Try to supress CodeQL

iwatakeshi · Feb 17, 2024 · 8fcbc1a · 8fcbc1a
1 parent 460ba73
commit 8fcbc1a
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/src/utils/clone.ts b/src/utils/clone.ts
@@ -41,7 +41,18 @@ export default async function clone(
       await rm(archivePath)
     }
 
+    // Prevent second order command injection
+
     const depth = options?.git?.depth || 1
+    if (typeof depth !== 'number') {
+      throw new GitlyCloneError('Invalid depth option')
+    }
+
+    if (info.href.includes('--upload-pack') || directory.includes('--upload-pack')) {
+      throw new GitlyCloneError('Invalid argument')
+    }
+
+
     const child = spawn('git', [
       'clone',
       '--depth',