n8n-workflow - npm Package Compare versions

Comparing version 0.102.0 to 0.103.0

dist/src/RoutingNode.js

@@ -280,3 +280,4 @@ "use strict";
         var _a;
-        if (typeof parameterValue === 'string' && parameterValue.charAt(0) === '=') {
+        if (typeof parameterValue === 'object' ||
+            (typeof parameterValue === 'string' && parameterValue.charAt(0) === '=')) {
             return this.workflow.expression.getParameterValue(parameterValue, (_a = this.runExecutionData) !== null && _a !== void 0 ? _a : null, runIndex, itemIndex, this.node.name, this.connectionInputData, this.mode, this.additionalData.timezone, additionalKeys !== null && additionalKeys !== void 0 ? additionalKeys : {}, executeData, returnObjectAsString);
@@ -404,2 +405,3 @@ }
                 }
+                value = this.getParameterValue(value, itemIndex, runIndex, executeSingleFunctions.getExecuteData(), { ...additionalKeys }, false);
                 const loopBasePath = `${basePath}${propertyOptions.name}`;
@@ -406,0 +408,0 @@ for (let i = 0; i < value.length; i++) {

dist/src/WorkflowDataProxy.js

@@ -243,4 +243,13 @@ "use strict";
     envGetter() {
+        const that = this;
         return new Proxy({}, {
             get(target, name, receiver) {
+                if (process.env.N8N_BLOCK_ENV_ACCESS_IN_NODE === 'true') {
+                    throw new _1.ExpressionError('Environment variable access got disabled', {
+                        causeDetailed: 'If you need access please contact the administrator to remove the environment variable ‘N8N_BLOCK_ENV_ACCESS_IN_NODE‘',
+                        runIndex: that.runIndex,
+                        itemIndex: that.itemIndex,
+                        failExecution: true,
+                    });
+                }
                 return process.env[name.toString()];
@@ -247,0 +256,0 @@ },

package.json

 {
   "name": "n8n-workflow",
-  "version": "0.102.0",
+  "version": "0.103.0",
   "description": "Workflow base code of n8n",
@@ -5,0 +5,0 @@ "license": "SEE LICENSE IN LICENSE.md",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

778508

increased by0.69%

Lines of code

12053

increased by0.54%

Worsened metrics

Number of low supply chain risk alerts

4

increased by33.33%

No dependency changes