milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Handle process exit better + some PR cleanup

Browse source
This commit is contained in:
Sander Declerck 2025-10-01 08:53:56 +02:00
parent bf97f089ca
commit 67304751bd
No known key found for this signature in database
8 changed files with 21 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

6
packages/safe-chain/src/registryProxy/registryProxy.js
View file

@ -42,7 +42,7 @@ export function mergeSafeChainProxyEnvironmentVariables(env) {
const upperKey = key.toUpperCase();
if (!proxyEnv[upperKey]) {
proxyEnv[upperKey] = env[key];
proxyEnv[key] = env[key];
}
}
@ -104,7 +104,8 @@ function handleConnect(req, clientSocket, head) {
async function isAllowedUrl(url) {
const { packageName, version } = parsePackageFromUrl(url);
// This happens when the URL is not a tarball download url.
// packageName and version are undefined when the URL is not a package download
// In that case, we can allow the request to proceed
if (!packageName || !version) {
return true;
}
@ -123,6 +124,7 @@ async function isAllowedUrl(url) {
function verifyNoMaliciousPackages() {
if (state.blockedRequests.length === 0) {
// No malicious packages were blocked, so nothing to block
return;
}