aleleba/effectcraft
1
0
Fork 0
mirror of https://github.com/storytold/effectcraft.git synced 2026-10-24 10:09:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2214 from dylanmtaylor/sonar/security-reliability

Browse Source 
fix: validate the CLI path in the AE ease checker (SonarCloud jssecurity:S8705)
This commit is contained in:
Dylan M. Taylor
2026-10-23 09:37:45 -04:00
committed by GitHub
parent 23f11ab7cf d1d9849e2d
commit 9066b64150
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/check-ae-ease.mjs
+6 -2
View File
@@ -5,10 +5,14 @@ import { fileURLToPath } from 'node:url';
import { spawnSync } from 'node:child_process';
const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
const cli = process.argv[2];
if (!cli || !fs.existsSync(cli)) throw new Error('Usage: node examples/check-ae-ease.mjs <aesync/server/dist/cli.js>');
const cli = path.resolve(process.argv[2] ?? '');
if (!process.argv[2] || !fs.statSync(cli, { throwIfNoEntry: false })?.isFile()) {
throw new Error('Usage: node examples/check-ae-ease.mjs <aesync/server/dist/cli.js>');
}
const tolerance = 1e-7;
function run(command, args) {
// NOSONAR: a developer-run comparison script; spawnSync never uses a shell and every command
// is either a fixed binary (`cargo`, `process.execPath`) or the CLI script path validated above.
const result = spawnSync(command, args, { cwd: root, windowsHide: true, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 });
if (result.status !== 0) throw new Error(result.stderr || result.stdout || 'Process failed');
return JSON.parse(result.stdout.replace(/^\uFEFF/, '').trim());