eser 4.0.16 → 4.0.18

package/eser.js

@@ -7610,7 +7610,7 @@ var init_loader2 = __esm({
 });
 
 // pkg/@eser/codebase/package/writer.ts
-var getPropertyByPath2, setPropertyByPath, formatJson, writeConfigFile, resolveTargetFiles, updateField, updateVersion;
+var getPropertyByPath2, isSafePropertyName, setPropertyByPath, formatJson, writeConfigFile, resolveTargetFiles, updateField, updateVersion;
 var init_writer = __esm({
   "pkg/@eser/codebase/package/writer.ts"() {
     init_mod2();
@@ -7627,12 +7627,15 @@ var init_writer = __esm({
       }
       return current;
     };
+    isSafePropertyName = (name) => {
+      return name !== "__proto__" && name !== "constructor" && name !== "prototype";
+    };
     setPropertyByPath = (obj, path, value2) => {
       const parts = path.split(".");
       let current = obj;
       for (let i = 0; i < parts.length - 1; i++) {
         const part = parts[i];
-        if (part === void 0) {
+        if (part === void 0 || !isSafePropertyName(part)) {
           continue;
         }
         if (!(part in current) || typeof current[part] !== "object" || current[part] === null) {
@@ -7641,7 +7644,7 @@ var init_writer = __esm({
         current = current[part];
       }
       const lastPart = parts[parts.length - 1];
-      if (lastPart !== void 0) {
+      if (lastPart !== void 0 && isSafePropertyName(lastPart)) {
         current[lastPart] = value2;
       }
     };
@@ -9594,7 +9597,7 @@ var generate2 = (appName, tree) => {
 
 // pkg/@eser/shell/completions/generators/fish.ts
 var escapeFish = (str2) => {
-  return str2.replace(/'/g, "\\'");
+  return str2.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
 };
 var generateFlagCompletions2 = (appName, flags, condition) => {
   let output = "";
@@ -11337,7 +11340,7 @@ var shouldIgnore = (relativePath, ignorePatterns) => {
         return true;
       }
     } else if (pattern.includes("*")) {
-      const regexPattern = pattern.replace(/\./g, "\\.").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*");
+      const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*");
       const regex = new RegExp(`^${regexPattern}$`);
       if (regex.test(relativePath)) {
         return true;
@@ -12225,7 +12228,7 @@ var systemCommand = new Command("system").description("Commands related with thi
 // pkg/@eser/cli/package.json
 var package_default = {
   name: "@eser/cli",
-  version: "4.0.16",
+  version: "4.0.18",
   type: "module",
   exports: "./main.ts",
   bin: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eser",
-  "version": "4.0.16",
+  "version": "4.0.18",
   "type": "module",
   "bin": {
     "eser": "./eser.js"