Peter Steinberger
64 lines
1.8 KiB
TypeScript
64 lines
1.8 KiB
TypeScript
import fs from "node:fs/promises";
|
|
import path from "node:path";
|
|
import { describe, expect, it } from "vitest";
|
|
|
|
const DYNAMIC_TMPDIR_JOIN_RE = /path\.join\(os\.tmpdir\(\),\s*`[^`]*\$\{[^`]*`/;
|
|
const RUNTIME_ROOTS = ["src", "extensions"];
|
|
const SKIP_PATTERNS = [
|
|
/\.test\.tsx?$/,
|
|
/\.e2e\.tsx?$/,
|
|
/\.d\.ts$/,
|
|
/[\\/](?:__tests__|tests)[\\/]/,
|
|
/[\\/]test-helpers(?:\.[^\\/]+)?\.ts$/,
|
|
];
|
|
|
|
function shouldSkip(relativePath: string): boolean {
|
|
return SKIP_PATTERNS.some((pattern) => pattern.test(relativePath));
|
|
}
|
|
|
|
async function listTsFiles(dir: string): Promise<string[]> {
|
|
const entries = await fs.readdir(dir, { withFileTypes: true });
|
|
const out: string[] = [];
|
|
for (const entry of entries) {
|
|
if (entry.name === "node_modules" || entry.name === "dist" || entry.name.startsWith(".")) {
|
|
continue;
|
|
}
|
|
const fullPath = path.join(dir, entry.name);
|
|
if (entry.isDirectory()) {
|
|
out.push(...(await listTsFiles(fullPath)));
|
|
continue;
|
|
}
|
|
if (!entry.isFile()) {
|
|
continue;
|
|
}
|
|
if (fullPath.endsWith(".ts") || fullPath.endsWith(".tsx")) {
|
|
out.push(fullPath);
|
|
}
|
|
}
|
|
return out;
|
|
}
|
|
|
|
describe("temp path guard", () => {
|
|
it("blocks dynamic template path.join(os.tmpdir(), ...) in runtime source files", async () => {
|
|
const repoRoot = process.cwd();
|
|
const offenders: string[] = [];
|
|
|
|
for (const root of RUNTIME_ROOTS) {
|
|
const absRoot = path.join(repoRoot, root);
|
|
const files = await listTsFiles(absRoot);
|
|
for (const file of files) {
|
|
const relativePath = path.relative(repoRoot, file);
|
|
if (shouldSkip(relativePath)) {
|
|
continue;
|
|
}
|
|
const source = await fs.readFile(file, "utf-8");
|
|
if (DYNAMIC_TMPDIR_JOIN_RE.test(source)) {
|
|
offenders.push(relativePath);
|
|
}
|
|
}
|
|
}
|
|
|
|
expect(offenders).toEqual([]);
|
|
});
|
|
});
|