Commit b9f1c1c

committed

fix(utils): resolve command injection vulnerability in emptyFolder

1 parent 53a5a97 commit b9f1c1cCopy full SHA for b9f1c1c

File tree

-1

lines changed

-1

lines changed

Lines changed: 4 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -457,7 +457,10 @@ module.exports.isNotSet = function (obj) {`
`457`	`457`	`};`
`458`	`458`
`459`	`459`	`module.exports.emptyFolder = (directoryPath) => {`
`460`		- require('child_process').execSync(`rm -rf ${directoryPath}/*`);
	`460`	`+ if (!fs.existsSync(directoryPath)) return;`
	`461`	`+ for (const file of fs.readdirSync(directoryPath)) {`
	`462`	`+ fs.rmSync(path.join(directoryPath, file), { recursive: true, force: true });`
	`463`	`+ }`
`461`	`464`	`};`
`462`	`465`
`463`	`466`	`module.exports.printObjectProperties = (obj) => {`

Comments

(0)