devstack-cli 11.0.84__tar.gz → 11.0.85__tar.gz

{devstack_cli-11.0.84/src/devstack_cli.egg-info → devstack_cli-11.0.85}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: devstack-cli
-Version: 11.0.84
+Version: 11.0.85
 Summary: Command-line access to Cloud Development Environments (CDEs) created by Cloudomation DevStack
 Author-email: Stefan Mückstein <stefan@cloudomation.com>
 Project-URL: Homepage, https://cloudomation.com/

{devstack_cli-11.0.84 → devstack_cli-11.0.85}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "devstack-cli"
-version = "11.0.84"
+version = "11.0.85"
 authors = [
     { name="Stefan Mückstein", email="stefan@cloudomation.com" },
 ]

{devstack_cli-11.0.84 → devstack_cli-11.0.85}/src/cli.py

@@ -10,6 +10,7 @@ import json
 import logging
 import os
 import pathlib
+import re
 import readline
 import shlex
 import shutil
@@ -1222,6 +1223,12 @@ class Cli:
         self.port_forwarding_task = None
 
     async def _bg_port_forwarding(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
         service_ports = self.cde_type['value'].get('service-ports')
         if service_ports is None:
             service_ports = [
@@ -1238,6 +1245,11 @@ class Cli:
             for port
             in service_ports
         ]
+        for port in service_ports:
+            if port[0] < 1 or port[0] > 65535:
+                raise Exception(f'Invalid port: "{port[0]}". Only numbers between 1 and 65535 are allowed.')
+            if port[1] < 1 or port[1] > 65535:
+                raise Exception(f'Invalid port: "{port[1]}". Only numbers between 1 and 65535 are allowed.')
         while True:
             logger.info('Starting port forwarding of %s', ', '.join(str(port[0]) for port in service_ports))
             try:
@@ -1247,7 +1259,7 @@ class Cli:
                         '-o', 'ConnectTimeout=10',
                         '-o', f'UserKnownHostsFile={self.known_hosts_file.name}',
                         '-NT',
-                        f"{self.cde_type['value']['remote-username']}@{self.hostname}",
+                        f'{remote_username}@{hostname}',
                         *itertools.chain.from_iterable([
                             ('-L', f'{port[0]}:localhost:{port[1]}')
                             for port
@@ -1427,13 +1439,22 @@ class Cli:
         return await self._process_remote_item_copy_file(file_info.filename)
 
     async def _process_remote_item_copy_dir(self: 'Cli', filename: str) -> str:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await run_subprocess(
             'rsync',
             [
                 '-e', f'ssh -o ConnectTimeout=10 -o UserKnownHostsFile={self.known_hosts_file.name}',
                 '--archive',
                 '--checksum',
-                f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}/{filename}/",
+                f'{remote_username}@{hostname}:{remote_source_directory}/{filename}/',
                 str(self.local_source_directory / filename),
             ],
             name='Copy remote directory',
@@ -1441,23 +1462,35 @@ class Cli:
         return f'Copied directory "{filename}"'
 
     async def _process_remote_item_copy_file(self: 'Cli', filename: str) -> str:
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await self.loop.run_in_executor(
             executor=None,
             func=functools.partial(
                 self.sftp_client.get,
-                remotepath=f"{self.cde_type['value']['remote-source-directory']}/{filename}",
+                remotepath=f'{remote_source_directory}/{filename}',
                 localpath=str(self.local_source_directory / filename),
             ),
         )
         return f'Copied file "{filename}"'
 
     async def _process_remote_item_clone(self: 'Cli', filename: str) -> str:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await run_subprocess(
             'git',
             [
                 'clone',
                 '-q',
-                f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}/{filename}",
+                f'{remote_username}@{hostname}:{remote_source_directory}/{filename}',
             ],
             name='Git clone',
             cwd=self.local_source_directory,
@@ -1472,7 +1505,7 @@ class Cli:
                 shlex.join([
                     'git',
                     '-C',
-                    f"{self.cde_type['value']['remote-source-directory']}/{filename}",
+                    f'{remote_source_directory}/{filename}',
                     'config',
                     '--get',
                     'remote.origin.url',
@@ -1497,10 +1530,19 @@ class Cli:
         return f'Cloned repository "{filename}"'
 
     async def _background_sync(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         logger.debug('Starting background sync')
         self.local_source_directory.mkdir(parents=True, exist_ok=True)
         with contextlib.suppress(OSError):
-            self.sftp_client.mkdir(self.cde_type['value']['remote-source-directory'])
+            self.sftp_client.mkdir(remote_source_directory)
         file_sync_exclusions = self.cde_type['value'].get('file-sync-exclusions')
         if file_sync_exclusions is None:
             file_sync_exclusions = [
@@ -1548,7 +1590,7 @@ class Cli:
                     '--human-readable',
                     '--verbose',
                     f'{self.local_source_directory}/',
-                    f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}",
+                    f'{remote_username}@{hostname}:{remote_source_directory}',
                 ],
                 name='Background sync',
                 print_to_debug_log=True,
@@ -1564,19 +1606,31 @@ class Cli:
             logger.info('Background sync done')
 
     async def _reverse_background_sync(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         logger.debug('Starting reverse background sync')
+        remote_output_directory = self.cde_type['value']['remote-output-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_output_directory):
+            raise Exception(f'Invalid remote output directory: "{remote_output_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         with contextlib.suppress(OSError):
-            self.sftp_client.mkdir(self.cde_type['value']['remote-output-directory'])
+            self.sftp_client.mkdir(remote_output_directory)
         self.local_output_directory.mkdir(parents=True, exist_ok=True)
         try:
-            stdout, stderr = await run_subprocess(
+            await run_subprocess(
                 'rsync',
                 [
                     '-e', f'ssh -o ConnectTimeout=10 -o UserKnownHostsFile={self.known_hosts_file.name}',
                     '--archive',
                     '--exclude', '__pycache__',
                     '--human-readable',
-                    f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-output-directory']}/",
+                    f'{remote_username}@{hostname}:{remote_output_directory}/',
                     str(self.local_output_directory),
                 ],
                 name='Reverse background sync',

{devstack_cli-11.0.84 → devstack_cli-11.0.85/src/devstack_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: devstack-cli
-Version: 11.0.84
+Version: 11.0.85
 Summary: Command-line access to Cloud Development Environments (CDEs) created by Cloudomation DevStack
 Author-email: Stefan Mückstein <stefan@cloudomation.com>
 Project-URL: Homepage, https://cloudomation.com/

devstack_cli-11.0.85/src/version.py

@@ -0,0 +1,9 @@
+"""
+constants, set by build
+"""
+
+MAJOR = '11'
+BRANCH_NAME = 'release-11'
+BUILD_DATE = '2025-02-10-115139'
+SHORT_SHA = 'f9e1188'
+VERSION = '11+release-11.2025-02-10-115139.f9e1188'

devstack_cli-11.0.84/src/version.py

@@ -1,9 +0,0 @@
-"""
-constants, set by build
-"""
-
-MAJOR = '11'
-BRANCH_NAME = 'release-11'
-BUILD_DATE = '2025-02-10-112610'
-SHORT_SHA = '5cc11b4'
-VERSION = '11+release-11.2025-02-10-112610.5cc11b4'