@web/dev-server-rollup - npm Package Compare versions

Comparing version 0.3.16 to 0.3.17

dist/rollupAdapter.js

@@ -153,3 +153,6 @@ "use strict";
                 const normalizedPath = path_1.default.normalize(resolvedImportPath);
-                if (!normalizedPath.startsWith(rootDir)) {
+                // append a path separator to rootDir so we are actually testing containment
+                // of the normalized path within the rootDir folder
+                const checkRootDir = rootDir.endsWith(path_1.default.sep) ? rootDir : rootDir + path_1.default.sep;
+                if (!normalizedPath.startsWith(checkRootDir)) {
                     const relativePath = path_1.default.relative(rootDir, normalizedPath);
@@ -156,0 +159,0 @@ const dirUp = `..${path_1.default.sep}`;

package.json

 {
   "name": "@web/dev-server-rollup",
-  "version": "0.3.16",
+  "version": "0.3.17",
   "publishConfig": {
@@ -5,0 +5,0 @@ "access": "public"

src/rollupAdapter.ts

@@ -217,3 +217,8 @@ /* eslint-disable no-control-regex */
         const normalizedPath = path.normalize(resolvedImportPath);
-        if (!normalizedPath.startsWith(rootDir)) {
+
+        // append a path separator to rootDir so we are actually testing containment
+        // of the normalized path within the rootDir folder
+        const checkRootDir = rootDir.endsWith(path.sep) ? rootDir : rootDir + path.sep;
+
+        if (!normalizedPath.startsWith(checkRootDir)) {
           const relativePath = path.relative(rootDir, normalizedPath);
@@ -220,0 +225,0 @@ const dirUp = `..${path.sep}`;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

78191

increased by0.87%

Lines of code

1257

increased by0.48%

No dependency changes