securityContact, license }: Info): void {
-  if (securityContact) c.addContractMetadata({ key: 'security_contact', value: securityContact });
+  if (securityContact) {
+    checkSingleLine(securityContact, 'securityContact');
+    c.addContractMetadata({ key: 'security_contact', value: securityContact });
+  }
 
-  if (license) c.license = license;
+  if (license) {
+    checkSingleLine(license, 'license');
+    c.license = license;
+  }
 }