Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

codecov

Package Overview
Dependencies
Maintainers
3
Versions
33
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

codecov - npm Package Compare versions

Comparing version 3.6.4 to 3.6.5

16

lib/codecov.js

@@ -8,3 +8,2 @@ var fs = require('fs')

var execSync = require('child_process').execSync
var validator = require('validator')

@@ -398,9 +397,9 @@ var detectProvider = require('./detect')

'find ' +
(args.options['gcov-root'] || root) +
(sanitizeVar(args.options['gcov-root']) || root) +
" -type f -name '*.gcno' " +
gcg +
' -exec ' +
(validator.escape(args.options['gcov-exec']) || 'gcov') +
(sanitizeVar(args.options['gcov-exec']) || 'gcov') +
' ' +
(validator.escape(args.options['gcov-args']) || '') +
(sanitizeVar(args.options['gcov-args']) || '') +
' {} +'

@@ -414,5 +413,5 @@ } else {

"') do " +
(args.options['gcov-exec'] || 'gcov') +
(sanitizeVar(args.options['gcov-exec']) || 'gcov') +
' ' +
(args.options['gcov-args'] || '') +
(sanitizeVar(args.options['gcov-args']) || '') +
' %g'

@@ -562,3 +561,8 @@ }

function sanitizeVar(arg) {
return arg.replace(/&/g, '')
}
module.exports = {
sanitizeVar: sanitizeVar,
upload: upload,

@@ -565,0 +569,0 @@ version: version,

{
"name": "codecov",
"version": "3.6.4",
"version": "3.6.5",
"description": "Uploading report to Codecov: https://codecov.io",

@@ -38,4 +38,3 @@ "main": "index.js",

"teeny-request": "6.0.1",
"urlgrey": "0.4.4",
"validator": "12.2.0"
"urlgrey": "0.4.4"
},

@@ -42,0 +41,0 @@ "devDependencies": {

@@ -279,2 +279,8 @@ var fs = require('fs')

})
it('can sanitize inputs', function() {
expect(codecov.sanitizeVar('real & run unsafe & command')).toEqual(
'real run unsafe command'
)
})
})
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc