andwati/dokploy
1
0
Fork 0
mirror of https://github.com/andwati/dokploy.git synced 2026-11-03 10:42:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: use proper linting

Browse Source
This commit is contained in:
ews-pgasser
2026-08-07 12:00:55 +00:00
parent fe0a84dde8
commit f3c7edcfd6
1 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/server/src/utils/builders/compose.ts
+15 -6
View File
@@ -82,20 +82,29 @@ const sanitizeCommand = (command: string) => {
); );
} }
if (sanitizedCommand.includes("&")) { if (sanitizedCommand.includes("&")) {
// Block single '&' (e.g., backgrounding tasks) or malformed chains like '&&&' // Block single '&' (e.g., backgrounding tasks) or malformed chains like '&&&'
if (/(?<!&)&(?!&)/.test(sanitizedCommand) || sanitizedCommand.includes("&&&")) { if (
/(?<!&)&(?!&)/.test(sanitizedCommand) ||
sanitizedCommand.includes("&&&")
) {
throw new Error("Single '&' is not allowed. Use '&&' for chaining."); throw new Error("Single '&' is not allowed. Use '&&' for chaining.");
} }
// Split by '&&' and check that every chained command (skipping the first one) is safe // Split by '&&' and check that every chained command (skipping the first one) is safe
const chains = sanitizedCommand.split("&&").map((cmd) => cmd.trim()); const chains = sanitizedCommand.split("&&").map((cmd) => cmd.trim());
const isSafeChain = chains.slice(1).every((cmd) => const isSafeChain = chains
cmd.startsWith("docker compose ") || cmd.startsWith("docker-compose ") .slice(1)
); .every(
(cmd) =>
cmd.startsWith("docker compose ") ||
cmd.startsWith("docker-compose "),
);
if (!isSafeChain) { if (!isSafeChain) {
throw new Error("Chained commands must strictly start with 'docker compose '"); throw new Error(
"Chained commands must strictly start with 'docker compose '",
);
} }
} }