piral-cli 1.10.0-beta.8476 → 1.10.0-beta.8484

package/lib/external/index.js

@@ -53742,6 +53742,7 @@ var SYMLINK2 = Symbol("symlink");
 var HARDLINK2 = Symbol("hardlink");
 var UNSUPPORTED = Symbol("unsupported");
 var CHECKPATH = Symbol("checkPath");
+var STRIPABSOLUTEPATH = Symbol("stripAbsolutePath");
 var MKDIR = Symbol("mkdir");
 var ONERROR = Symbol("onError");
 var PENDING = Symbol("pending");
@@ -53869,6 +53870,31 @@ var Unpack = class extends Parser {
       this.emit("end");
     }
   }
+  // return false if we need to skip this file
+  // return true if the field was successfully sanitized
+  [STRIPABSOLUTEPATH](entry, field) {
+    const path10 = entry[field];
+    if (!path10 || this.preservePaths)
+      return true;
+    const parts = path10.split("/");
+    if (parts.includes("..") || /* c8 ignore next */
+    isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
+      this.warn("TAR_ENTRY_ERROR", `${field} contains '..'`, {
+        entry,
+        [field]: path10
+      });
+      return false;
+    }
+    const [root, stripped] = stripAbsolutePath(path10);
+    if (root) {
+      entry[field] = String(stripped);
+      this.warn("TAR_ENTRY_INFO", `stripping ${root} from absolute ${field}`, {
+        entry,
+        [field]: path10
+      });
+    }
+    return true;
+  }
   [CHECKPATH](entry) {
     const p = normalizeWindowsPath(entry.path);
     const parts = p.split("/");
@@ -53896,23 +53922,8 @@ var Unpack = class extends Parser {
       });
       return false;
     }
-    if (!this.preservePaths) {
-      if (parts.includes("..") || /* c8 ignore next */
-      isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
-        this.warn("TAR_ENTRY_ERROR", `path contains '..'`, {
-          entry,
-          path: p
-        });
-        return false;
-      }
-      const [root, stripped] = stripAbsolutePath(p);
-      if (root) {
-        entry.path = String(stripped);
-        this.warn("TAR_ENTRY_INFO", `stripping ${root} from absolute path`, {
-          entry,
-          path: p
-        });
-      }
+    if (!this[STRIPABSOLUTEPATH](entry, "path") || !this[STRIPABSOLUTEPATH](entry, "linkpath")) {
+      return false;
     }
     if (import_node_path8.default.isAbsolute(entry.path)) {
       entry.absolute = normalizeWindowsPath(import_node_path8.default.resolve(entry.path));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "piral-cli",
-  "version": "1.10.0-beta.8476",
+  "version": "1.10.0-beta.8484",
   "description": "The standard CLI for creating and building a Piral instance or a Pilet.",
   "keywords": [
     "portal",
@@ -78,5 +78,5 @@
     "open": "^10",
     "typescript": "^5"
   },
-  "gitHead": "3b6b976669e82114ce68347b9f34620fd38e5b23"
+  "gitHead": "935b02783f9d918bd79c93d1bcd6ad231cb9b62f"
 }