@baiducloud/sdk - npm Package Compare versions

Comparing version 1.0.0-rc.30 to 1.0.0-rc.31

CHANGELOG.md

 # CHANGELOG
 
+## 1.0.0-rc.31(2021-08-13)
+### Fix
+- BOSClient: add key valiation in getObject() & getObjectToFile() method;
+  - empty key is not allowed
+  - consecutive forward slashes (/) are not allowed in key
+  - forward slash (/) and a backslash (\\) are not allowed at head or tail
+  - consecutive periods (..) are not allowed in sub-path
+
 ## 1.0.0-rc.30(2021-08-03)
@@ -4,0 +12,0 @@ ### Fix

package.json

 {
   "name": "@baiducloud/sdk",
-  "version": "1.0.0-rc.30",
+  "version": "1.0.0-rc.31",
   "description": "Baidu Cloud Engine JavaScript SDK",
@@ -5,0 +5,0 @@ "main": "./index.js",

README.md

@@ -20,3 +20,3 @@ Baidu Cloud Engine JavaScript SDK
 ```html
-    <script src="https://code.bdstatic.com/npm/@baiducloud/sdk@1.0.0-rc.30/dist/baidubce-sdk.bundle.min.js" ></script>
+    <script src="https://code.bdstatic.com/npm/@baiducloud/sdk@1.0.0-rc.31/dist/baidubce-sdk.bundle.min.js" ></script>
 ```

src/bos_client.js

@@ -508,2 +508,15 @@ /**
 BosClient.prototype.getObject = function (bucketName, key, range, options) {
+    if (!key) {
+        throw new TypeError('key should not be empty.');
+    }
+    else if (/\/\/+/.test(key)) {
+        throw new TypeError('key should not contain consecutive forward slashes (/).');
+    }
+    else if (/^[/\\]/.test(key) || /[/\\]$/.test(key)) {
+        throw new TypeError('key should not start or end with a forward slash (/) or a backslash (\\).');
+    }
+    else if (/\/\.\.\//.test(key)) {
+        throw new TypeError('path in key should not contain consecutive periods (..).');
+    }
+
     options = options || {};
@@ -527,2 +540,15 @@
 BosClient.prototype.getObjectToFile = function (bucketName, key, filename, range, options) {
+    if (!key) {
+        throw new TypeError('key should not be empty.');
+    }
+    else if (/\/\/+/.test(key)) {
+        throw new TypeError('key should not contain consecutive forward slashes (/).');
+    }
+    else if (/^[/\\]/.test(key) || /[/\\]$/.test(key)) {
+        throw new TypeError('key should not start or end with a forward slash (/) or a backslash (\\).');
+    }
+    else if (/\/\.\.\//.test(key)) {
+        throw new TypeError('path in key should not contain consecutive periods (..).');
+    }
+
     options = options || {};
@@ -529,0 +555,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2921675

increased by0.11%

Lines of code

58813

increased by0.08%

No dependency changes