just-bash 2.12.7 → 2.12.8

package/dist/network/allow-list/shared.d.ts

@@ -43,6 +43,14 @@ export declare function expectBlocked(env: EnvAdapter, url: string, expectedUrl?
  * Utility for testing that a URL is blocked due to private IP
  */
 export declare function expectBlockedPrivate(env: EnvAdapter, url: string, expectedUrl?: string): Promise<void>;
+/**
+ * Utility for testing that a URL is blocked due to DNS-resolved private IP
+ */
+export declare function expectBlockedDnsPrivate(env: EnvAdapter, url: string, expectedUrl?: string): Promise<void>;
+/**
+ * Utility for testing that a URL is blocked due to DNS resolution failure (fail-closed)
+ */
+export declare function expectBlockedDnsFailure(env: EnvAdapter, url: string, expectedUrl?: string): Promise<void>;
 /**
  * Utility for testing that a URL succeeds with expected mock response
  */

package/dist/network/types.d.ts

@@ -4,6 +4,13 @@
  * Network access is disabled by default. To enable network access (e.g., for curl),
  * you must explicitly configure allowed URLs.
  */
+/**
+ * DNS lookup result used for private IP resolution checks
+ */
+export interface DnsLookupResult {
+    address: string;
+    family: number;
+}
 /**
  * HTTP methods that can be allowed
  */
@@ -55,7 +62,8 @@ export interface NetworkConfig {
     maxResponseSize?: number;
     /**
      * Reject URLs with private/loopback IP addresses as hostnames.
-     * This is a URL/hostname-level check only (no DNS resolution).
+     * Performs both lexical hostname checks and DNS resolution to catch
+     * domains that resolve to private IPs (e.g., DNS rebinding attacks).
      * Useful for mitigating SSRF attacks. Default: false (opt-in).
      *
      * When enabled, the private IP check is enforced even when
@@ -63,6 +71,12 @@ export interface NetworkConfig {
      * internal/loopback addresses are never reachable.
      */
     denyPrivateRanges?: boolean;
+    /**
+     * @internal Override DNS resolution for testing.
+     * When set, used instead of the default `dns.lookup` for the
+     * denyPrivateRanges DNS rebinding check.
+     */
+    _dnsResolve?: (hostname: string) => Promise<DnsLookupResult[]>;
 }
 /**
  * Result of a network fetch operation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "just-bash",
-  "version": "2.12.7",
+  "version": "2.12.8",
   "description": "A simulated bash environment with virtual filesystem",
   "repository": {
     "type": "git",

package/dist/bin/chunks/sleep-3WHM7JMW.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-ROMKUVHI.js";import"./chunk-YTIURC67.js";import"./chunk-JX6YLHDX.js";import"./chunk-NTKUVXEL.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as sleepCommand};

package/dist/bin/chunks/tar-SO3XDDIW.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-QTII62YM.js";import"./chunk-YMMJLYIX.js";import"./chunk-NTKUVXEL.js";import"./chunk-SE4C7FJY.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as tarCommand};

package/dist/bin/chunks/timeout-BYB3L2JA.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-VCKKRS7V.js";import"./chunk-YTIURC67.js";import"./chunk-4OALHZXB.js";import"./chunk-JX6YLHDX.js";import"./chunk-NTKUVXEL.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as timeoutCommand};

package/dist/bin/chunks/yq-H7D2U3HS.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-ZNPXCE5B.js";import"./chunk-QSDVMMYI.js";import"./chunk-PLKGKTIS.js";import"./chunk-ZJGIBTWD.js";import"./chunk-4PRVMER6.js";import"./chunk-5MUD3WB2.js";import"./chunk-NTKUVXEL.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as yqCommand};

package/dist/bin/shell/chunks/sleep-3WHM7JMW.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-ROMKUVHI.js";import"./chunk-YTIURC67.js";import"./chunk-JX6YLHDX.js";import"./chunk-NTKUVXEL.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as sleepCommand};

package/dist/bin/shell/chunks/tar-SO3XDDIW.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-QTII62YM.js";import"./chunk-YMMJLYIX.js";import"./chunk-NTKUVXEL.js";import"./chunk-SE4C7FJY.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as tarCommand};

package/dist/bin/shell/chunks/timeout-BYB3L2JA.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-VCKKRS7V.js";import"./chunk-YTIURC67.js";import"./chunk-4OALHZXB.js";import"./chunk-JX6YLHDX.js";import"./chunk-NTKUVXEL.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as timeoutCommand};

package/dist/bin/shell/chunks/yq-H7D2U3HS.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{a,b}from"./chunk-ZNPXCE5B.js";import"./chunk-QSDVMMYI.js";import"./chunk-PLKGKTIS.js";import"./chunk-ZJGIBTWD.js";import"./chunk-4PRVMER6.js";import"./chunk-5MUD3WB2.js";import"./chunk-NTKUVXEL.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as yqCommand};

package/dist/bundle/chunks/sleep-IUBP5GMH.js

@@ -1 +0,0 @@
-import{a,b}from"./chunk-X3CVFNQZ.js";import"./chunk-3ZUFRYJ4.js";import"./chunk-7YDOWJ75.js";import"./chunk-72EQZSVH.js";import"./chunk-74CEPOFO.js";import"./chunk-DXB73IDG.js";export{b as flagsForFuzzing,a as sleepCommand};

package/dist/bundle/chunks/tar-LKO7DKAK.js

@@ -1 +0,0 @@
-import{a,b}from"./chunk-BED5HSP2.js";import"./chunk-X2AJGDEF.js";import"./chunk-72EQZSVH.js";import"./chunk-YNYSPYQ5.js";import"./chunk-74CEPOFO.js";import"./chunk-DXB73IDG.js";export{b as flagsForFuzzing,a as tarCommand};

package/dist/bundle/chunks/timeout-TL4Q5YKZ.js

@@ -1 +0,0 @@
-import{a,b}from"./chunk-6HBBXB3L.js";import"./chunk-3ZUFRYJ4.js";import"./chunk-7YDOWJ75.js";import"./chunk-IPJHKYVM.js";import"./chunk-72EQZSVH.js";import"./chunk-74CEPOFO.js";import"./chunk-DXB73IDG.js";export{b as flagsForFuzzing,a as timeoutCommand};

package/dist/bundle/chunks/yq-HIQ4WMDY.js

@@ -1 +0,0 @@
-import{a,b}from"./chunk-C7ZTXK5C.js";import"./chunk-SYMJJMQ4.js";import"./chunk-KZ7BI7TV.js";import"./chunk-DZZS6SJP.js";import"./chunk-OJDRYQWQ.js";import"./chunk-X36DXRVC.js";import"./chunk-72EQZSVH.js";import"./chunk-YNYSPYQ5.js";import"./chunk-GFQRA5P5.js";import"./chunk-CCNMISUL.js";import"./chunk-74CEPOFO.js";import"./chunk-DXB73IDG.js";export{b as flagsForFuzzing,a as yqCommand};