xypriss 9.12.68 → 9.12.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -5,6 +5,7 @@ var ProjectDiscovery = require('../utils/ProjectDiscovery.js');
|
|
|
5
5
|
var path = require('path');
|
|
6
6
|
var fs = require('fs');
|
|
7
7
|
var DotEnvLoader = require('../utils/DotEnvLoader.js');
|
|
8
|
+
var Logger = require('../shared/logger/Logger.js');
|
|
8
9
|
|
|
9
10
|
class EnvApi {
|
|
10
11
|
/**
|
|
@@ -302,6 +303,25 @@ class EnvApi {
|
|
|
302
303
|
is(envName) {
|
|
303
304
|
return this.mode === envName;
|
|
304
305
|
}
|
|
306
|
+
/**
|
|
307
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
308
|
+
*
|
|
309
|
+
* **Security Enforcement:**
|
|
310
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
311
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
312
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
313
|
+
*
|
|
314
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
315
|
+
*/
|
|
316
|
+
configureShield(config) {
|
|
317
|
+
const callerRoot = ProjectDiscovery.getCallerProjectRoot();
|
|
318
|
+
const hostRoot = this.runner.getRoot();
|
|
319
|
+
if (callerRoot && callerRoot !== hostRoot && !ProjectDiscovery.isCoreFrameworkPath(callerRoot)) {
|
|
320
|
+
Logger.logger.warn("security", `Blocked unauthorized attempt by third-party plugin at '${callerRoot}' to configure Environment Security Shield.`);
|
|
321
|
+
return;
|
|
322
|
+
}
|
|
323
|
+
this[env.XY_ENV_CONFIGURE_SHIELD](config);
|
|
324
|
+
}
|
|
305
325
|
/**
|
|
306
326
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
307
327
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["getCallerProjectRoot","XY_ENV_INTERNAL_GET_FOR_ROOT","EnvAccessError","XY_ENV_CONFIGURE_SHIELD","XY_ENV_STORE_KEY","EnvStoreError","DotEnvLoader","EnvKeyError","FORBIDDEN_VALUE_PATTERN"],"mappings":"
|
|
1
|
+
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["getCallerProjectRoot","XY_ENV_INTERNAL_GET_FOR_ROOT","EnvAccessError","isCoreFrameworkPath","logger","XY_ENV_CONFIGURE_SHIELD","XY_ENV_STORE_KEY","EnvStoreError","DotEnvLoader","EnvKeyError","FORBIDDEN_VALUE_PATTERN"],"mappings":";;;;;;;;;MAoBa,MAAM,CAAA;AA6Cf;;;;AAIG;AACH,IAAA,WAAA,CACI,MAAqB,EACrB,IAAA,GAAe,aAAa,EAC5B,YAAqB,KAAK,EAAA;AAhD9B;;;;;;AAMG;QACc,IAAA,CAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;YAC7D,MAAM;YACN,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,WAAW;YACX,aAAa;YACb,cAAc;YACd,QAAQ;YACR,OAAO;YACP,OAAO;YACP,gBAAgB;YAChB,UAAU;YACV,OAAO;YACP,YAAY;YACZ,cAAc;YACd,UAAU;YACV,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;YACjB,0BAA0B;YAC1B,oBAAoB;YACpB,gCAAgC;AACnC,SAAA,CAAC;QAEM,IAAA,CAAA,iBAAiB,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAYnE,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;QAC1B,IAAI,CAAC,WAAW,EAAE;IACtB;;;;AAMA;;;;;;;;;;;;;;;;;AAiBG;IACI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAA;AACjC,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AACrB,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;AAE9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK;;QAGlB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK;YAC5B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;AAEA;;;;;;;;;;AAUG;AACI,IAAA,MAAM,CAAC,GAAW,EAAA;AACrB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;QAEjB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;IA2BO,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAA;AACzC,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,SAAS,GAAGA,qCAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;QACpF;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,GAAG,KAAK,GAAG,YAAY;IACrD;AAEA;;;;;;;;;;;;AAYG;AACI,IAAA,CAACC,gCAA4B,CAAC,CAAC,GAAW,EAAE,IAAY,EAAA;AAC3D,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;AACpB,YAAA,OAAO,IAAI;QACf;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;AAC1C,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;IACrB;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BG;IACI,SAAS,CAAC,GAAW,EAAE,OAA6B,EAAA;AACvD,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,GAAGD,qCAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACzF,IAAI,CAAC,OAAO,EAAE;AACV,gBAAA,MAAM,IAAIE,kBAAc,CAAC,GAAG,EAAE,SAAS,CAAC;YAC5C;AACA,YAAA,OAAO,OAAO;QAClB;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;AAExB,QAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACrB,YAAA,MAAM,IAAIA,kBAAc,CAAC,GAAG,EAAE,SAAS,CAAC;QAC5C;QACA,IAAI,OAAO,EAAE,WAAW,IAAI,KAAK,KAAK,EAAE,EAAE;AACtC,YAAA,MAAM,IAAIA,kBAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1C;AAEA,QAAA,OAAO,KAAK;IAChB;AAEA;;;;;;;;;;;;;AAaG;AACI,IAAA,GAAG,CAAC,GAAW,EAAA;AAClB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;IACnC;AAEA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACI,IAAA,GAAG,CAAC,OAAuB,EAAA;AAC9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AAEtC,QAAA,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1C,MAAM,MAAM,GAAuC,EAAE;AACrD,YAAA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B;AACA,YAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC;QAEA,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC;;;;AAMA;;;;;;;AAOG;IACI,YAAY,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;IACrC;AAEA;;;;;;;AAOG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,aAAa;IACtC;AAEA;;;;;;;AAOG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS;IAClC;AAEA;;;;;;;AAOG;IACI,MAAM,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM;IAC/B;AAEA;;;;;;;;;;AAUG;AACI,IAAA,EAAE,CAAC,OAAe,EAAA;AACrB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO;IAChC;AAEA;;;;;;;;;AASG;AACI,IAAA,eAAe,CAAC,MAGtB,EAAA;AACG,QAAA,MAAM,UAAU,GAAGF,qCAAoB,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACtC,QAAA,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,CAACG,oCAAmB,CAAC,UAAU,CAAC,EAAE;YAC3EC,aAAM,CAAC,IAAI,CACP,UAAU,EACV,CAAA,uDAAA,EAA0D,UAAU,CAAA,2CAAA,CAA6C,CACpH;YACD;QACJ;AACA,QAAA,IAAI,CAACC,2BAAuB,CAAC,CAAC,MAAM,CAAC;IACzC;AAEA;;;;;;;;;;;AAWG;IACI,CAACA,2BAAuB,CAAC,CAAC,MAGhC,EAAA;AACG,QAAA,IAAI,CAAC,MAAM;YAAE;AAEb,QAAA,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;AAChC,YAAA,IAAI,MAAM,CAAC,uBAAuB,EAAE;gBAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACtD;iBAAO;AACH,gBAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC;oBAC7B,GAAG,IAAI,CAAC,gBAAgB;oBACxB,GAAG,MAAM,CAAC,SAAS;AACtB,iBAAA,CAAC;YACN;QACJ;IACJ;;;;AAMA;;;;;;;;;;;;;AAaG;IACI,IAAI,GAAA;AACP,QAAA,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAE/C;AACD,YAAA,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE;QACjC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,EAAE;QACb;IACJ;;;;AAMA;;;;;;;;;;;;;;;AAeG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,QAAQ,GAAI,UAAkB,CAACC,oBAAgB,CAEtC;QAEf,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAIC,iBAAa,EAAE;QAC7B;AAEA,QAAA,OAAO,QAAQ;IACnB;AAEQ,IAAA,iBAAiB,CACrB,UAAmB,EAAA;AAEnB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;;;;;QAMvC,MAAM,IAAI,GACN,UAAU;AACV,aAAC,IAAI,CAAC,SAAS,GAAGP,qCAAoB,EAAE,GAAG,IAAI,CAAC;AAChD,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACrB,YAAAA,qCAAoB,EAAE;AAE1B,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,EAAE;QAEpB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE;;YAER,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1C,MAAM,OAAO,GAAuC,EAAE;AAEtD,YAAA,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,gBAAA,MAAM,MAAM,GAAGQ,yBAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;AACf,oBAAA,QAAQ,EAAE,IAAI;AACjB,iBAAA,CAAC;AACF,gBAAA,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;oBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAW;gBACxC;YACJ;;AAEA,YAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3B,KAAK,GAAG,OAAO;QACnB;AAEA,QAAA,OAAO,KAAK;IAChB;;;;AAMA;;;;;AAKG;AACK,IAAA,WAAW,CAAC,GAAW,EAAA;AAC3B,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;AAClB,YAAA,MAAM,IAAIC,eAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACvD;QACA,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;AACzB,YAAA,MAAM,IAAIA,eAAW,CACjB,GAAG,EACH,2CAA2C,CAC9C;QACL;IACJ;AAEA;;;;;;;;;;;;AAYG;IACK,aAAa,CAAC,GAAW,EAAE,KAAa,EAAA;AAC5C,QAAA,IAAIC,2BAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACrC,YAAA,MAAM,IAAID,eAAW,CACjB,GAAG,EACH,iEAAiE;AAC7D,gBAAA,8EAA8E,CACrF;QACL;IACJ;;;;AAMA;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;IACK,WAAW,GAAA;;;AAGf,QAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU;QACpC,MAAM,IAAI,GAAG,IAAI;QAEjB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;AACrC,YAAA,GAAG,CAAC,MAAM,EAAE,IAAqB,EAAE,QAAQ,EAAA;AACvC,gBAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;oBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;AAGA,gBAAA,IACI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;AAChC,oBAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACtB,oBAAA,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;AAC3B,oBAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;AACvB,oBAAA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;AAC1B,oBAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;oBACE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;gBAGA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AACvB,oBAAA,MAAM,QAAQ,GAAI,UAAkB,CAACH,oBAAgB,CAEtC;oBACf,IAAI,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAExD,IAAI,QAAQ,EAAE;wBACV,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE;AACjC,4BAAA,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE;gCACxC,QAAQ,GAAG,IAAI;gCACf;4BACJ;wBACJ;oBACJ;oBAEA,IAAI,CAAC,QAAQ,EAAE;AACX,wBAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,CAAA,0BAAA,CAA4B;AACxB,4BAAA,CAAA,8BAAA,EAAiC,IAAI,CAAA,eAAA,CAAiB;AACtD,4BAAA,CAAA,iCAAA,EAAoC,IAAI,CAAA,UAAA,CAAY;4BACpD,CAAA,sCAAA,EAAyC,IAAI,CAAA,oBAAA,CAAsB,CAC1E;oBACL;AACA,oBAAA,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBACxB;AAEA,gBAAA,OAAO,SAAS;YACpB,CAAC;;;;AAKD,YAAA,OAAO,CAAC,OAAO,EAAA;AACX,gBAAA,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACtC,CAAC;;YAGD,GAAG,CAAC,OAAO,EAAE,IAAqB,EAAA;gBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;AAAE,oBAAA,OAAO,KAAK;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,CAAC;AACJ,SAAA,CAAC;AAEF,QAAA,IAAI;AACA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;AAClC,gBAAA,KAAK,EAAE,SAAS;AAChB,gBAAA,QAAQ,EAAE,KAAK;AACf,gBAAA,YAAY,EAAE,IAAI;AAClB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA,CAAC;QACN;AAAE,QAAA,MAAM;;;;;QAKR;IACJ;IAEQ,mBAAmB,GAAA;AACvB,QAAA,MAAM,UAAU,GAAGN,qCAAoB,EAAE;AACzC,QAAA,MAAM,OAAO,GAAI,UAAkB,CAAC,OAAO,EAAE,QAAQ;AACrD,QAAA,OAAO,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO;IACjD;AACH;;;;"}
|
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
import { XY_ENV_INTERNAL_GET_FOR_ROOT, EnvAccessError, XY_ENV_CONFIGURE_SHIELD, EnvStoreError, EnvKeyError, FORBIDDEN_VALUE_PATTERN, XY_ENV_STORE_KEY } from './api/env/env.js';
|
|
2
|
-
import { getCallerProjectRoot } from '../utils/ProjectDiscovery.js';
|
|
2
|
+
import { getCallerProjectRoot, isCoreFrameworkPath } from '../utils/ProjectDiscovery.js';
|
|
3
3
|
import path__default from 'path';
|
|
4
4
|
import fs__default from 'fs';
|
|
5
5
|
import { DotEnvLoader } from '../utils/DotEnvLoader.js';
|
|
6
|
+
import { logger } from '../shared/logger/Logger.js';
|
|
6
7
|
|
|
7
8
|
class EnvApi {
|
|
8
9
|
/**
|
|
@@ -300,6 +301,25 @@ class EnvApi {
|
|
|
300
301
|
is(envName) {
|
|
301
302
|
return this.mode === envName;
|
|
302
303
|
}
|
|
304
|
+
/**
|
|
305
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
306
|
+
*
|
|
307
|
+
* **Security Enforcement:**
|
|
308
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
309
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
310
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
311
|
+
*
|
|
312
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
313
|
+
*/
|
|
314
|
+
configureShield(config) {
|
|
315
|
+
const callerRoot = getCallerProjectRoot();
|
|
316
|
+
const hostRoot = this.runner.getRoot();
|
|
317
|
+
if (callerRoot && callerRoot !== hostRoot && !isCoreFrameworkPath(callerRoot)) {
|
|
318
|
+
logger.warn("security", `Blocked unauthorized attempt by third-party plugin at '${callerRoot}' to configure Environment Security Shield.`);
|
|
319
|
+
return;
|
|
320
|
+
}
|
|
321
|
+
this[XY_ENV_CONFIGURE_SHIELD](config);
|
|
322
|
+
}
|
|
303
323
|
/**
|
|
304
324
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
305
325
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":"
|
|
1
|
+
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":";;;;;;;MAoBa,MAAM,CAAA;AA6Cf;;;;AAIG;AACH,IAAA,WAAA,CACI,MAAqB,EACrB,IAAA,GAAe,aAAa,EAC5B,YAAqB,KAAK,EAAA;AAhD9B;;;;;;AAMG;QACc,IAAA,CAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;YAC7D,MAAM;YACN,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,WAAW;YACX,aAAa;YACb,cAAc;YACd,QAAQ;YACR,OAAO;YACP,OAAO;YACP,gBAAgB;YAChB,UAAU;YACV,OAAO;YACP,YAAY;YACZ,cAAc;YACd,UAAU;YACV,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;YACjB,0BAA0B;YAC1B,oBAAoB;YACpB,gCAAgC;AACnC,SAAA,CAAC;QAEM,IAAA,CAAA,iBAAiB,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAYnE,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;QAC1B,IAAI,CAAC,WAAW,EAAE;IACtB;;;;AAMA;;;;;;;;;;;;;;;;;AAiBG;IACI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAA;AACjC,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AACrB,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;AAE9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK;;QAGlB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK;YAC5B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;AAEA;;;;;;;;;;AAUG;AACI,IAAA,MAAM,CAAC,GAAW,EAAA;AACrB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;QAEjB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;IA2BO,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAA;AACzC,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;QACpF;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,GAAG,KAAK,GAAG,YAAY;IACrD;AAEA;;;;;;;;;;;;AAYG;AACI,IAAA,CAAC,4BAA4B,CAAC,CAAC,GAAW,EAAE,IAAY,EAAA;AAC3D,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;AACpB,YAAA,OAAO,IAAI;QACf;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;AAC1C,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;IACrB;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BG;IACI,SAAS,CAAC,GAAW,EAAE,OAA6B,EAAA;AACvD,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACzF,IAAI,CAAC,OAAO,EAAE;AACV,gBAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC;YAC5C;AACA,YAAA,OAAO,OAAO;QAClB;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;AAExB,QAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACrB,YAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC;QAC5C;QACA,IAAI,OAAO,EAAE,WAAW,IAAI,KAAK,KAAK,EAAE,EAAE;AACtC,YAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1C;AAEA,QAAA,OAAO,KAAK;IAChB;AAEA;;;;;;;;;;;;;AAaG;AACI,IAAA,GAAG,CAAC,GAAW,EAAA;AAClB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;IACnC;AAEA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACI,IAAA,GAAG,CAAC,OAAuB,EAAA;AAC9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AAEtC,QAAA,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1C,MAAM,MAAM,GAAuC,EAAE;AACrD,YAAA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B;AACA,YAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC;QAEA,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC;;;;AAMA;;;;;;;AAOG;IACI,YAAY,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;IACrC;AAEA;;;;;;;AAOG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,aAAa;IACtC;AAEA;;;;;;;AAOG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS;IAClC;AAEA;;;;;;;AAOG;IACI,MAAM,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM;IAC/B;AAEA;;;;;;;;;;AAUG;AACI,IAAA,EAAE,CAAC,OAAe,EAAA;AACrB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO;IAChC;AAEA;;;;;;;;;AASG;AACI,IAAA,eAAe,CAAC,MAGtB,EAAA;AACG,QAAA,MAAM,UAAU,GAAG,oBAAoB,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACtC,QAAA,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAC3E,MAAM,CAAC,IAAI,CACP,UAAU,EACV,CAAA,uDAAA,EAA0D,UAAU,CAAA,2CAAA,CAA6C,CACpH;YACD;QACJ;AACA,QAAA,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC;IACzC;AAEA;;;;;;;;;;;AAWG;IACI,CAAC,uBAAuB,CAAC,CAAC,MAGhC,EAAA;AACG,QAAA,IAAI,CAAC,MAAM;YAAE;AAEb,QAAA,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;AAChC,YAAA,IAAI,MAAM,CAAC,uBAAuB,EAAE;gBAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACtD;iBAAO;AACH,gBAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC;oBAC7B,GAAG,IAAI,CAAC,gBAAgB;oBACxB,GAAG,MAAM,CAAC,SAAS;AACtB,iBAAA,CAAC;YACN;QACJ;IACJ;;;;AAMA;;;;;;;;;;;;;AAaG;IACI,IAAI,GAAA;AACP,QAAA,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAE/C;AACD,YAAA,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE;QACjC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,EAAE;QACb;IACJ;;;;AAMA;;;;;;;;;;;;;;;AAeG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,QAAQ,GAAI,UAAkB,CAAC,gBAAgB,CAEtC;QAEf,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,aAAa,EAAE;QAC7B;AAEA,QAAA,OAAO,QAAQ;IACnB;AAEQ,IAAA,iBAAiB,CACrB,UAAmB,EAAA;AAEnB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;;;;;QAMvC,MAAM,IAAI,GACN,UAAU;AACV,aAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,CAAC;AAChD,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACrB,YAAA,oBAAoB,EAAE;AAE1B,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,EAAE;QAEpB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE;;YAER,MAAM,OAAO,GAAGA,aAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1C,MAAM,OAAO,GAAuC,EAAE;AAEtD,YAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,gBAAA,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;AACf,oBAAA,QAAQ,EAAE,IAAI;AACjB,iBAAA,CAAC;AACF,gBAAA,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;oBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAW;gBACxC;YACJ;;AAEA,YAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3B,KAAK,GAAG,OAAO;QACnB;AAEA,QAAA,OAAO,KAAK;IAChB;;;;AAMA;;;;;AAKG;AACK,IAAA,WAAW,CAAC,GAAW,EAAA;AAC3B,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;AAClB,YAAA,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACvD;QACA,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;AACzB,YAAA,MAAM,IAAI,WAAW,CACjB,GAAG,EACH,2CAA2C,CAC9C;QACL;IACJ;AAEA;;;;;;;;;;;;AAYG;IACK,aAAa,CAAC,GAAW,EAAE,KAAa,EAAA;AAC5C,QAAA,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACrC,YAAA,MAAM,IAAI,WAAW,CACjB,GAAG,EACH,iEAAiE;AAC7D,gBAAA,8EAA8E,CACrF;QACL;IACJ;;;;AAMA;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;IACK,WAAW,GAAA;;;AAGf,QAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU;QACpC,MAAM,IAAI,GAAG,IAAI;QAEjB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;AACrC,YAAA,GAAG,CAAC,MAAM,EAAE,IAAqB,EAAE,QAAQ,EAAA;AACvC,gBAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;oBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;AAGA,gBAAA,IACI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;AAChC,oBAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACtB,oBAAA,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;AAC3B,oBAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;AACvB,oBAAA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;AAC1B,oBAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;oBACE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;gBAGA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AACvB,oBAAA,MAAM,QAAQ,GAAI,UAAkB,CAAC,gBAAgB,CAEtC;oBACf,IAAI,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAExD,IAAI,QAAQ,EAAE;wBACV,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE;AACjC,4BAAA,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE;gCACxC,QAAQ,GAAG,IAAI;gCACf;4BACJ;wBACJ;oBACJ;oBAEA,IAAI,CAAC,QAAQ,EAAE;AACX,wBAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,CAAA,0BAAA,CAA4B;AACxB,4BAAA,CAAA,8BAAA,EAAiC,IAAI,CAAA,eAAA,CAAiB;AACtD,4BAAA,CAAA,iCAAA,EAAoC,IAAI,CAAA,UAAA,CAAY;4BACpD,CAAA,sCAAA,EAAyC,IAAI,CAAA,oBAAA,CAAsB,CAC1E;oBACL;AACA,oBAAA,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBACxB;AAEA,gBAAA,OAAO,SAAS;YACpB,CAAC;;;;AAKD,YAAA,OAAO,CAAC,OAAO,EAAA;AACX,gBAAA,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACtC,CAAC;;YAGD,GAAG,CAAC,OAAO,EAAE,IAAqB,EAAA;gBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;AAAE,oBAAA,OAAO,KAAK;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,CAAC;AACJ,SAAA,CAAC;AAEF,QAAA,IAAI;AACA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;AAClC,gBAAA,KAAK,EAAE,SAAS;AAChB,gBAAA,QAAQ,EAAE,KAAK;AACf,gBAAA,YAAY,EAAE,IAAI;AAClB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA,CAAC;QACN;AAAE,QAAA,MAAM;;;;;QAKR;IACJ;IAEQ,mBAAmB,GAAA;AACvB,QAAA,MAAM,UAAU,GAAG,oBAAoB,EAAE;AACzC,QAAA,MAAM,OAAO,GAAI,UAAkB,CAAC,OAAO,EAAE,QAAQ;AACrD,QAAA,OAAO,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO;IACjD;AACH;;;;"}
|
package/dist/index.d.ts
CHANGED
|
@@ -5177,6 +5177,19 @@ interface IEnvApi {
|
|
|
5177
5177
|
* auditLog.write({ actor, action: "deploy" });
|
|
5178
5178
|
*/
|
|
5179
5179
|
user(): string;
|
|
5180
|
+
/**
|
|
5181
|
+
* Configures the Environment Security Shield (process.env whitelist).
|
|
5182
|
+
*
|
|
5183
|
+
* **Security Note:**
|
|
5184
|
+
* Only the host project and core engine are permitted to configure the shield.
|
|
5185
|
+
* Third-party plugins in node_modules are blocked from tampering with the whitelist.
|
|
5186
|
+
*
|
|
5187
|
+
* @deprecated Configure `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
5188
|
+
*/
|
|
5189
|
+
configureShield?(config?: {
|
|
5190
|
+
whitelist?: string[];
|
|
5191
|
+
replaceDefaultWhitelist?: boolean;
|
|
5192
|
+
}): void;
|
|
5180
5193
|
}
|
|
5181
5194
|
|
|
5182
5195
|
declare class EnvApi implements IEnvApi {
|
|
@@ -5380,6 +5393,20 @@ declare class EnvApi implements IEnvApi {
|
|
|
5380
5393
|
* }
|
|
5381
5394
|
*/
|
|
5382
5395
|
is(envName: string): boolean;
|
|
5396
|
+
/**
|
|
5397
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
5398
|
+
*
|
|
5399
|
+
* **Security Enforcement:**
|
|
5400
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
5401
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
5402
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
5403
|
+
*
|
|
5404
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
5405
|
+
*/
|
|
5406
|
+
configureShield(config?: {
|
|
5407
|
+
whitelist?: string[];
|
|
5408
|
+
replaceDefaultWhitelist?: boolean;
|
|
5409
|
+
}): void;
|
|
5383
5410
|
/**
|
|
5384
5411
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
5385
5412
|
*
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "xypriss",
|
|
3
|
-
"version": "9.12.
|
|
3
|
+
"version": "9.12.69",
|
|
4
4
|
"description": "XyPriss is a high-performance, TypeScript-first hyper-system web framework powered by a native Go core (XHSC), featuring robust multi-tenant sandboxing, secure native file streaming, and zero Express dependencies.",
|
|
5
5
|
"author": {
|
|
6
6
|
"DEV.to": "https://dev.to/nehonix",
|