packages/angular_devkit/schematics/tasks/repo-init/executor.ts - main - githubmirror/angular-cli

packages/angular_devkit/schematics/tasks/repo-init/executor.ts

90 строк3 KB

Venkatesan

refactor(@angular-devkit/schematics): remove shell usage in git spawn to prevent command injection

27 мар 2026, 11:52

27 мар 2026, 11:52f1ed025

/**
 * @license
 * Copyright Google LLC All Rights Reserved.
 *
 * Use of this source code is governed by an MIT-style license that can be
 * found in the LICENSE file at https://angular.dev/license
 */

import { tags } from '@angular-devkit/core';
import { SpawnOptions, spawn } from 'node:child_process';
import * as path from 'node:path';
import { SchematicContext, TaskExecutor } from '../../src';
import {
  RepositoryInitializerTaskFactoryOptions,
  RepositoryInitializerTaskOptions,
} from './options';

export default function (
  factoryOptions: RepositoryInitializerTaskFactoryOptions = {},
): TaskExecutor<RepositoryInitializerTaskOptions> {
  const rootDirectory = factoryOptions.rootDirectory || process.cwd();

  return async (options: RepositoryInitializerTaskOptions = {}, context: SchematicContext) => {
    const authorName = options.authorName;
    const authorEmail = options.authorEmail;

    const execute = (args: string[], ignoreErrorStream?: boolean) => {
      const outputStream = 'ignore';
      const errorStream = ignoreErrorStream ? 'ignore' : process.stderr;
      const spawnOptions: SpawnOptions = {
        stdio: [process.stdin, outputStream, errorStream],
        cwd: path.join(rootDirectory, options.workingDirectory || ''),
        env: {
          ...process.env,
          ...(authorName ? { GIT_AUTHOR_NAME: authorName, GIT_COMMITTER_NAME: authorName } : {}),
          ...(authorEmail
            ? { GIT_AUTHOR_EMAIL: authorEmail, GIT_COMMITTER_EMAIL: authorEmail }
            : {}),
        },
      };

      return new Promise<void>((resolve, reject) => {
        spawn('git', args, spawnOptions).on('close', (code: number) => {
          if (code === 0) {
            resolve();
          } else {
            reject(code);
          }
        });
      });
    };

    const hasCommand = await execute(['--version']).then(
      () => true,
      () => false,
    );
    if (!hasCommand) {
      return;
    }

    const insideRepo = await execute(['rev-parse', '--is-inside-work-tree'], true).then(
      () => true,
      () => false,
    );
    if (insideRepo) {
      context.logger.info(tags.oneLine`
        Directory is already under version control.
        Skipping initialization of git.
      `);

      return;
    }

    // if git is not found or an error was thrown during the `git`
    // init process just swallow any errors here
    // NOTE: This will be removed once task error handling is implemented
    try {
      await execute(['init']);
      await execute(['add', '.']);

      if (options.commit) {
        const message = options.message || 'initial commit';

        await execute(['commit', '-m', message]);
      }

      context.logger.info('Successfully initialized git.');
    } catch {}
  };
}