We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 8cbf060 commit 6ca7947Copy full SHA for 6ca7947
bin/sass.ts
@@ -1,6 +1,7 @@
1
#!/usr/bin/env node
2
3
import * as child_process from 'child_process';
4
+import * as path from 'path';
5
import {compilerCommand} from '../lib/src/compiler-path';
6
7
// TODO npm/cmd-shim#152 and yarnpkg/berry#6422 - If and when the package
@@ -12,6 +13,10 @@ try {
12
13
compilerCommand[0],
14
[...compilerCommand.slice(1), ...process.argv.slice(2)],
15
{
16
+ // Node blocks launching .bat and .cmd without a shell due to CVE-2024-27980
17
+ shell: ['.bat', '.cmd'].includes(
18
+ path.extname(compilerCommand[0]).toLowerCase()
19
+ ),
20
stdio: 'inherit',
21
windowsHide: true,
22
}
0 commit comments