@uipath/admin-tool 1.202.0-preview.134 → 1.202.0-preview.136

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/tool.js +203 -59
  2. package/package.json +2 -2
package/dist/tool.js CHANGED
@@ -667,9 +667,9 @@ var init_index_xnzgkhtg = __esm(() => {
667
667
  open_default = open;
668
668
  });
669
669
 
670
- // ../vpngateway-commands/dist/js-yaml-ac3y4ax7.js
671
- var exports_js_yaml_ac3y4ax7 = {};
672
- __export(exports_js_yaml_ac3y4ax7, {
670
+ // ../vpngateway-commands/dist/js-yaml-71wj4em9.js
671
+ var exports_js_yaml_71wj4em9 = {};
672
+ __export(exports_js_yaml_71wj4em9, {
673
673
  CORE_SCHEMA: () => CORE_SCHEMA,
674
674
  DEFAULT_SCHEMA: () => DEFAULT_SCHEMA,
675
675
  FAILSAFE_SCHEMA: () => FAILSAFE_SCHEMA,
@@ -1972,16 +1972,21 @@ function requireLoader() {
1972
1972
  state.result += _result;
1973
1973
  }
1974
1974
  }
1975
+ function chargeMergeWork(state) {
1976
+ state.totalMergeKeys++;
1977
+ if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
1978
+ throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
1979
+ }
1980
+ }
1975
1981
  function mergeMappings(state, destination, source, overridableKeys) {
1976
1982
  if (!common2.isObject(source)) {
1977
1983
  throwError(state, "cannot merge mappings; the provided source object is unacceptable");
1978
1984
  }
1985
+ chargeMergeWork(state);
1979
1986
  const sourceKeys = Object.keys(source);
1980
1987
  for (let index = 0, quantity = sourceKeys.length;index < quantity; index += 1) {
1981
1988
  const key = sourceKeys[index];
1982
- if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
1983
- throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
1984
- }
1989
+ chargeMergeWork(state);
1985
1990
  if (!_hasOwnProperty.call(destination, key)) {
1986
1991
  setProperty(destination, key, source[key]);
1987
1992
  overridableKeys[key] = true;
@@ -2009,6 +2014,9 @@ function requireLoader() {
2009
2014
  }
2010
2015
  if (keyTag === "tag:yaml.org,2002:merge") {
2011
2016
  if (Array.isArray(valueNode)) {
2017
+ if (valueNode.length > 100) {
2018
+ throwError(state, "abnormal merge sequence size");
2019
+ }
2012
2020
  for (let index = 0, quantity = valueNode.length;index < quantity; index += 1) {
2013
2021
  mergeMappings(state, _result, valueNode[index], overridableKeys);
2014
2022
  }
@@ -3742,7 +3750,7 @@ function requireJsYaml() {
3742
3750
  return jsYaml;
3743
3751
  }
3744
3752
  var jsYaml, loader, common, hasRequiredCommon, exception, hasRequiredException, snippet, hasRequiredSnippet, type, hasRequiredType, schema, hasRequiredSchema, str, hasRequiredStr, seq, hasRequiredSeq, map, hasRequiredMap, failsafe, hasRequiredFailsafe, _null, hasRequired_null, bool, hasRequiredBool, int, hasRequiredInt, float, hasRequiredFloat, json, hasRequiredJson, core, hasRequiredCore, timestamp, hasRequiredTimestamp, merge, hasRequiredMerge, binary, hasRequiredBinary, omap, hasRequiredOmap, pairs, hasRequiredPairs, set, hasRequiredSet, _default, hasRequired_default, hasRequiredLoader, dumper, hasRequiredDumper, hasRequiredJsYaml, jsYamlExports, yaml, Type, Schema, FAILSAFE_SCHEMA, JSON_SCHEMA, CORE_SCHEMA, DEFAULT_SCHEMA, load, loadAll, dump, YAMLException, types, safeLoad, safeLoadAll, safeDump;
3745
- var init_js_yaml_ac3y4ax7 = __esm(() => {
3753
+ var init_js_yaml_71wj4em9 = __esm(() => {
3746
3754
  init_index_1de529jm();
3747
3755
  jsYaml = {};
3748
3756
  loader = {};
@@ -7998,16 +8006,21 @@ function requireLoader2() {
7998
8006
  state.result += _result;
7999
8007
  }
8000
8008
  }
8009
+ function chargeMergeWork(state) {
8010
+ state.totalMergeKeys++;
8011
+ if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
8012
+ throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
8013
+ }
8014
+ }
8001
8015
  function mergeMappings(state, destination, source, overridableKeys) {
8002
8016
  if (!common22.isObject(source)) {
8003
8017
  throwError(state, "cannot merge mappings; the provided source object is unacceptable");
8004
8018
  }
8019
+ chargeMergeWork(state);
8005
8020
  const sourceKeys = Object.keys(source);
8006
8021
  for (let index = 0, quantity = sourceKeys.length;index < quantity; index += 1) {
8007
8022
  const key = sourceKeys[index];
8008
- if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
8009
- throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
8010
- }
8023
+ chargeMergeWork(state);
8011
8024
  if (!_hasOwnProperty.call(destination, key)) {
8012
8025
  setProperty(destination, key, source[key]);
8013
8026
  overridableKeys[key] = true;
@@ -8035,6 +8048,9 @@ function requireLoader2() {
8035
8048
  }
8036
8049
  if (keyTag === "tag:yaml.org,2002:merge") {
8037
8050
  if (Array.isArray(valueNode)) {
8051
+ if (valueNode.length > 100) {
8052
+ throwError(state, "abnormal merge sequence size");
8053
+ }
8038
8054
  for (let index = 0, quantity = valueNode.length;index < quantity; index += 1) {
8039
8055
  mergeMappings(state, _result, valueNode[index], overridableKeys);
8040
8056
  }
@@ -14016,6 +14032,7 @@ var require_errors = __commonJS(function(exports) {
14016
14032
  DESCRIPTOR_FAULTY: "Descriptor data is malformed",
14017
14033
  NO_DATA: "Nothing to decompress",
14018
14034
  BAD_CRC: "CRC32 checksum failed {0}",
14035
+ MAX_OUTPUT_EXCEEDED: "Decompressed data exceeds the declared uncompressed size",
14019
14036
  FILE_IN_THE_WAY: "There is a file in the way: {0}",
14020
14037
  UNKNOWN_METHOD: "Invalid/unsupported compression method",
14021
14038
  AVAIL_DATA: "inflate::Available inflate data did not terminate",
@@ -14033,11 +14050,13 @@ var require_errors = __commonJS(function(exports) {
14033
14050
  DISK_ENTRY_TOO_LARGE: "Number of disk entries is too large",
14034
14051
  NO_ZIP: "No zip file was loaded",
14035
14052
  NO_ENTRY: "Entry doesn't exist",
14053
+ DUPLICATE_ENTRY: "Duplicate entry name {0}",
14036
14054
  DIRECTORY_CONTENT_ERROR: "A directory cannot have content",
14037
14055
  FILE_NOT_FOUND: 'File not found: "{0}"',
14038
14056
  NOT_IMPLEMENTED: "Not implemented",
14039
14057
  INVALID_FILENAME: "Invalid filename",
14040
14058
  INVALID_FORMAT: "Invalid or unsupported zip format. No END header found",
14059
+ ZIP64_VALUE_TOO_LARGE: "Zip64 value exceeds the maximum safe integer",
14041
14060
  INVALID_PASS_PARAM: "Incompatible password parameter",
14042
14061
  WRONG_PASSWORD: "Wrong Password",
14043
14062
  COMMENT_TOO_LONG: "Comment is too long",
@@ -14191,8 +14210,49 @@ var require_utils = __commonJS(function(exports, module) {
14191
14210
  });
14192
14211
  });
14193
14212
  };
14213
+ Utils.prototype.assertPathSafe = function(root, target) {
14214
+ const self = this;
14215
+ if (typeof self.fs.lstatSync !== "function")
14216
+ return;
14217
+ const resolvedRoot = pth.resolve(root);
14218
+ const resolvedTarget = pth.resolve(target);
14219
+ if (resolvedTarget === resolvedRoot)
14220
+ return;
14221
+ const rel = pth.relative(resolvedRoot, resolvedTarget);
14222
+ if (!rel || rel === ".." || rel.startsWith(".." + pth.sep) || pth.isAbsolute(rel))
14223
+ return;
14224
+ let cur = resolvedRoot;
14225
+ for (const part of rel.split(pth.sep)) {
14226
+ if (!part || part === ".")
14227
+ continue;
14228
+ cur = pth.join(cur, part);
14229
+ let stat4;
14230
+ try {
14231
+ stat4 = self.fs.lstatSync(cur);
14232
+ } catch (e) {
14233
+ break;
14234
+ }
14235
+ if (stat4.isSymbolicLink())
14236
+ throw Errors.FILE_IN_THE_WAY(`"${cur}"`);
14237
+ }
14238
+ };
14194
14239
  Utils.prototype.findFiles = function(path5) {
14195
14240
  const self = this;
14241
+ const canLstat = typeof self.fs.lstatSync === "function";
14242
+ const rootReal = self.fs.realpathSync(path5);
14243
+ function escapesRoot(p) {
14244
+ if (!canLstat)
14245
+ return false;
14246
+ if (!self.fs.lstatSync(p).isSymbolicLink())
14247
+ return false;
14248
+ let real;
14249
+ try {
14250
+ real = self.fs.realpathSync(p);
14251
+ } catch (e) {
14252
+ return true;
14253
+ }
14254
+ return !(real === rootReal || real.startsWith(rootReal + pth.sep));
14255
+ }
14196
14256
  function findSync(dir, pattern, recursive, visited) {
14197
14257
  if (typeof pattern === "boolean") {
14198
14258
  recursive = pattern;
@@ -14201,6 +14261,8 @@ var require_utils = __commonJS(function(exports, module) {
14201
14261
  let files = [];
14202
14262
  self.fs.readdirSync(dir).forEach(function(file) {
14203
14263
  const path7 = pth.join(dir, file);
14264
+ if (escapesRoot(path7))
14265
+ return;
14204
14266
  const stat4 = self.fs.statSync(path7);
14205
14267
  if (!pattern || pattern.test(path7)) {
14206
14268
  files.push(pth.normalize(path7) + (stat4.isDirectory() ? self.sep : ""));
@@ -14215,7 +14277,7 @@ var require_utils = __commonJS(function(exports, module) {
14215
14277
  });
14216
14278
  return files;
14217
14279
  }
14218
- return findSync(path5, undefined, true, new Set([self.fs.realpathSync(path5)]));
14280
+ return findSync(path5, undefined, true, new Set([rootReal]));
14219
14281
  };
14220
14282
  Utils.prototype.findFilesAsync = function(dir, cb) {
14221
14283
  const self = this;
@@ -14227,6 +14289,23 @@ var require_utils = __commonJS(function(exports, module) {
14227
14289
  finished = true;
14228
14290
  cb(err, err ? undefined : results);
14229
14291
  };
14292
+ const canLstat = typeof self.fs.lstat === "function";
14293
+ let rootReal = null;
14294
+ const escapesRoot = function(file, cb2) {
14295
+ if (!canLstat)
14296
+ return cb2(null, false);
14297
+ self.fs.lstat(file, function(err, lst) {
14298
+ if (err)
14299
+ return cb2(err);
14300
+ if (!lst || !lst.isSymbolicLink())
14301
+ return cb2(null, false);
14302
+ self.fs.realpath(file, function(err2, real) {
14303
+ if (err2)
14304
+ return cb2(null, true);
14305
+ cb2(null, !(real === rootReal || real.startsWith(rootReal + pth.sep)));
14306
+ });
14307
+ });
14308
+ };
14230
14309
  const walk = function(dir2, visited, done) {
14231
14310
  self.fs.readdir(dir2, function(err, list) {
14232
14311
  if (err)
@@ -14236,34 +14315,43 @@ var require_utils = __commonJS(function(exports, module) {
14236
14315
  return done();
14237
14316
  list.forEach(function(name) {
14238
14317
  const file = pth.join(dir2, name);
14239
- self.fs.stat(file, function(err2, stat4) {
14318
+ escapesRoot(file, function(err2, escapes) {
14240
14319
  if (err2)
14241
14320
  return done(err2);
14242
- if (!stat4) {
14321
+ if (escapes) {
14243
14322
  if (!--pending)
14244
14323
  done();
14245
14324
  return;
14246
14325
  }
14247
- results.push(pth.normalize(file) + (stat4.isDirectory() ? self.sep : ""));
14248
- if (!stat4.isDirectory()) {
14249
- if (!--pending)
14250
- done();
14251
- return;
14252
- }
14253
- self.fs.realpath(file, function(err3, realDir) {
14326
+ self.fs.stat(file, function(err3, stat4) {
14254
14327
  if (err3)
14255
14328
  return done(err3);
14256
- if (visited.has(realDir)) {
14329
+ if (!stat4) {
14257
14330
  if (!--pending)
14258
14331
  done();
14259
14332
  return;
14260
14333
  }
14261
- visited.add(realDir);
14262
- walk(file, visited, function(err4) {
14263
- if (err4)
14264
- return done(err4);
14334
+ results.push(pth.normalize(file) + (stat4.isDirectory() ? self.sep : ""));
14335
+ if (!stat4.isDirectory()) {
14265
14336
  if (!--pending)
14266
14337
  done();
14338
+ return;
14339
+ }
14340
+ self.fs.realpath(file, function(err4, realDir) {
14341
+ if (err4)
14342
+ return done(err4);
14343
+ if (visited.has(realDir)) {
14344
+ if (!--pending)
14345
+ done();
14346
+ return;
14347
+ }
14348
+ visited.add(realDir);
14349
+ walk(file, visited, function(err5) {
14350
+ if (err5)
14351
+ return done(err5);
14352
+ if (!--pending)
14353
+ done();
14354
+ });
14267
14355
  });
14268
14356
  });
14269
14357
  });
@@ -14273,6 +14361,7 @@ var require_utils = __commonJS(function(exports, module) {
14273
14361
  self.fs.realpath(dir, function(err, realDir) {
14274
14362
  if (err)
14275
14363
  return finish(err);
14364
+ rootReal = realDir;
14276
14365
  walk(dir, new Set([realDir]), finish);
14277
14366
  });
14278
14367
  };
@@ -14347,7 +14436,11 @@ var require_utils = __commonJS(function(exports, module) {
14347
14436
  Utils.readBigUInt64LE = function(buffer, index) {
14348
14437
  const lo = buffer.readUInt32LE(index);
14349
14438
  const hi = buffer.readUInt32LE(index + 4);
14350
- return hi * 4294967296 + lo;
14439
+ const value = hi * 4294967296 + lo;
14440
+ if (value > Number.MAX_SAFE_INTEGER) {
14441
+ throw Errors.ZIP64_VALUE_TOO_LARGE();
14442
+ }
14443
+ return value;
14351
14444
  };
14352
14445
  Utils.writeBigUInt64LE = function(buffer, value, index) {
14353
14446
  const lo = value >>> 0;
@@ -14599,7 +14692,7 @@ var require_entryHeader = __commonJS(function(exports, module) {
14599
14692
  _attr = uint32(val);
14600
14693
  },
14601
14694
  get fileAttr() {
14602
- return (_attr || 0) >> 16 & 4095;
14695
+ return (_attr || 0) >> 16 & 511;
14603
14696
  },
14604
14697
  get offset() {
14605
14698
  return _offset;
@@ -14620,6 +14713,9 @@ var require_entryHeader = __commonJS(function(exports, module) {
14620
14713
  return _localHeader;
14621
14714
  },
14622
14715
  loadLocalHeaderFromBinary: function(input) {
14716
+ if (_offset < 0 || _offset + Constants.LOCHDR > input.length) {
14717
+ throw Utils.Errors.INVALID_LOC();
14718
+ }
14623
14719
  var data = input.slice(_offset, _offset + Constants.LOCHDR);
14624
14720
  if (data.readUInt32LE(0) !== Constants.LOCSIG) {
14625
14721
  throw Utils.Errors.INVALID_LOC();
@@ -14885,20 +14981,40 @@ var require_deflater = __commonJS(function(exports, module) {
14885
14981
  // ../../../node_modules/adm-zip/methods/inflater.js
14886
14982
  var require_inflater = __commonJS(function(exports, module) {
14887
14983
  var version = +(process?.versions?.node ?? "").split(".")[0] || 0;
14984
+ var Errors = require_errors();
14888
14985
  module.exports = function(inbuf, expectedLength) {
14889
14986
  var zlib = __require("zlib");
14890
- const option = version >= 15 && expectedLength > 0 ? { maxOutputLength: expectedLength } : {};
14987
+ const maxOutputLength = expectedLength > 0 ? expectedLength : 1;
14988
+ const option = version >= 15 ? { maxOutputLength } : {};
14891
14989
  return {
14892
14990
  inflate: function() {
14893
14991
  return zlib.inflateRawSync(inbuf, option);
14894
14992
  },
14895
14993
  inflateAsync: function(callback) {
14896
- var tmp = zlib.createInflateRaw(option), parts = [], total = 0;
14994
+ var tmp = zlib.createInflateRaw(option), parts = [], total = 0, done = false;
14995
+ const fail = function(err) {
14996
+ if (done)
14997
+ return;
14998
+ done = true;
14999
+ tmp.destroy();
15000
+ callback && callback(Buffer.alloc(0), err);
15001
+ };
15002
+ tmp.on("error", function(err) {
15003
+ fail(err);
15004
+ });
14897
15005
  tmp.on("data", function(data) {
14898
- parts.push(data);
15006
+ if (done)
15007
+ return;
14899
15008
  total += data.length;
15009
+ if (total > maxOutputLength) {
15010
+ return fail(Errors.MAX_OUTPUT_EXCEEDED());
15011
+ }
15012
+ parts.push(data);
14900
15013
  });
14901
15014
  tmp.on("end", function() {
15015
+ if (done)
15016
+ return;
15017
+ done = true;
14902
15018
  var buf = Buffer.alloc(total), written = 0;
14903
15019
  buf.fill(0);
14904
15020
  for (var i = 0;i < parts.length; i++) {
@@ -15055,7 +15171,12 @@ var require_zipEntry = __commonJS(function(exports, module) {
15055
15171
  return Buffer.alloc(0);
15056
15172
  }
15057
15173
  _extralocal = _centralHeader.loadLocalHeaderFromBinary(input);
15058
- return input.slice(_centralHeader.realDataOffset, _centralHeader.realDataOffset + _centralHeader.compressedSize);
15174
+ const dataOffset = _centralHeader.realDataOffset;
15175
+ const dataEnd = dataOffset + _centralHeader.compressedSize;
15176
+ if (dataOffset < 0 || dataEnd < dataOffset || dataEnd > input.length) {
15177
+ throw Utils.Errors.INVALID_LOC();
15178
+ }
15179
+ return input.slice(dataOffset, dataEnd);
15059
15180
  }
15060
15181
  function crc32OK(data) {
15061
15182
  const expectedCrc = _centralHeader.flags_desc || _centralHeader.localHeader.flags_desc ? _centralHeader.crc : _centralHeader.localHeader.crc;
@@ -15072,17 +15193,26 @@ var require_zipEntry = __commonJS(function(exports, module) {
15072
15193
  }
15073
15194
  return Buffer.alloc(0);
15074
15195
  }
15075
- var compressedData = getCompressedDataFromZip();
15076
- if (compressedData.length === 0) {
15077
- if (async && callback)
15078
- callback(compressedData);
15079
- return compressedData;
15080
- }
15081
- if (_centralHeader.encrypted) {
15082
- if (typeof pass !== "string" && !Buffer.isBuffer(pass)) {
15083
- throw Utils.Errors.INVALID_PASS_PARAM();
15196
+ var compressedData;
15197
+ try {
15198
+ compressedData = getCompressedDataFromZip();
15199
+ if (compressedData.length === 0) {
15200
+ if (async && callback)
15201
+ callback(compressedData);
15202
+ return compressedData;
15203
+ }
15204
+ if (_centralHeader.encrypted) {
15205
+ if (typeof pass !== "string" && !Buffer.isBuffer(pass)) {
15206
+ throw Utils.Errors.INVALID_PASS_PARAM();
15207
+ }
15208
+ compressedData = Methods.ZipCrypto.decrypt(compressedData, _centralHeader, pass);
15209
+ }
15210
+ } catch (err) {
15211
+ if (async && callback) {
15212
+ callback(Buffer.alloc(0), err);
15213
+ return Buffer.alloc(0);
15084
15214
  }
15085
- compressedData = Methods.ZipCrypto.decrypt(compressedData, _centralHeader, pass);
15215
+ throw err;
15086
15216
  }
15087
15217
  var data;
15088
15218
  switch (_centralHeader.method) {
@@ -15107,13 +15237,15 @@ var require_zipEntry = __commonJS(function(exports, module) {
15107
15237
  }
15108
15238
  return data;
15109
15239
  } else {
15110
- inflater.inflateAsync(function(result) {
15111
- if (callback) {
15112
- if (!crc32OK(result)) {
15113
- callback(result, Utils.Errors.BAD_CRC());
15114
- } else {
15115
- callback(result);
15116
- }
15240
+ inflater.inflateAsync(function(result, err) {
15241
+ if (!callback)
15242
+ return;
15243
+ if (err) {
15244
+ callback(Buffer.alloc(0), err);
15245
+ } else if (!crc32OK(result)) {
15246
+ callback(result, Utils.Errors.BAD_CRC());
15247
+ } else {
15248
+ callback(result);
15117
15249
  }
15118
15250
  });
15119
15251
  }
@@ -15405,6 +15537,9 @@ var require_zipFile = __commonJS(function(exports, module) {
15405
15537
  if (entry.header.commentLength)
15406
15538
  entry.comment = inBuffer.slice(tmp, tmp + entry.header.commentLength);
15407
15539
  index += entry.header.centralHeaderSize;
15540
+ if (entry.entryName in entryTable) {
15541
+ throw Utils.Errors.DUPLICATE_ENTRY(`"${entry.entryName}"`);
15542
+ }
15408
15543
  entryList[i] = entry;
15409
15544
  entryTable[entry.entryName] = entry;
15410
15545
  }
@@ -15930,7 +16065,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
15930
16065
  addLocalFolderAsync2: function(options2, callback) {
15931
16066
  const self = this;
15932
16067
  options2 = typeof options2 === "object" ? options2 : { localPath: options2 };
15933
- const localPath = pth.resolve(fixPath(options2.localPath));
16068
+ const localPath = pth.resolve(options2.localPath);
15934
16069
  let { zipPath, filter, namefix } = options2;
15935
16070
  if (filter instanceof RegExp) {
15936
16071
  filter = function(rx) {
@@ -15953,16 +16088,16 @@ var require_adm_zip = __commonJS(function(exports, module) {
15953
16088
  const fileNameFix = (entry) => pth.win32.basename(pth.win32.normalize(namefix(entry)));
15954
16089
  filetools.fs.open(localPath, "r", function(err) {
15955
16090
  if (err && err.code === "ENOENT") {
15956
- callback(undefined, Utils.Errors.FILE_NOT_FOUND(localPath));
16091
+ callback(Utils.Errors.FILE_NOT_FOUND(localPath), false);
15957
16092
  } else if (err) {
15958
- callback(undefined, err);
16093
+ callback(err, false);
15959
16094
  } else {
15960
16095
  filetools.findFilesAsync(localPath, function(err2, fileEntries) {
15961
16096
  if (err2)
15962
- return callback(err2);
16097
+ return callback(err2, false);
15963
16098
  fileEntries = fileEntries.filter((dir) => filter(relPathFix(dir)));
15964
16099
  if (!fileEntries.length)
15965
- callback(undefined, false);
16100
+ return callback(undefined, true);
15966
16101
  setImmediate(fileEntries.reverse().reduce(function(next, entry) {
15967
16102
  return function(err3, done) {
15968
16103
  if (err3 || done === false)
@@ -15982,7 +16117,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
15982
16117
  return new Promise((resolve4, reject) => {
15983
16118
  this.addLocalFolderAsync2(Object.assign({ localPath }, props), (err, done) => {
15984
16119
  if (err)
15985
- reject(err);
16120
+ return reject(err);
15986
16121
  if (done)
15987
16122
  resolve4(this);
15988
16123
  });
@@ -16052,6 +16187,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
16052
16187
  }
16053
16188
  var name = canonical(maintainEntryPath ? child.entryName : child.entryName.substring(item.entryName.length));
16054
16189
  var childName = sanitize(targetPath, name);
16190
+ filetools.assertPathSafe(targetPath, childName);
16055
16191
  const fileAttr2 = keepOriginalPermission ? child.header.fileAttr : undefined;
16056
16192
  filetools.writeFileTo(childName, content2, overwrite, fileAttr2);
16057
16193
  });
@@ -16060,6 +16196,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
16060
16196
  var content = item.getData(_zip.password);
16061
16197
  if (!content)
16062
16198
  throw Utils.Errors.CANT_EXTRACT_FILE();
16199
+ filetools.assertPathSafe(targetPath, target);
16063
16200
  if (filetools.fs.existsSync(target) && !overwrite) {
16064
16201
  throw Utils.Errors.CANT_OVERRIDE();
16065
16202
  }
@@ -16095,6 +16232,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
16095
16232
  const dirEntries = [];
16096
16233
  _zip.entries.forEach(function(entry) {
16097
16234
  var entryName = sanitize(targetPath, canonical(entry.entryName));
16235
+ filetools.assertPathSafe(targetPath, entryName);
16098
16236
  if (entry.isDirectory) {
16099
16237
  filetools.makeDir(entryName);
16100
16238
  if (keepOriginalPermission)
@@ -16149,6 +16287,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
16149
16287
  const dirPath = getPath(entry);
16150
16288
  const dirAttr = keepOriginalPermission ? entry.header.fileAttr : undefined;
16151
16289
  try {
16290
+ filetools.assertPathSafe(targetPath, dirPath);
16152
16291
  filetools.makeDir(dirPath);
16153
16292
  } catch (er) {
16154
16293
  callback(getError("Unable to create folder", dirPath));
@@ -16177,6 +16316,11 @@ var require_adm_zip = __commonJS(function(exports, module) {
16177
16316
  } else {
16178
16317
  const entryName = pth.normalize(canonical(entry.entryName));
16179
16318
  const filePath = sanitize(targetPath, entryName);
16319
+ try {
16320
+ filetools.assertPathSafe(targetPath, filePath);
16321
+ } catch (er) {
16322
+ return next(er);
16323
+ }
16180
16324
  entry.getDataAsync(function(content, err_1) {
16181
16325
  if (err_1) {
16182
16326
  next(err_1);
@@ -22981,7 +23125,7 @@ var jmespathSlot = singleton2("JmespathCodec");
22981
23125
  async function loadOutputCodecsAsync(needed) {
22982
23126
  const loads = [];
22983
23127
  if (needed.yaml && yamlSlot.get() === undefined) {
22984
- loads.push(Promise.resolve().then(() => (init_js_yaml_ac3y4ax7(), exports_js_yaml_ac3y4ax7)).then((mod2) => {
23128
+ loads.push(Promise.resolve().then(() => (init_js_yaml_71wj4em9(), exports_js_yaml_71wj4em9)).then((mod2) => {
22985
23129
  yamlSlot.set(mod2);
22986
23130
  }));
22987
23131
  }
@@ -26350,7 +26494,7 @@ var registerCommands = async (program2) => {
26350
26494
  var package_default2 = {
26351
26495
  name: "@uipath/apms-tool",
26352
26496
  license: "MIT",
26353
- version: "1.202.0-preview.134",
26497
+ version: "1.202.0-preview.136",
26354
26498
  description: "CLI plugin for the UiPath Access Policy Management Service.",
26355
26499
  private: false,
26356
26500
  repository: {
@@ -49238,7 +49382,7 @@ var registerCommands6 = async (program3) => {
49238
49382
  var package_default8 = {
49239
49383
  name: "@uipath/resourcecatalog-tool",
49240
49384
  license: "MIT",
49241
- version: "1.202.0-preview.134",
49385
+ version: "1.202.0-preview.136",
49242
49386
  description: "CLI plugin for the UiPath Resource Catalog Service.",
49243
49387
  private: false,
49244
49388
  repository: {
@@ -51186,7 +51330,7 @@ var registerCommands7 = async (program3) => {
51186
51330
  var package_default10 = {
51187
51331
  name: "@uipath/admin-tool",
51188
51332
  license: "MIT",
51189
- version: "1.202.0-preview.134",
51333
+ version: "1.202.0-preview.136",
51190
51334
  description: "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
51191
51335
  private: false,
51192
51336
  repository: {
@@ -51251,4 +51395,4 @@ export {
51251
51395
  registerCommands8 as registerCommands
51252
51396
  };
51253
51397
 
51254
- //# debugId=E4722CFA1BAF1B2E64756E2164756E21
51398
+ //# debugId=D89D3562E11866C764756E2164756E21
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@uipath/admin-tool",
3
3
  "license": "MIT",
4
- "version": "1.202.0-preview.134",
4
+ "version": "1.202.0-preview.136",
5
5
  "description": "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
6
6
  "private": false,
7
7
  "repository": {
@@ -23,5 +23,5 @@
23
23
  "files": [
24
24
  "dist"
25
25
  ],
26
- "gitHead": "a335728adbdb02f28308e4f55d8936d0b150444b"
26
+ "gitHead": "f6270de2c7c04f4c43b2f5187b0c3d3c314c2610"
27
27
  }