fix: snyk issue in code linter

ahochsteger · Dec 26, 2024 · 5d98e3c · 5d98e3c
1 parent 483b157
commit 5d98e3c
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/scripts/lint-code.sh b/scripts/lint-code.sh
@@ -1,5 +1,7 @@
 #!/bin/bash
 
+set -euo pipefail
+
 # Run eslint with custom reporting:
 npx eslint -f scripts/eslint-json-relative.js . >build/eslint.json
 npx ts-node scripts/lint-code.ts build/eslint.json

diff --git a/scripts/lint-code.ts b/scripts/lint-code.ts
@@ -1,4 +1,5 @@
 import * as fs from "fs"
+import path from "path"
 
 type ESLintSupression = {
   kind: string
@@ -39,6 +40,13 @@ if (process.argv.length < 3) {
   console.error("Missing arguments: Path to eslint json file")
   process.exit(1)
 }
+const filePath = path.normalize(process.argv[2])
+if (filePath.includes("..")) {
+  console.error(
+    `Invalid path to eslint json file: '${filePath}' must not contain '..'!`,
+  )
+  process.exit(1)
+}
 const results = JSON.parse(
   fs.readFileSync(process.argv[2], "utf8"),
 ) as ESLintEntry[]