feat: add defence to Command Injection

add defence to Command Injection
hoperyy · Jan 26, 2021 · 40b1cf3 · 40b1cf3
1 parent 5279786
commit 40b1cf3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/index.js b/index.js
@@ -1,5 +1,8 @@
 module.exports = function (packageName, { registry = '', timeout = null } = {}) {
     try {
+        if (/[`$&{}[;|]/g.test(packageName) || /[`$&{}[;|]/g.test(registry)) {
+            return null
+        }
         let version;
 
         const config = {