@tramvai/module-page-render-mode 7.21.0 → 7.26.8

package/lib/PageRenderWrapper.d.ts

@@ -1,4 +1,4 @@
 import type { PropsWithChildren } from 'react';
-export declare const PageRenderWrapper: ({ children }: PropsWithChildren<{}>) => import("react/jsx-runtime").JSX.Element | null;
-export declare const pageRenderHOC: (WrapperPage: any) => (props: any) => import("react/jsx-runtime").JSX.Element;
+export declare const PageRenderWrapper: ({ children }: PropsWithChildren<{}>) => import("react").JSX.Element | null;
+export declare const pageRenderHOC: (WrapperPage: any) => (props: any) => import("react").JSX.Element;
 //# sourceMappingURL=PageRenderWrapper.d.ts.map

package/lib/staticPages/fileSystemCache.es.js

@@ -155,6 +155,11 @@ and copy "dist/static" folder into the Docker image, to ensure the pages cache i
         const filePath = path.join(this.directory, pathname, filename);
         const metaFilePath = path.join(this.directory, pathname, metaFilename);
         try {
+            const resolvedRoot = path.resolve(this.directory);
+            const resolvedFilePath = path.resolve(filePath);
+            if (!resolvedFilePath.startsWith(resolvedRoot)) {
+                throw new Error(`Invalid filesystem cache pathname: "${filePath}"`);
+            }
             await promises.mkdir(path.dirname(filePath), { recursive: true });
             await promises.writeFile(filePath, cacheEntry.body, 'utf-8');
             await promises.writeFile(metaFilePath, JSON.stringify({

package/lib/staticPages/fileSystemCache.js

@@ -164,6 +164,11 @@ and copy "dist/static" folder into the Docker image, to ensure the pages cache i
         const filePath = path__default["default"].join(this.directory, pathname, filename);
         const metaFilePath = path__default["default"].join(this.directory, pathname, metaFilename);
         try {
+            const resolvedRoot = path__default["default"].resolve(this.directory);
+            const resolvedFilePath = path__default["default"].resolve(filePath);
+            if (!resolvedFilePath.startsWith(resolvedRoot)) {
+                throw new Error(`Invalid filesystem cache pathname: "${filePath}"`);
+            }
             await node_fs.promises.mkdir(path__default["default"].dirname(filePath), { recursive: true });
             await node_fs.promises.writeFile(filePath, cacheEntry.body, 'utf-8');
             await node_fs.promises.writeFile(metaFilePath, JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tramvai/module-page-render-mode",
-  "version": "7.21.0",
+  "version": "7.26.8",
   "description": "Enable different rendering modes for pages",
   "main": "./lib/server.js",
   "module": "./lib/server.es.js",
@@ -29,20 +29,20 @@
   },
   "peerDependencies": {
     "@tinkoff/dippy": "^1.0.0",
-    "@tinkoff/router": "0.7.73",
+    "@tinkoff/router": "0.7.106",
     "@tinkoff/utils": "^2.1.2",
-    "@tramvai/core": "7.21.0",
-    "@tramvai/module-client-hints": "7.21.0",
-    "@tramvai/module-router": "7.21.0",
-    "@tramvai/papi": "7.21.0",
-    "@tramvai/react": "7.21.0",
-    "@tramvai/tokens-common": "7.21.0",
-    "@tramvai/tokens-core": "7.21.0",
-    "@tramvai/tokens-metrics": "7.21.0",
-    "@tramvai/tokens-render": "7.21.0",
-    "@tramvai/tokens-router": "7.21.0",
-    "@tramvai/tokens-server": "7.21.0",
-    "@tramvai/tokens-server-private": "7.21.0",
+    "@tramvai/core": "7.26.8",
+    "@tramvai/module-client-hints": "7.26.8",
+    "@tramvai/module-router": "7.26.8",
+    "@tramvai/papi": "7.26.8",
+    "@tramvai/react": "7.26.8",
+    "@tramvai/tokens-common": "7.26.8",
+    "@tramvai/tokens-core": "7.26.8",
+    "@tramvai/tokens-metrics": "7.26.8",
+    "@tramvai/tokens-render": "7.26.8",
+    "@tramvai/tokens-router": "7.26.8",
+    "@tramvai/tokens-server": "7.26.8",
+    "@tramvai/tokens-server-private": "7.26.8",
     "prom-client": "^14.2.0",
     "react": ">=16.14.0",
     "tslib": "^2.4.0"