В cli добавлен параметр 'unsafe-filter'

2022-10-05 14:59:17 +07:00
parent 53873910c2
commit 9c72651804
2 changed files with 7 additions and 2 deletions
--- a/server/core/DbCreator.js
+++ b/server/core/DbCreator.js
@@ -76,8 +76,12 @@ class DbCreator {
        if (inpxFilter) {

            let recFilter = () => true;
-            if (inpxFilter.filter)
-                recFilter = new Function(`'use strict'; return ${inpxFilter.filter}`)();
+            if (inpxFilter.filter) {
+                if (config.allowUnsafeFilter)
+                    recFilter = new Function(`'use strict'; return ${inpxFilter.filter}`)();
+                else
+                    throw new Error(`Unsafe property 'filter' detected in ${this.config.inpxFilterFile}. Please specify '--unsafe-filter' param if you know what you're doing.`);
+            }

            filter = (rec) => {
                let author = rec.author;