ruiling/tachybase_todo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(cli): unsafe shell command constructed from library input

Browse Source
This commit is contained in:
chenos 2023-11-27 09:07:16 +08:00
parent c7ef9618a9
commit 5ebd5d5c62
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
packages/core/cli/src/util.js
View File

@ -2,7 +2,7 @@ const net = require('net');
const chalk = require('chalk');
const execa = require('execa');
const fg = require('fast-glob');
const { dirname, join, resolve } = require('path');
const { dirname, join, resolve, sep } = require('path');
const { readFile, writeFile } = require('fs').promises;
const { existsSync, mkdirSync, cpSync, writeFileSync } = require('fs');
@ -54,8 +54,8 @@ exports.nodeCheck = () => {
}
};
exports.run = (command, argv, options = {}) => {
return execa(command, argv, {
exports.run = (command, args, options = {}) => {
return execa(command, args, {
shell: true,
stdio: 'inherit',
...options,
@ -189,7 +189,10 @@ exports.genTsConfigPaths = function genTsConfigPaths() {
packages.forEach((packageFile) => {
const packageJsonName = require(packageFile).name;
const packageDir = dirname(packageFile);
const relativePath = packageDir.slice(cwdLength + 1).replace(/\\/, '/');
const relativePath = packageDir
.slice(cwdLength + 1)
.split(sep)
.join('/');
paths[packageJsonName] = [`${relativePath}/src`];
paths[`${packageJsonName}/client`] = [`${relativePath}/src/client`];
});