@zohodesk/client_build_tool 0.0.11-exp.28.0 → 0.0.11-exp.29.0

package/lib/shared/bundler/webpack/common/i18nOptionsValidator.js

@@ -15,10 +15,12 @@ const REQUIRED_OPTIONS = ['jsResourcePath', 'propertiesFolderPath', 'numericMapP
 function validatePathSecurity(path, fieldName) {
   if (!path || typeof path !== 'string') {
     return;
-  }
+  } // Allow relative paths within project structure (../assets, etc.)
+  // Block dangerous patterns like ../../etc/passwd
+
 
-  if (path.includes('..')) {
-    throw new Error(`[I18nOptionsValidator] Invalid ${fieldName} contains '..': ${path}`);
+  if (path.includes('../..') || path.startsWith('/') && path.includes('..')) {
+    throw new Error(`[I18nOptionsValidator] Invalid ${fieldName} contains suspicious path: ${path}`);
   }
 }
 

package/lib/shared/bundler/webpack/custom_plugins/I18nNumericIndexPlugin/I18nNumericIndexPlugin.js

@@ -157,12 +157,6 @@ class I18nNumericIndexPlugin {
     if (missingPaths.length > 0) {
       const errorMessage = ['', '🚨 I18N BUILD FAILURE: Critical i18n files are missing!', '', 'The following required files could not be found:', ...missingPaths.map(path => `  ❌ ${path}`), '', 'These files are essential for i18n functionality. Please ensure they exist before building.', '', 'Resolved paths checked:', ...resolvedPaths.map(path => `  📁 ${path}`), ''].join('\n');
       throw new Error(errorMessage);
-    } // Log successful validation in development mode
-
-
-    if (compiler.options.mode === 'development') {
-      console.log('✅ I18n critical file validation passed:');
-      resolvedPaths.forEach(path => console.log(`  📁 ${path}`));
     }
   }
 

package/lib/shared/bundler/webpack/loaderConfigs/i18nIdReplaceLoaderConfig.js

@@ -54,7 +54,9 @@ function i18nIdReplaceLoaderConfig(options) {
   }
 
   const allI18nData = loadJSResourcesOnce(options);
-  const i18nKeyReplaceLoaderPath = new URL('../loaders/i18nIdReplaceLoader.js', import.meta.url).pathname;
+
+  const i18nKeyReplaceLoaderPath = require.resolve('../loaders/i18nIdReplaceLoader.js');
+
   let numericIdMap;
 
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zohodesk/client_build_tool",
-  "version": "0.0.11-exp.28.0",
+  "version": "0.0.11-exp.29.0",
   "description": "A CLI tool to  build  web applications and client libraries",
   "main": "lib/index.js",
   "bin": {