File tree Expand file tree Collapse file tree 2 files changed +8
-0
lines changed Expand file tree Collapse file tree 2 files changed +8
-0
lines changed Original file line number Diff line number Diff line change @@ -43,6 +43,10 @@ export class AsyncCompiler {
43
43
// current working directory.
44
44
// https://github.com/sass/embedded-host-node/pull/261#discussion_r1438712923
45
45
cwd : path . dirname ( compilerCommand [ 0 ] ) ,
46
+ // Node blocks launching .bat and .cmd without a shell due to CVE-2024-27980
47
+ shell : [ '.bat' , '.cmd' ] . includes (
48
+ path . extname ( compilerCommand [ 0 ] ) . toLowerCase ( )
49
+ ) ,
46
50
windowsHide : true ,
47
51
}
48
52
) ;
Original file line number Diff line number Diff line change @@ -43,6 +43,10 @@ export class Compiler {
43
43
// current working directory.
44
44
// https://github.com/sass/embedded-host-node/pull/261#discussion_r1438712923
45
45
cwd : path . dirname ( compilerCommand [ 0 ] ) ,
46
+ // Node blocks launching .bat and .cmd without a shell due to CVE-2024-27980
47
+ shell : [ '.bat' , '.cmd' ] . includes (
48
+ path . extname ( compilerCommand [ 0 ] ) . toLowerCase ( )
49
+ ) ,
46
50
windowsHide : true ,
47
51
}
48
52
) ;
You can’t perform that action at this time.
0 commit comments