Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rnv injections - fully typed file model #1180

Merged
merged 35 commits into from
Oct 20, 2023
Merged

rnv injections - fully typed file model #1180

merged 35 commits into from
Oct 20, 2023

Conversation

pavjacko
Copy link
Member

@pavjacko pavjacko commented Oct 17, 2023

Description

  • Fix existing rnv file types
  • add rest of file injections for backward compatibility => moving to next PR to avoid conflicts

Breaking Changes

  • tbc

I have tested my changes on:

ReNative project directly:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

New project:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

Existing Project created with previous version of renative:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

@pavjacko pavjacko self-assigned this Oct 17, 2023
@pavjacko pavjacko marked this pull request as draft October 17, 2023 11:14
const existingPath = c.paths.project.package;
const dep = currentPackage[type] || {};
currentPackage[type] = dep;
dep[dependency] = version;

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
@pavjacko pavjacko marked this pull request as ready for review October 19, 2023 13:28
@pavjacko pavjacko changed the title rnv injections rnv injections - fully typed file model Oct 19, 2023
@@ -456,7 +456,7 @@
callback && callback(null, false);
return;
}
exec(`where ${cleanedCommandName}`, (error: any) => {
exec(`where ${cleanedCommandName}`, (error: unknown) => {

Check warning

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on
library input
is later used in a
shell command
.
@pavjacko pavjacko merged commit 19e6dd6 into main Oct 20, 2023
3 checks passed
@pavjacko pavjacko deleted the fix/rnv-injections branch October 20, 2023 00:18
@pavjacko pavjacko added this to the 1.0 milestone Dec 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants