mirror of
https://github.com/nvm-sh/nvm.git
synced 2026-04-03 11:34:50 +08:00
3c48015986
The awk expression `$0 ~ "regex"` as a bare statement in the action block evaluates the match but doesn't affect the exit code.
awk always prints the line and exits 0, making the validation a no-op.
Bug introduced in b1fa143dd8.
55 lines
2.1 KiB
Bash
Executable File
55 lines
2.1 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -ex
|
|
|
|
die () { echo "$@" ; exit 1; }
|
|
|
|
unset NVM_NODEJS_ORG_MIRROR
|
|
unset NVM_IOJS_ORG_MIRROR
|
|
|
|
set +e # TODO: fix
|
|
: nvm.sh
|
|
\. ../../../nvm.sh
|
|
set -e
|
|
|
|
! nvm_get_mirror || die 'unknown release type did not error'
|
|
! nvm_get_mirror node || die 'unknown release type did not error'
|
|
! nvm_get_mirror iojs || die 'unknown release type did not error'
|
|
! nvm_get_mirror node foo || die 'unknown release type did not error'
|
|
! nvm_get_mirror iojs foo || die 'unknown release type did not error'
|
|
|
|
[ -z "$NVM_NODEJS_ORG_MIRROR" ] || die "MIRROR environment variables should not be exported"
|
|
[ -z "$NVM_IOJS_ORG_MIRROR" ] || die "MIRROR environment variables should not be exported"
|
|
|
|
[ "$(nvm_get_mirror node std)" = "https://nodejs.org/dist" ] || die "incorrect default node-std mirror"
|
|
[ "$(nvm_get_mirror iojs std)" = "https://iojs.org/dist" ] || die "incorrect default iojs-std mirror"
|
|
|
|
NVM_NODEJS_ORG_MIRROR="https://test-domain"
|
|
[ "$(nvm_get_mirror node std)" = "https://test-domain" ] || die "node-std mirror should respect NVM_NODEJS_ORG_MIRROR"
|
|
unset NVM_NODEJS_ORG_MIRROR
|
|
|
|
NVM_IOJS_ORG_MIRROR="https://test-domain"
|
|
[ "$(nvm_get_mirror iojs std)" = "https://test-domain" ] || die "iojs-std mirror should respect NVM_IOJS_ORG_MIRROR"
|
|
unset NVM_IOJS_ORG_MIRROR
|
|
|
|
testMirrors() {
|
|
NVM_NODEJS_ORG_MIRROR="${1-}"
|
|
! nvm_get_mirror node std || die "NVM_NODEJS_ORG_MIRROR errors with command injection attempt (${1-})"
|
|
[ "$(nvm_get_mirror node std)" = "" ] || die 'NVM_NODEJS_ORG_MIRROR is protected against command injection'
|
|
|
|
NVM_IOJS_ORG_MIRROR="${1-}"
|
|
! nvm_get_mirror iojs std || die "NVM_IOJS_ORG_MIRROR errors with command injection attempt (${1-})"
|
|
[ "$(nvm_get_mirror iojs std)" = "" ] || die 'NVM_IOJS_ORG_MIRROR is protected against command injection'
|
|
}
|
|
|
|
testMirrors '`do something bad`'
|
|
testMirrors 'https://nodejs.org/dist; xdg-open http://www.google.com;'
|
|
testMirrors 'https://nodejs.org/dist&&xdg-open http://www.google.com;'
|
|
testMirrors 'https://nodejs.org/dist|xdg-open http://www.google.com;'
|
|
|
|
# Test that awk URL validation rejects non-URL values
|
|
testMirrors 'not a url'
|
|
testMirrors 'ftp://wrong-scheme'
|
|
testMirrors 'http://'
|
|
testMirrors 'javascript:alert(1)'
|