electron-updater - npm Package Compare versions

Comparing version 6.3.0-alpha.5 to 6.3.0-alpha.6

out/windowsExecutableCodeSignatureVerifier.js

@@ -7,2 +7,3 @@ "use strict";
 const os = require("os");
+const path = require("path");
 // $certificateInfo = (Get-AuthenticodeSignature 'xxx\yyy.exe'
@@ -40,2 +41,3 @@ // | where {$_.Status.Equals([System.Management.Automation.SignatureStatus]::Valid) -and $_.SignerCertificate.Subject.Contains("CN=siemens.com")})
         }, (error, stdout, stderr) => {
+            var _a;
             try {
@@ -49,2 +51,15 @@ if (error != null || stderr) {
                 if (data.Status === 0) {
+                    try {
+                        const normlaizedUpdateFilePath = path.normalize(data.Path);
+                        const normalizedTempUpdateFile = path.normalize(unescapedTempUpdateFile);
+                        logger.info(`LiteralPath: ${normlaizedUpdateFilePath}. Update Path: ${normalizedTempUpdateFile}`);
+                        if (normlaizedUpdateFilePath !== normalizedTempUpdateFile) {
+                            handleError(logger, new Error(`LiteralPath of ${normlaizedUpdateFilePath} is different than ${normalizedTempUpdateFile}`), stderr, reject);
+                            resolve(null);
+                            return;
+                        }
+                    }
+                    catch (error) {
+                        logger.warn(`Unable to verify LiteralPath of update asset due to missing data.Path. Skipping this step of validation. Message: ${(_a = error.message) !== null && _a !== void 0 ? _a : error.stack}`);
+                    }
                     const subject = (0, builder_util_runtime_1.parseDn)(data.SignerCertificate.Subject);
@@ -98,3 +113,2 @@ let match = false;
     }
-    delete data.Path;
     return data;
@@ -101,0 +115,0 @@ }

package.json

 {
   "name": "electron-updater",
-  "version": "6.3.0-alpha.5",
+  "version": "6.3.0-alpha.6",
   "description": "Cross platform updater for electron applications",
@@ -5,0 +5,0 @@ "main": "out/main.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

463474

increased by0.52%

Lines of code

4167

increased by0.34%

No dependency changes