cspell-lib 10.1.0 → 10.1.1

package/dist/lib/Settings/Controller/configLoader/configLoader.d.ts

@@ -95,6 +95,7 @@ export interface IConfigLoader {
     getStats(): Readonly<Record<string, Readonly<Record<string, number>>>>;
     readonly isTrusted: boolean;
     setIsTrusted(isTrusted: boolean): void;
+    isTrustedUrl(url: URL): boolean;
 }
 export declare const defaultExtensionsAll: string[];
 export declare class ConfigLoader implements IConfigLoader {
@@ -166,6 +167,7 @@ export declare class ConfigLoader implements IConfigLoader {
     private resolveFilename;
     get isTrusted(): boolean;
     setIsTrusted(isTrusted: boolean): void;
+    isTrustedUrl(url: URL): boolean;
 }
 declare class ConfigLoaderInternal extends ConfigLoader {
     constructor(vfs: VFileSystem);

package/dist/lib/Settings/Controller/configLoader/configLoader.js

@@ -176,7 +176,8 @@ export class ConfigLoader {
     async resolveDefaultConfig() {
         const r = await this.fileResolver.resolveFile(defaultConfigFileModuleRef, srcDirectory);
         const url = toFileURL(r.filename);
-        this.cspellConfigFileReaderWriter.setTrustedUrls([new URL('../..', url)]);
+        const baseUrl = new URL('../..', url); // go up two directories to get out of the node_modules directory.
+        this.cspellConfigFileReaderWriter.setTrustedUrls([baseUrl]);
         return url;
     }
     importSettings(fileRef, pnpSettings, backReferences) {
@@ -250,6 +251,8 @@ export class ConfigLoader {
         }
     }
     async setupPnp(cfgFile, pnpSettings) {
+        if (!this.#isTrusted)
+            return;
         if (!pnpSettings?.usePnP || pnpSettings === defaultPnPSettings)
             return;
         if (cfgFile.url.protocol !== 'file:')
@@ -410,6 +413,14 @@ export class ConfigLoader {
         this.configSearch = new ConfigSearch(searchPlaces, isTrusted ? trustedSearch : unTrustedSearch, this.fs);
         this.cspellConfigFileReaderWriter.setUntrustedExtensions(isTrusted ? [] : defaultJsExtensions);
     }
+    isTrustedUrl(url) {
+        if (!this.#isTrusted) {
+            const ext = path.extname(url.pathname).toLowerCase();
+            if (defaultJsExtensions.includes(ext))
+                return false;
+        }
+        return this.cspellConfigFileReaderWriter.isTrusted(url);
+    }
     async #extractStopSearchAtURLs(options) {
         if (!options?.stopSearchAt)
             return undefined;

package/package.json

@@ -4,7 +4,7 @@
     "access": "public",
     "provenance": true
   },
-  "version": "10.1.0",
+  "version": "10.1.1",
   "description": "A library of useful functions used across various cspell tools.",
   "type": "module",
   "sideEffects": false,
@@ -75,22 +75,22 @@
   },
   "homepage": "https://github.com/streetsidesoftware/cspell/tree/main/packages/cspell-lib#readme",
   "dependencies": {
-    "@cspell/cspell-bundled-dicts": "10.1.0",
-    "@cspell/cspell-performance-monitor": "10.1.0",
-    "@cspell/cspell-pipe": "10.1.0",
-    "@cspell/cspell-resolver": "10.1.0",
-    "@cspell/cspell-types": "10.1.0",
-    "@cspell/dynamic-import": "10.1.0",
-    "@cspell/filetypes": "10.1.0",
-    "@cspell/rpc": "10.1.0",
-    "@cspell/strong-weak-map": "10.1.0",
-    "@cspell/url": "10.1.0",
-    "cspell-config-lib": "10.1.0",
-    "cspell-dictionary": "10.1.0",
-    "cspell-glob": "10.1.0",
-    "cspell-grammar": "10.1.0",
-    "cspell-io": "10.1.0",
-    "cspell-trie-lib": "10.1.0",
+    "@cspell/cspell-bundled-dicts": "10.1.1",
+    "@cspell/cspell-performance-monitor": "10.1.1",
+    "@cspell/cspell-pipe": "10.1.1",
+    "@cspell/cspell-resolver": "10.1.1",
+    "@cspell/cspell-types": "10.1.1",
+    "@cspell/dynamic-import": "10.1.1",
+    "@cspell/filetypes": "10.1.1",
+    "@cspell/rpc": "10.1.1",
+    "@cspell/strong-weak-map": "10.1.1",
+    "@cspell/url": "10.1.1",
+    "cspell-config-lib": "10.1.1",
+    "cspell-dictionary": "10.1.1",
+    "cspell-glob": "10.1.1",
+    "cspell-grammar": "10.1.1",
+    "cspell-io": "10.1.1",
+    "cspell-trie-lib": "10.1.1",
     "env-paths": "^4.0.0",
     "gensequence": "^8.0.8",
     "import-fresh": "^4.0.0",
@@ -103,7 +103,7 @@
     "node": ">=22.18.0"
   },
   "devDependencies": {
-    "@cspell/cspell-tools": "10.1.0",
+    "@cspell/cspell-tools": "10.1.1",
     "@cspell/dict-cpp": "^7.1.0",
     "@cspell/dict-csharp": "^4.0.8",
     "@cspell/dict-css": "^4.1.2",
@@ -122,5 +122,5 @@
     "lorem-ipsum": "^3.0.0",
     "perf-insight": "^2.0.1"
   },
-  "gitHead": "401518c5e37c06fb406aedadb3fc7a1c27eca8e6"
+  "gitHead": "bc3bc22aa1aa1b3073768f2ac9cf0d9a06f65177"
 }