sandboxedjs 0.1.73 → 0.1.75

package/dist/python-abi.d.cts

@@ -1,6 +1,6 @@
-import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-CVgctitO.cjs';
-export { m as ROOT_CRED, v as makeCred } from './contracts-CVgctitO.cjs';
-export { M as MemoryVolume } from './memory-volume-DlMSAh-K.cjs';
+import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-C2_dTgk3.cjs';
+export { m as ROOT_CRED, v as makeCred } from './contracts-C2_dTgk3.cjs';
+export { M as MemoryVolume } from './memory-volume-DqEWFo7t.cjs';
 
 /**
  * Open-file descriptions: the thing a descriptor points *at*.

package/dist/python-abi.d.ts

@@ -1,6 +1,6 @@
-import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-CVgctitO.js';
-export { m as ROOT_CRED, v as makeCred } from './contracts-CVgctitO.js';
-export { M as MemoryVolume } from './memory-volume-CWuWScIs.js';
+import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-C2_dTgk3.js';
+export { m as ROOT_CRED, v as makeCred } from './contracts-C2_dTgk3.js';
+export { M as MemoryVolume } from './memory-volume-CG56p660.js';
 
 /**
  * Open-file descriptions: the thing a descriptor points *at*.

package/dist/python-abi.js

@@ -1137,6 +1137,12 @@ var VirtualTcpSocket = class _VirtualTcpSocket {
   }
   connect(port, address = "127.0.0.1") {
     if (this.listenerValue || this.connectionValue) throw new PosixError(Errno.EISCONN);
+    if (!isLoopback(address)) {
+      throw new PosixError(
+        Errno.ENETUNREACH,
+        `cannot reach ${address}:${port}: outbound network access is not available through raw sockets in this container; only loopback is routed`
+      );
+    }
     this.connectionValue = this.network.connect(port, this.boundPort, this.boundAddress);
     this.boundPort = this.connectionValue.local.port;
     this.boundAddress = this.connectionValue.local.address;
@@ -1273,6 +1279,11 @@ var SocketDescription = class _SocketDescription {
     return peer;
   }
 };
+function isLoopback(address) {
+  if (address === "" || address === "localhost" || address === "0.0.0.0") return true;
+  if (address === "::1" || address === "::" || address === "[::1]") return true;
+  return /^127\./.test(address);
+}
 
 // src/python/syscall-server.ts
 var MAX_TRANSFER = 8 * 1024 * 1024;
@@ -1981,6 +1992,7 @@ var ERRNO = {
   ECONNRESET: 104,
   ENOTCONN: 107,
   ETIMEDOUT: 110,
+  ENETUNREACH: 101,
   ECONNREFUSED: 111,
   EHOSTUNREACH: 113,
   ENOTSUP: 95
@@ -2034,6 +2046,7 @@ var STRERROR = {
   ECONNRESET: "Connection reset by peer",
   ENOTCONN: "Transport endpoint is not connected",
   ETIMEDOUT: "Connection timed out",
+  ENETUNREACH: "Network is unreachable",
   ECONNREFUSED: "Connection refused",
   EHOSTUNREACH: "No route to host",
   ENOTSUP: "Operation not supported"