Skip to content

Commit 1b3987e

Browse files
authored
fix: replace path-parse by parse-url (#426)
This fixes a vulnerabilty in parse-path (CVE-2022-0624) Closes #423
1 parent 129dff5 commit 1b3987e

File tree

3 files changed

+70
-125
lines changed

3 files changed

+70
-125
lines changed

lib/get-repo-id.js

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
const parsePath = require('parse-path');
1+
const parseUrl = require('parse-url');
22
const escapeStringRegexp = require('escape-string-regexp');
33

44
module.exports = ({envCi: {service} = {}, env: {CI_PROJECT_PATH}}, gitlabUrl, repositoryUrl) =>
55
service === 'gitlab' && CI_PROJECT_PATH
66
? CI_PROJECT_PATH
7-
: parsePath(repositoryUrl)
8-
.pathname.replace(new RegExp(`^${escapeStringRegexp(parsePath(gitlabUrl).pathname)}`), '')
7+
: parseUrl(repositoryUrl)
8+
.pathname.replace(new RegExp(`^${escapeStringRegexp(parseUrl(gitlabUrl).pathname)}`), '')
99
.replace(/^\//, '')
1010
.replace(/\/$/, '')
1111
.replace(/\.git$/, '');

0 commit comments

Comments
 (0)