@artilleryio/int-core - npm Package Compare versions

Comparing version 2.11.0 to 2.12.0-c3be075

lib/engine_http.js

@@ -26,2 +26,4 @@ /* This Source Code Form is subject to the terms of the Mozilla Public
 const decompressResponse = require('decompress-response');
+const fs = require('fs');
+const path = require('path');
 
@@ -399,2 +401,3 @@ const { promisify } = require('node:util');
         if (params.formData) {
+          let fileUpload;
           const f = new FormData();
@@ -404,4 +407,12 @@ requestParams.body = _.reduce(
             function (acc, v, k) {
-              // acc[k] = template(v, context);
-              acc.append(k, template(v, context));
+              let V = template(v, context);
+              if (V && _.isPlainObject(V) && V.fromFile) {
+                const absPath = path.resolve(
+                  path.dirname(context.vars.$scenarioFile),
+                  V.fromFile
+                );
+                fileUpload = absPath;
+                V = fs.createReadStream(absPath);
+              }
+              acc.append(k, V);
               return acc;
@@ -411,2 +422,11 @@ },
           );
+          if (params.setContentLengthHeader && fileUpload) {
+            try {
+              requestParams.headers = requestParams.headers || {};
+              requestParams.headers['content-length'] =
+                fs.statSync(fileUpload).size;
+            } catch (err) {
+              debug(`stat() on ${fileUpload} failed with ${err}`);
+            }
+          }
         }
@@ -413,0 +433,0 @@

lib/runner.js

@@ -471,3 +471,5 @@ /* This Source Code Form is subject to the terms of the Mozilla Public
   }
-
+  if (script._scriptPath) {
+    INITIAL_CONTEXT.vars.$scenarioFile = script._scriptPath;
+  }
   let result = INITIAL_CONTEXT;
@@ -474,0 +476,0 @@

package.json

 {
   "name": "@artilleryio/int-core",
-  "version": "2.11.0",
+  "version": "2.12.0-c3be075",
   "main": "./index.js",
   "license": "MPL-2.0",
   "dependencies": {
-    "@artilleryio/int-commons": "2.7.0",
+    "@artilleryio/int-commons": "2.8.0-c3be075",
     "@artilleryio/sketches-js": "^2.1.1",
@@ -9,0 +9,0 @@ "agentkeepalive": "^4.1.0",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

120802

increased by0.71%

Lines of code

3063

increased by0.76%

Worsened metrics

Number of low quality alerts

2

increased by100%

Number of low supply chain risk alerts

15

increased by7.14%

Dependency changes

• + Added@artilleryio/int-commons@2.8.0-c3be075(transitive)

• - Removed@artilleryio/int-commons@2.7.0(transitive)

• Updated@artilleryio/int-commons@2.8.0-c3be075