@xiping/node-utils 1.0.37 → 1.0.38

package/lib/src/ffmpeg/check.js

@@ -1,4 +1,4 @@
-import * as shell from "shelljs";
+import shell from "shelljs";
 // 检查 ffmpeg 可用性
 export function checkFFmpegAvailability() {
     const result = shell.exec('ffmpeg -version', { silent: true });

package/lib/src/ffmpeg/getThumbnail.js

@@ -1,4 +1,4 @@
-import * as shell from "shelljs";
+import shell from "shelljs";
 import Sharp from "sharp";
 import * as fs from "fs";
 import * as path from "node:path";
@@ -13,13 +13,11 @@ function validateAndSanitizePath(inputPath) {
     if (!inputPath || typeof inputPath !== 'string') {
         throw new Error('Invalid path provided');
     }
-    const resolvedPath = path.resolve(inputPath);
-    // 检查路径是否在允许的目录内
-    const cwd = process.cwd();
-    if (!resolvedPath.startsWith(cwd)) {
-        throw new Error('Path traversal attack detected');
+    // 确保是绝对路径
+    if (!path.isAbsolute(inputPath)) {
+        throw new Error('Path must be absolute');
     }
-    return resolvedPath;
+    return inputPath;
 }
 // 获取视频时长
 function getDurationInSeconds(videoPath) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiping/node-utils",
-  "version": "1.0.37",
+  "version": "1.0.38",
   "description": "node-utils",
   "type": "module",
   "author": "The-End-Hero <527409987@qq.com>",
@@ -25,7 +25,7 @@
   "bugs": {
     "url": "https://github.com/The-End-Hero/wang-ping/issues"
   },
-  "gitHead": "e9f2621bdf556bf876c7c92e9a17502442d3d648",
+  "gitHead": "dfd6b927e90517bf6703b066c9a2857e34ce68ce",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"