u/process/validate_identifier.ts


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

import { Either, type IEither } from '@emprespresso/pengueno';

export const validateIdentifier = (token: string) => {
    return /^[a-zA-Z0-9_\-:. \/]+$/.test(token) && !token.includes('..');
};

// ensure {@param obj} is a Record<string, string> with stuff that won't
// have the potential for shell injection, just to be super safe.
type InvalidEntry<K, T> = [K, T];
export const validateExecutionEntries = <T, K extends symbol | number | string = symbol | number | string>(
    obj: Record<K, T>,
): IEither<Array<InvalidEntry<K, T>>, Record<string, string>> => {
    const invalidEntries = <Array<InvalidEntry<K, T>>>(
        Object.entries(obj).filter((e) => !e.every((x) => typeof x === 'string' && validateIdentifier(x)))
    );
    if (invalidEntries.length > 0) return Either.left(invalidEntries);
    return Either.right(<Record<string, string>>obj);
};