Add allowed-endpoints validation

[h0x0er]

No description provided.

[step-security-bot]

Please find StepSecurity AI-CodeWise code comments inline or below.

dist/pre/index.js

Please refer to 1 inline comments.

src/arc-runner.test.ts

Please refer to 2 inline comments.

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find a comment helpful, give it a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

[step-security-bot]

[High]Input Validation

There is no input validation in the validateEndpoints function. Implement input validation in the validateEndpoints function to ensure that the endpoints are in the correct format.

[step-security-bot]

[Medium]Consider including this refactored function into your pull request

Added a new test function should write endpoint files.

it("should write endpoint files", () => {
  process.env["isTest"] = "1";

  const allowed_endpoints = [
    "github.com:443",
    "*.google.com:443",
    "youtube.com:443",
  ].join(" ");
  sendAllowedEndpoints(allowed_endpoints);
});

[step-security-bot]

[Medium]Consider including this refactored function into your pull request

Added a new test function should validate endpoints.

it("should validate endpoints", () => {
  let allowedEndpoints = [
    "github.com:443",
    "*.google.com:443",
    "youtube.com:443",
  ].join(" ");
  let areValid = validateEndpoints(allowedEndpoints);
  expect(areValid).toBe(true);

  // presence of invalid endpoint
  allowedEndpoints = [
    "github.com:443",
    "*.google.com",
    "youtube.com",
  ].join(" ");
  areValid = validateEndpoints(allowedEndpoints);
  expect(areValid).toBe(false);
});