manifest 4.11.1 → 4.11.3

package/dist/manifest/src/entity/services/relationship.service.js

@@ -11,9 +11,6 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RelationshipService = void 0;
 const faker_1 = require("@faker-js/faker");
@@ -22,7 +19,6 @@ const typeorm_1 = require("typeorm");
 const constants_1 = require("../../constants");
 const entity_service_1 = require("./entity.service");
 const common_2 = require("../../../../common/src");
-const pluralize_1 = __importDefault(require("pluralize"));
 const entity_manifest_service_1 = require("../../manifest/services/entity-manifest.service");
 let RelationshipService = class RelationshipService {
     constructor(entityManifestService, entityService) {
@@ -93,7 +89,7 @@ let RelationshipService = class RelationshipService {
         entityManifest.relationships
             .filter((relationship) => relationship.type === 'one-to-many')
             .forEach((oneToManyRelationship) => {
-            const relationshipName = (0, pluralize_1.default)(oneToManyRelationship.name);
+            const relationshipName = oneToManyRelationship.name;
             relationOptions[relationshipName] = {
                 target: oneToManyRelationship.entity,
                 type: 'one-to-many',

package/dist/manifest/src/manifest/services/entity-manifest.service.js

@@ -69,9 +69,13 @@ let EntityManifestService = class EntityManifestService {
                 slug: entitySchema.slug ||
                     (0, slugify_1.default)((0, dasherize_1.default)(entitySchema.single
                         ? entitySchema.className || className
-                        : pluralize_1.default.plural(entitySchema.className || className)).toLowerCase()),
+                        : entitySchema.namePlural ||
+                            pluralize_1.default.plural(entitySchema.className || className)).toLowerCase()),
                 single: entitySchema.single || false,
-                properties: (entitySchema.properties || []).map((propManifest) => this.transformProperty(propManifest, entitySchema)),
+                properties: (entitySchema.properties || [])
+                    .filter((propSchema) => propSchema !== 'id' &&
+                    propSchema.name !== 'id')
+                    .map((propSchema) => this.transformProperty(propSchema, entitySchema)),
                 hooks: this.transformHookObject(entitySchema.hooks),
                 middlewares: entitySchema.middlewares || {}
             };

package/dist/manifest/src/storage/services/storage.service.js

@@ -50,6 +50,7 @@ const common_1 = require("@nestjs/common");
 const common_2 = require("../../../../common/src");
 const constants_1 = require("../../constants");
 const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const sharp_1 = __importDefault(require("sharp"));
 const mkdirp = __importStar(require("mkdirp"));
 const uniqid_1 = __importDefault(require("uniqid"));
@@ -90,7 +91,11 @@ let StorageService = class StorageService {
             return this.uploadToS3(filePath, file.buffer);
         }
         else {
-            fs.writeFileSync(`${this.configService.get('paths.publicFolder')}/${constants_1.STORAGE_PATH}/${filePath}`, file.buffer);
+            const publicFolderPath = path.resolve(this.configService.get('paths.publicFolder'), constants_1.STORAGE_PATH, filePath);
+            if (!publicFolderPath.startsWith(path.resolve(this.configService.get('paths.publicFolder'), constants_1.STORAGE_PATH))) {
+                throw new Error('Invalid file path');
+            }
+            fs.writeFileSync(publicFolderPath, file.buffer);
             return Promise.resolve(this.prependStorageUrl(filePath));
         }
     }
@@ -110,7 +115,11 @@ let StorageService = class StorageService {
                 imagePaths[sizeName] = await this.uploadToS3(imagePath, resizedImage);
             }
             else {
-                fs.writeFileSync(`${this.configService.get('paths.publicFolder')}/${constants_1.STORAGE_PATH}/${imagePath}`, resizedImage);
+                const publicFolderPath = path.resolve(this.configService.get('paths.publicFolder'), constants_1.STORAGE_PATH, imagePath);
+                if (!publicFolderPath.startsWith(path.resolve(this.configService.get('paths.publicFolder'), constants_1.STORAGE_PATH))) {
+                    throw new Error('Invalid image path');
+                }
+                fs.writeFileSync(publicFolderPath, resizedImage);
                 imagePaths[sizeName] = this.prependStorageUrl(imagePath);
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "manifest",
-  "version": "4.11.1",
+  "version": "4.11.3",
   "description": "The 1-file micro-backend",
   "author": "Manifest",
   "license": "MIT",