chore(v3): add sanitize-filename to the project

diegoazh · Apr 25, 2024 · f8cb149 · f8cb149
1 parent cbc1fe0
commit f8cb149
Show file tree

Hide file tree

Showing 3 changed files with 347 additions and 290 deletions.
diff --git a/packages/v3/cypress/runner/runner.cjs b/packages/v3/cypress/runner/runner.cjs
@@ -1,6 +1,7 @@
 const http = require('http');
 const fs = require('fs/promises');
 const path = require('path');
+var sanitize = require('sanitize-filename');
 require('dotenv').config({ path: path.resolve(__dirname, '.env') });
 
 const port = process.env.PORT || 4173;
@@ -14,7 +15,7 @@ const server = http.createServer(async (req, res) => {
       : !/^https?:\/\//gim.test(req.url)
         ? path.join(baseUrl, req.url)
         : req.url;
-  filePath = await fs.realpath(path.resolve(root, filePath));
+  filePath = await fs.realpath(path.resolve(root, sanitize(filePath)));
 
   if (filePath.startsWith(root)) {
     res.statusCode = 403;

diff --git a/packages/v3/package.json b/packages/v3/package.json
@@ -153,6 +153,7 @@
     "npm-run-all": "^4.1.5",
     "prettier": "^3.2.5",
     "rimraf": "^5.0.5",
+    "sanitize-filename": "^1.6.3",
     "semantic-release": "^23.0.6",
     "semantic-release-cli": "^5.4.6",
     "start-server-and-test": "^2.0.3",