CalvinBackup/anonymous_github
1
0 Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-11-14 00:07:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: harden repository content and improve access recovery

Browse Source 
Sandbox executable MIME aliases, enforce strict Mermaid rendering, and add security regression coverage. Upgrade vulnerable dependencies with archive compatibility checks and Node 22/24 CI. Make repository restoration atomic and provide actionable viewer errors with retry controls.
This commit is contained in:
Thomas Durieux committed 2026-11-02 05:50:34 +00:00
1 parent 772e40debd
commit a301c46a94
21 files changed
+1048 -1051
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

public/script/app.js
+19 -19
View File
@@ -1,6 +1,18 @@
import { reactive, nextTick } from "vue";
import { createTimers, createListeners } from "./state.js";
import { formDraft } from "./drafts.js";
import translations from "../i18n/locale-en.json";
function viewerErrorCode(error) {
let data = error?.data;
if (typeof data === "string") {
try { data = JSON.parse(data); } catch (_) { data = null; }
}
if (typeof data?.error === "string" && Object.prototype.hasOwnProperty.call(translations.ERRORS, data.error)) return data.error;
if (error?.status === -1 || error?.status === 0) return "request_error";
if ([502, 503, 504].includes(error?.status)) return "unreachable";
return "unknown_error";
}
// The mask comes from /api/options; mainController sets it once loaded.
let redactionMask = "XXXX";
@@ -2554,7 +2566,7 @@ export const exploreController = function (state, http, location, params, html,
}, function (err) {
if (destroyed || repoId !== state.repoId) return [];
state.type = "error";
state.content = (err && err.data && err.data.error) || "unknown_error";
state.content = viewerErrorCode(err);
state.files = [];
});
};
@@ -2624,7 +2636,7 @@ export const exploreController = function (state, http, location, params, html,
timers.timeout(function () { getOptions(callback); }, 3000);
} else {
state.type = "error";
state.content = data.error;
state.content = viewerErrorCode(err);
}
}
);
@@ -2749,23 +2761,7 @@ export const exploreController = function (state, http, location, params, html,
(err) => {
if (destroyed || generation !== contentGeneration) return;
state.type = "error";
state.content = "unknown_error";
try {
err.data = JSON.parse(err.data);
if (err.data.error) {
state.content = err.data.error;
} else {
state.content = err.data;
}
} catch (ignore) {
console.log(err);
if (err.status == -1) {
state.content = "request_error";
} else if (err.status == 502) {
// cloudflare error
state.content = "unreachable";
}
}
state.content = viewerErrorCode(err);
}
);
}
@@ -2970,6 +2966,10 @@ export const exploreController = function (state, http, location, params, html,
getContent(state.filePath, state.file);
}
state.isSourceAccessError = () => ["repo_not_found", "token_expired", "github_app_access_required",
"github_app_reconnect_required", "repo_saml_enforcement", "repo_access_limited"].includes(state.content);
state.retryContent = () => init();
function init() {
contentGeneration++;
state.files = [];