lhcb-ntuple-wizard-test 1.0.5 → 1.0.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/components/DecaysList.js +1 -1
  2. package/dist/components/LinesTable.js +1 -1
  3. package/dist/config.json +1 -1
  4. package/dist/lib/DTTConfig.js +4 -0
  5. package/package.json +1 -1
package/dist/components/DecaysList.js CHANGED
@@ -57,7 +57,7 @@ class DecaysList extends React.Component {
57
57
  _defineProperty(this, "getDecayItem", () => {
58
58
  const strippingDecayItem = this.state.items.map(decay => /*#__PURE__*/(0, _jsxRuntime.jsx)(_DecayItem.default, {
59
59
  decay: decay,
60
- selected: this.state.selectedDecays.includes(decay),
60
+ selected: this.state.selectedDecays.some(selected => selected.descriptors.plain === decay.descriptors.plain),
61
61
  parentCallback: this.callbackFunction
62
62
  }, decay.descriptors.plain));
63
63
  return strippingDecayItem;
package/dist/components/LinesTable.js CHANGED
@@ -324,7 +324,7 @@ class LinesTable extends _react.default.Component {
324
324
  row.paths.forEach((path, _index) => {
325
325
  const jobID = uniquePathList.findIndex(otherPath => otherPath === path);
326
326
  const key = "job".concat(jobID);
327
- const dttFile = "".concat(row.dtt.getSafeName(), ".py");
327
+ const dttFile = row.dtt.getSafeName();
328
328
  if (key in info) {
329
329
  info[key].options.push(dttFile);
330
330
  } else {
package/dist/config.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "metadata_baseurl": "https://lbwizard-metadata.web.cern.ch/2.0.1/",
2
+ "metadata_baseurl": "https://lbwizard-metadata.web.cern.ch/2.1.0/",
3
3
  "metadata_files": {
4
4
  "particleProperties": "particle_properties",
5
5
  "lokiVariables": "loki",
package/dist/lib/DTTConfig.js CHANGED
@@ -138,6 +138,10 @@ class DTTConfig {
138
138
  this.metadata[toolClass].interface.forEach(parameter => {
139
139
  params[parameter.name] = _lodash.default.cloneDeep(parameter["default"]); // Deep copy
140
140
  });
141
+ // Removing the option to configure the Preambulo for tools where it exists -- this is to prevent arbitrary Python code injection
142
+ if (Object.keys(params).includes("Preambulo")) {
143
+ delete params.Preambulo;
144
+ }
141
145
  return params;
142
146
  } else {
143
147
  return {};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lhcb-ntuple-wizard-test",
3
- "version": "1.0.5",
3
+ "version": "1.0.6",
4
4
  "description": "An application to access large-scale open data from LHCb",
5
5
  "url": "https://gitlab.cern.ch/lhcb-dpa/wp6-analysis-preservation-and-open-data/lhcb-ntuple-wizard-frontend/issues",
6
6
  "private": false,