Protect jsonl file access

README.md

@@ -46,6 +46,7 @@ Since v5.5.0 of the JavaScript adapter the following locations (relative to the
 
 * (klein0r) Fixed httpGet/httpPost issue when using without options
 * (klein0r) Updated integration testing
+* (klein0r) Protect jsonl file access
 
 ### 7.10.1 (2024-03-22)
 

lib/protectFs.js

@@ -1,9 +1,11 @@
-const nodeFS = require('fs');
-const path = require('path');
+const nodeFS = require('node:fs');
+const path = require('node:path');
 
 const ProtectFs = function (log) {
     function checkObjectsJson(file) {
-        if (path.normalize(file).replace(/\\/g, '/').includes('-data/objects.json')) {
+        const filePath = path.normalize(file).replace(/\\/g, '/');
+
+        if (filePath.includes('-data/objects.json') || filePath.includes('-data/objects.jsonl')) {
             if (log) {
                 log.error(`May not read ${file}`);
             } else {

lib/sandbox.js

@@ -520,6 +520,10 @@ function sandBox(script, name, verbose, debug, context) {
         verbose,
         exports: {}, // Polyfill for the export object in TypeScript modules
         require: function (md) {
+            if (typeof md === 'string' && md.startsWith('node:')) {
+                md = md.replace(/^node:/, '');
+            }
+
             if (mods[md]) {
                 return mods[md];
             } else {

test/testFunctions.js

@@ -401,7 +401,6 @@ describe.only('Test JS', function () {
         });
     });
 
-    /*
     it('Test JS: open objects.json file must not work', function (done) {
         this.timeout(20000);
         // add script
@@ -457,7 +456,6 @@ describe.only('Test JS', function () {
             expect(err).to.be.not.ok;
         });
     });
-    */
 
     it('Test JS: write objects.json not in data directory must work', function (done) {
         this.timeout(3000);