n8n-workflow - npm Package Compare versions

Comparing version 0.152.0 to 0.153.0

dist/Expression.js

@@ -45,2 +45,10 @@ "use strict";
 };
+const AsyncFunction = (async () => { }).constructor;
+const fnConstructors = {
+    sync: Function.prototype.constructor,
+    async: AsyncFunction.prototype.constructor,
+    mock: () => {
+        throw new ExpressionError_1.ExpressionError('Arbitrary code execution detected');
+    },
+};
 class Expression {
@@ -206,2 +214,3 @@ constructor(workflow) {
         try {
+            [Function, AsyncFunction].forEach(({ prototype }) => Object.defineProperty(prototype, 'constructor', { value: fnConstructors.mock }));
             return tmpl.tmpl(expression, data);
@@ -233,2 +242,8 @@ }
         }
+        finally {
+            Object.defineProperty(Function.prototype, 'constructor', { value: fnConstructors.sync });
+            Object.defineProperty(AsyncFunction.prototype, 'constructor', {
+                value: fnConstructors.async,
+            });
+        }
         return null;
@@ -235,0 +250,0 @@ }

package.json

 {
   "name": "n8n-workflow",
-  "version": "0.152.0",
+  "version": "0.153.0",
   "description": "Workflow base code of n8n",
@@ -5,0 +5,0 @@ "license": "SEE LICENSE IN LICENSE.md",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

675795

increased by0.2%

Lines of code

9188

increased by0.16%

No dependency changes