e30ae8ed09
- App.tsx: full navigation (Auth stack + Main tabs with 5 screens) - Auth: LoginScreen, RegisterScreen, ForgotPasswordScreen - HomeScreen: dashboard with IoT metrics, weather widget, alerts, quick actions, sensors - MapScreen: interactive map with layer toggles (6 layers) - MarketplaceScreen: categories (6), products (5), search - ChatScreen: AI chat with quick prompts (4), bot responses - ProfileScreen: user info, stats, menu (9 items), logout - AlertsScreen: alert list with severity, acknowledge - SensorsScreen: sensor list with type filters (6 types), search - ZonesScreen: zone cards with stats - SettingsScreen: language picker (FR/EN/ES/DE), privacy, about - Stores: iotStore (sensors, zones, alerts), notificationStore, uiStore + i18n - Hooks: useSensors, useAlerts, useNotifications, useLocation - Components: Card, Button, LoadingSpinner, ErrorBoundary, Header - Services: iotService, notificationService (with axios API client) - Utils: formatters (temp, AQI, noise, dates), validators (email, password, IBAN) - Theme: colors.ts with full design system (Blue Ocean palette) - Ditto: fixed MongoDB connection, new JWT secrets, official gateway image
65 lines
1.7 KiB
JavaScript
65 lines
1.7 KiB
JavaScript
'use strict';
|
|
|
|
/* eslint no-proto: 0 */
|
|
|
|
var parse = require('../');
|
|
var test = require('tape');
|
|
|
|
test('proto pollution', function (t) {
|
|
var argv = parse(['--__proto__.x', '123']);
|
|
t.equal({}.x, undefined);
|
|
t.equal(argv.__proto__.x, undefined);
|
|
t.equal(argv.x, undefined);
|
|
t.end();
|
|
});
|
|
|
|
test('proto pollution (array)', function (t) {
|
|
var argv = parse(['--x', '4', '--x', '5', '--x.__proto__.z', '789']);
|
|
t.equal({}.z, undefined);
|
|
t.deepEqual(argv.x, [4, 5]);
|
|
t.equal(argv.x.z, undefined);
|
|
t.equal(argv.x.__proto__.z, undefined);
|
|
t.end();
|
|
});
|
|
|
|
test('proto pollution (number)', function (t) {
|
|
var argv = parse(['--x', '5', '--x.__proto__.z', '100']);
|
|
t.equal({}.z, undefined);
|
|
t.equal((4).z, undefined);
|
|
t.equal(argv.x, 5);
|
|
t.equal(argv.x.z, undefined);
|
|
t.end();
|
|
});
|
|
|
|
test('proto pollution (string)', function (t) {
|
|
var argv = parse(['--x', 'abc', '--x.__proto__.z', 'def']);
|
|
t.equal({}.z, undefined);
|
|
t.equal('...'.z, undefined);
|
|
t.equal(argv.x, 'abc');
|
|
t.equal(argv.x.z, undefined);
|
|
t.end();
|
|
});
|
|
|
|
test('proto pollution (constructor)', function (t) {
|
|
var argv = parse(['--constructor.prototype.y', '123']);
|
|
t.equal({}.y, undefined);
|
|
t.equal(argv.y, undefined);
|
|
t.end();
|
|
});
|
|
|
|
test('proto pollution (constructor function)', function (t) {
|
|
var argv = parse(['--_.concat.constructor.prototype.y', '123']);
|
|
function fnToBeTested() {}
|
|
t.equal(fnToBeTested.y, undefined);
|
|
t.equal(argv.y, undefined);
|
|
t.end();
|
|
});
|
|
|
|
// powered by snyk - https://github.com/backstage/backstage/issues/10343
|
|
test('proto pollution (constructor function) snyk', function (t) {
|
|
var argv = parse('--_.constructor.constructor.prototype.foo bar'.split(' '));
|
|
t.equal(function () {}.foo, undefined);
|
|
t.equal(argv.y, undefined);
|
|
t.end();
|
|
});
|