MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Move sandbox escape test to server

This commit is contained in:
Adria Navarro 2024-02-09 10:35:58 +01:00
parent 7aee57eb6a
commit 0db98f7fb1
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
packages/server/src/jsRunner/tests/jsRunner.spec.ts
View File

@ -47,6 +47,13 @@ describe("jsRunner", () => {
expect(output).toBe(3) expect(output).toBe(3)
}) })
it("should prevent sandbox escape", async () => {
const output = await processJS(
`return this.constructor.constructor("return process")()`
)
expect(output).toBe("Error while executing JS")
})
describe("helpers", () => { describe("helpers", () => {
runJsHelpersTests({ runJsHelpersTests({
funcWrap: (func: any) => config.doInContext(config.getAppId(), func), funcWrap: (func: any) => config.doInContext(config.getAppId(), func),

7
packages/string-templates/test/javascript.spec.js
View File

@ -142,13 +142,6 @@ describe("Javascript", () => {
const output = processJS(`return process`) const output = processJS(`return process`)
expect(output).toBe("Error while executing JS") expect(output).toBe("Error while executing JS")
}) })
it("should prevent sandbox escape", () => {
const output = processJS(
`return this.constructor.constructor("return process")()`
)
expect(output).toBe("Error while executing JS")
})
}) })
describe("check JS helpers", () => { describe("check JS helpers", () => {