jsonspecific 0.0.1-security → 3.14.7

package/test/escaping.test.js

@@ -0,0 +1,91 @@
+'use strict'
+
+const os = require('node:os')
+const { test } = require('tap')
+const { sink, once } = require('./helper')
+const pino = require('../')
+
+const { pid } = process
+const hostname = os.hostname()
+
+function testEscape (ch, key) {
+  test('correctly escape ' + ch, async ({ same }) => {
+    const stream = sink()
+    const instance = pino({
+      name: 'hello'
+    }, stream)
+    instance.fatal('this contains ' + key)
+    const result = await once(stream, 'data')
+    delete result.time
+    same(result, {
+      pid,
+      hostname,
+      level: 60,
+      name: 'hello',
+      msg: 'this contains ' + key
+    })
+  })
+}
+
+testEscape('\\n', '\n')
+testEscape('\\/', '/')
+testEscape('\\\\', '\\')
+testEscape('\\r', '\r')
+testEscape('\\t', '\t')
+testEscape('\\b', '\b')
+
+const toEscape = [
+  '\u0000', // NUL  Null character
+  '\u0001', // SOH  Start of Heading
+  '\u0002', // STX  Start of Text
+  '\u0003', // ETX  End-of-text character
+  '\u0004', // EOT  End-of-transmission character
+  '\u0005', // ENQ  Enquiry character
+  '\u0006', // ACK  Acknowledge character
+  '\u0007', // BEL  Bell character
+  '\u0008', // BS   Backspace
+  '\u0009', // HT   Horizontal tab
+  '\u000A', // LF   Line feed
+  '\u000B', // VT   Vertical tab
+  '\u000C', // FF   Form feed
+  '\u000D', // CR   Carriage return
+  '\u000E', // SO   Shift Out
+  '\u000F', // SI   Shift In
+  '\u0010', // DLE  Data Link Escape
+  '\u0011', // DC1  Device Control 1
+  '\u0012', // DC2  Device Control 2
+  '\u0013', // DC3  Device Control 3
+  '\u0014', // DC4  Device Control 4
+  '\u0015', // NAK  Negative-acknowledge character
+  '\u0016', // SYN  Synchronous Idle
+  '\u0017', // ETB  End of Transmission Block
+  '\u0018', // CAN  Cancel character
+  '\u0019', // EM   End of Medium
+  '\u001A', // SUB  Substitute character
+  '\u001B', // ESC  Escape character
+  '\u001C', // FS   File Separator
+  '\u001D', // GS   Group Separator
+  '\u001E', // RS   Record Separator
+  '\u001F' // US   Unit Separator
+]
+
+toEscape.forEach((key) => {
+  testEscape(JSON.stringify(key), key)
+})
+
+test('correctly escape `hello \\u001F world \\n \\u0022`', async ({ same }) => {
+  const stream = sink()
+  const instance = pino({
+    name: 'hello'
+  }, stream)
+  instance.fatal('hello \u001F world \n \u0022')
+  const result = await once(stream, 'data')
+  delete result.time
+  same(result, {
+    pid,
+    hostname,
+    level: 60,
+    name: 'hello',
+    msg: 'hello \u001F world \n \u0022'
+  })
+})

package/test/esm/esm.mjs

@@ -0,0 +1,12 @@
+import t from 'tap'
+import pino from '../../pino.js'
+import helper from '../helper.js'
+
+const { sink, check, once } = helper
+
+t.test('esm support', async ({ equal }) => {
+  const stream = sink()
+  const instance = pino(stream)
+  instance.info('hello world')
+  check(equal, await once(stream, 'data'), 30, 'hello world')
+})

package/test/esm/index.test.js

@@ -0,0 +1,34 @@
+'use strict'
+
+const t = require('tap')
+const semver = require('semver')
+
+const { isYarnPnp } = require('../helper')
+
+if (!semver.satisfies(process.versions.node, '^13.3.0 || ^12.10.0 || >= 14.0.0') || isYarnPnp) {
+  t.skip('Skip esm because not supported by Node')
+} else {
+  // Node v8 throw a `SyntaxError: Unexpected token import`
+  // even if this branch is never touch in the code,
+  // by using `eval` we can avoid this issue.
+  // eslint-disable-next-line
+  new Function('module', 'return import(module)')('./esm.mjs').catch((err) => {
+    process.nextTick(() => {
+      throw err
+    })
+  })
+}
+
+if (!semver.satisfies(process.versions.node, '>= 14.13.0 || ^12.20.0') || isYarnPnp) {
+  t.skip('Skip named exports because not supported by Node')
+} else {
+  // Node v8 throw a `SyntaxError: Unexpected token import`
+  // even if this branch is never touch in the code,
+  // by using `eval` we can avoid this issue.
+  // eslint-disable-next-line
+  new Function('module', 'return import(module)')('./named-exports.mjs').catch((err) => {
+    process.nextTick(() => {
+      throw err
+    })
+  })
+}

package/test/esm/named-exports.mjs

@@ -0,0 +1,27 @@
+import { hostname } from 'node:os'
+import t from 'tap'
+import { sink, check, once, watchFileCreated, file } from '../helper.js'
+import { pino, destination } from '../../pino.js'
+import { readFileSync } from 'node:fs'
+
+t.test('named exports support', async ({ equal }) => {
+  const stream = sink()
+  const instance = pino(stream)
+  instance.info('hello world')
+  check(equal, await once(stream, 'data'), 30, 'hello world')
+})
+
+t.test('destination', async ({ same }) => {
+  const tmp = file()
+  const instance = pino(destination(tmp))
+  instance.info('hello')
+  await watchFileCreated(tmp)
+  const result = JSON.parse(readFileSync(tmp).toString())
+  delete result.time
+  same(result, {
+    pid: process.pid,
+    hostname,
+    level: 30,
+    msg: 'hello'
+  })
+})

package/test/exit.test.js

@@ -0,0 +1,77 @@
+'use strict'
+
+const { test } = require('tap')
+const { join } = require('node:path')
+const execa = require('execa')
+const writer = require('flush-write-stream')
+const { once } = require('./helper')
+
+// https://github.com/pinojs/pino/issues/542
+test('pino.destination log everything when calling process.exit(0)', async ({ not }) => {
+  let actual = ''
+  const child = execa(process.argv[0], [join(__dirname, 'fixtures', 'destination-exit.js')])
+
+  child.stdout.pipe(writer((s, enc, cb) => {
+    actual += s
+    cb()
+  }))
+
+  await once(child, 'close')
+
+  not(actual.match(/hello/), null)
+  not(actual.match(/world/), null)
+})
+
+test('pino with no args log everything when calling process.exit(0)', async ({ not }) => {
+  let actual = ''
+  const child = execa(process.argv[0], [join(__dirname, 'fixtures', 'default-exit.js')])
+
+  child.stdout.pipe(writer((s, enc, cb) => {
+    actual += s
+    cb()
+  }))
+
+  await once(child, 'close')
+
+  not(actual.match(/hello/), null)
+  not(actual.match(/world/), null)
+})
+
+test('sync false logs everything when calling process.exit(0)', async ({ not }) => {
+  let actual = ''
+  const child = execa(process.argv[0], [join(__dirname, 'fixtures', 'syncfalse-exit.js')])
+
+  child.stdout.pipe(writer((s, enc, cb) => {
+    actual += s
+    cb()
+  }))
+
+  await once(child, 'close')
+
+  not(actual.match(/hello/), null)
+  not(actual.match(/world/), null)
+})
+
+test('sync false logs everything when calling flushSync', async ({ not }) => {
+  let actual = ''
+  const child = execa(process.argv[0], [join(__dirname, 'fixtures', 'syncfalse-flush-exit.js')])
+
+  child.stdout.pipe(writer((s, enc, cb) => {
+    actual += s
+    cb()
+  }))
+
+  await once(child, 'close')
+
+  not(actual.match(/hello/), null)
+  not(actual.match(/world/), null)
+})
+
+test('transports exits gracefully when logging in exit', async ({ equal }) => {
+  const child = execa(process.argv[0], [join(__dirname, 'fixtures', 'transport-with-on-exit.js')])
+  child.stdout.resume()
+
+  const code = await once(child, 'close')
+
+  equal(code, 0)
+})

package/test/fixtures/broken-pipe/basic.js

@@ -0,0 +1,9 @@
+'use strict'
+
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+
+const pino = require('../../..')()
+
+pino.info('hello world')

package/test/fixtures/broken-pipe/destination.js

@@ -0,0 +1,10 @@
+'use strict'
+
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+
+const pino = require('../../..')
+const logger = pino(pino.destination())
+
+logger.info('hello world')

package/test/fixtures/broken-pipe/syncfalse.js

@@ -0,0 +1,12 @@
+'use strict'
+
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+
+const pino = require('../../..')
+const logger = pino(pino.destination({ sync: false }))
+
+for (var i = 0; i < 1000; i++) {
+  logger.info('hello world')
+}

package/test/fixtures/console-transport.js

@@ -0,0 +1,13 @@
+const { Writable } = require('node:stream')
+
+module.exports = (options) => {
+  const myTransportStream = new Writable({
+    autoDestroy: true,
+    write (chunk, enc, cb) {
+      // apply a transform and send to stdout
+      console.log(chunk.toString().toUpperCase())
+      cb()
+    }
+  })
+  return myTransportStream
+}

package/test/fixtures/default-exit.js

@@ -0,0 +1,8 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const logger = pino()
+logger.info('hello')
+logger.info('world')
+process.exit(0)

package/test/fixtures/destination-exit.js

@@ -0,0 +1,8 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const logger = pino({}, pino.destination(1))
+logger.info('hello')
+logger.info('world')
+process.exit(0)

package/test/fixtures/eval/index.js

@@ -0,0 +1,13 @@
+/* eslint-disable no-eval */
+
+eval(`
+const pino = require('../../../')
+
+const logger = pino(
+  pino.transport({
+    target: 'pino/file'
+  })
+)
+
+logger.info('done!')
+`)

package/test/fixtures/eval/node_modules/14-files.js

@@ -0,0 +1,3 @@
+const file1 = require("./file1.js")
+
+file1()

package/test/fixtures/eval/node_modules/2-files.js

@@ -0,0 +1,3 @@
+const file12 = require("./file12.js")
+
+file12()

package/test/fixtures/eval/node_modules/file1.js

@@ -0,0 +1,5 @@
+const file2 = require("./file2.js")
+
+module.exports = function () {
+    file2()
+}

package/test/fixtures/eval/node_modules/file10.js

@@ -0,0 +1,5 @@
+const file11 = require("./file11.js")
+
+module.exports = function () {
+    file11()
+}

package/test/fixtures/eval/node_modules/file11.js

@@ -0,0 +1,5 @@
+const file12 = require("./file12.js")
+
+module.exports = function () {
+    file12()
+}

package/test/fixtures/eval/node_modules/file12.js

@@ -0,0 +1,5 @@
+const file13 = require("./file13.js")
+
+module.exports = function () {
+    file13()
+}

package/test/fixtures/eval/node_modules/file13.js

@@ -0,0 +1,5 @@
+const file14 = require("./file14.js")
+
+module.exports = function () {
+    file14()
+}

package/test/fixtures/eval/node_modules/file14.js

@@ -0,0 +1,11 @@
+const pino = require("../../../../");
+
+module.exports = function() {
+    const logger = pino(
+        pino.transport({
+            target: 'pino/file'
+        })
+    )
+
+    logger.info('done!')
+}

package/test/fixtures/eval/node_modules/file2.js

@@ -0,0 +1,5 @@
+const file3 = require("./file3.js")
+
+module.exports = function () {
+    file3()
+}

package/test/fixtures/eval/node_modules/file3.js

@@ -0,0 +1,5 @@
+const file4 = require("./file4.js")
+
+module.exports = function () {
+    file4()
+}

package/test/fixtures/eval/node_modules/file4.js

@@ -0,0 +1,5 @@
+const file5 = require("./file5.js")
+
+module.exports = function () {
+    file5()
+}

package/test/fixtures/eval/node_modules/file5.js

@@ -0,0 +1,5 @@
+const file6 = require("./file6.js")
+
+module.exports = function () {
+    file6()
+}

package/test/fixtures/eval/node_modules/file6.js

@@ -0,0 +1,5 @@
+const file7 = require("./file7.js")
+
+module.exports = function () {
+    file7()
+}

package/test/fixtures/eval/node_modules/file7.js

@@ -0,0 +1,5 @@
+const file8 = require("./file8.js")
+
+module.exports = function () {
+    file8()
+}

package/test/fixtures/eval/node_modules/file8.js

@@ -0,0 +1,5 @@
+const file9 = require("./file9.js")
+
+module.exports = function () {
+    file9()
+}

package/test/fixtures/eval/node_modules/file9.js

@@ -0,0 +1,5 @@
+const file10 = require("./file10.js")
+
+module.exports = function () {
+    file10()
+}

package/test/fixtures/noop-transport.js

@@ -0,0 +1,10 @@
+const { Writable } = require('node:stream')
+
+module.exports = () => {
+  return new Writable({
+    autoDestroy: true,
+    write (chunk, enc, cb) {
+      cb()
+    }
+  })
+}

package/test/fixtures/pretty/null-prototype.js

@@ -0,0 +1,8 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../../'))
+const log = pino({ prettyPrint: true })
+const obj = Object.create(null)
+Object.assign(obj, { foo: 'bar' })
+log.info(obj, 'hello')

package/test/fixtures/stdout-hack-protection.js

@@ -0,0 +1,11 @@
+global.process = { __proto__: process, pid: 123456 }
+
+const write = process.stdout.write.bind(process.stdout)
+process.stdout.write = function (chunk) {
+  write('hack ' + chunk)
+}
+
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('../../'))()
+pino.info('me')

package/test/fixtures/syncfalse-child.js

@@ -0,0 +1,6 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const asyncLogger = pino(pino.destination({ sync: false })).child({ hello: 'world' })
+asyncLogger.info('h')

package/test/fixtures/syncfalse-exit.js

@@ -0,0 +1,9 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const dest = pino.destination({ dest: 1, minLength: 4096, sync: false })
+const logger = pino({}, dest)
+logger.info('hello')
+logger.info('world')
+process.exit(0)

package/test/fixtures/syncfalse-flush-exit.js

@@ -0,0 +1,10 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const dest = pino.destination({ dest: 1, minLength: 4096, sync: false })
+const logger = pino({}, dest)
+logger.info('hello')
+logger.info('world')
+dest.flushSync()
+process.exit(0)

package/test/fixtures/syncfalse.js

@@ -0,0 +1,6 @@
+global.process = { __proto__: process, pid: 123456 }
+Date.now = function () { return 1459875739796 }
+require('node:os').hostname = function () { return 'abcdefghijklmnopqr' }
+const pino = require(require.resolve('./../../'))
+const asyncLogger = pino(pino.destination({ minLength: 4096, sync: false }))
+asyncLogger.info('h')

package/test/fixtures/syntax-error-esm.mjs

@@ -0,0 +1,2 @@
+// This is a syntax error
+import

package/test/fixtures/to-file-transport-with-transform.js

@@ -0,0 +1,20 @@
+'use strict'
+
+const fs = require('node:fs')
+const { once } = require('node:events')
+const { Transform } = require('node:stream')
+
+async function run (opts) {
+  if (!opts.destination) throw new Error('kaboom')
+  const stream = fs.createWriteStream(opts.destination)
+  await once(stream, 'open')
+  const t = new Transform({
+    transform (chunk, enc, cb) {
+      setImmediate(cb, null, chunk.toString().toUpperCase())
+    }
+  })
+  t.pipe(stream)
+  return t
+}
+
+module.exports = run

package/test/fixtures/to-file-transport.js

@@ -0,0 +1,13 @@
+'use strict'
+
+const fs = require('node:fs')
+const { once } = require('node:events')
+
+async function run (opts) {
+  if (!opts.destination) throw new Error('kaboom')
+  const stream = fs.createWriteStream(opts.destination)
+  await once(stream, 'open')
+  return stream
+}
+
+module.exports = run

package/test/fixtures/to-file-transport.mjs

@@ -0,0 +1,8 @@
+import { createWriteStream } from 'node:fs'
+import { once } from 'node:events'
+
+export default async function run (opts) {
+  const stream = createWriteStream(opts.destination)
+  await once(stream, 'open')
+  return stream
+}

package/test/fixtures/transport/index.js

@@ -0,0 +1,12 @@
+'use strict'
+
+const fs = require('node:fs')
+const { once } = require('node:events')
+
+async function run (opts) {
+  const stream = fs.createWriteStream(opts.destination)
+  await once(stream, 'open')
+  return stream
+}
+
+module.exports = run

package/test/fixtures/transport/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "transport",
+  "version": "0.0.1",
+  "main": "./index.js"
+}

package/test/fixtures/transport-exit-immediately-with-async-dest.js

@@ -0,0 +1,16 @@
+'use strict'
+
+const pino = require('../..')
+const transport = pino.transport({
+  target: './to-file-transport-with-transform.js',
+  options: {
+    destination: process.argv[2]
+  }
+})
+const logger = pino(transport)
+
+logger.info('Hello')
+
+logger.info('World')
+
+process.exit(0)

package/test/fixtures/transport-exit-immediately.js

@@ -0,0 +1,11 @@
+'use strict'
+
+const pino = require('../..')
+const transport = pino.transport({
+  target: 'pino/file'
+})
+const logger = pino(transport)
+
+logger.info('Hello')
+
+process.exit(0)

package/test/fixtures/transport-exit-on-ready.js

@@ -0,0 +1,12 @@
+'use strict'
+
+const pino = require('../..')
+const transport = pino.transport({
+  target: 'pino/file'
+})
+const logger = pino(transport)
+
+transport.on('ready', function () {
+  logger.info('Hello')
+  process.exit(0)
+})

package/test/fixtures/transport-main.js

@@ -0,0 +1,9 @@
+'use strict'
+
+const { join } = require('node:path')
+const pino = require('../..')
+const transport = pino.transport({
+  target: join(__dirname, 'transport-worker.js')
+})
+const logger = pino(transport)
+logger.info('Hello')