Add validation for --file flag to script

Author: samirsilwal

src/commands/run-script.ts

@@ -4,21 +4,25 @@ import { bold, red, magenta, cyan } from 'chalk';
 import { runScriptAPI } from '../api';
 import { dbLogger } from '../util/logger';
 import { loadConfig, resolveConnections } from '..';
+import { validateScriptFileName } from '../util/fs';
 import { printLine, printError, printInfo } from '../util/io';
 import OperationResult from '../domain/operation/OperationResult';
 
 class RunScript extends Command {
   static description = 'Run the provided manual scripts.';
 
+
   static flags = {
     'dry-run': flags.boolean({ description: 'Dry run script.', default: false }),
     only: flags.string({
       helpValue: 'CONNECTION_ID(s)',
       description: 'Filter provided connection(s). Comma separated ids eg: id1,id2'
     }),
     file: flags.string({
+      required: true,
       helpValue: 'Script Name',
-      description: 'Name of the manual SQL/JS/TS script'
+      parse: validateScriptFileName,
+      description: 'Name of the manual SQL/JS/TS script',
     }),
     'connection-resolver': flags.string({
       helpValue: 'PATH',
@@ -30,6 +34,8 @@ class RunScript extends Command {
     })
   };
 
+
+
   /**
    * Started event handler.
    */
@@ -110,3 +116,4 @@ class RunScript extends Command {
 }
 
 export default RunScript;
+

src/util/fs.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { promisify } from 'util';
+import FileExtensions from '../enum/FileExtensions';
 
 export const mkdir = promisify(fs.mkdir);
 export const readDir = promisify(fs.readdir);
@@ -141,3 +142,19 @@ export function copy(fromPath: string, toPath: string): Promise<void> {
     });
   });
 }
+
+/**
+ * Validate the script filename provided from CLI.
+ * 
+ * @param {string} filename 
+ * @returns {string}
+ */
+export function validateScriptFileName(filename: string): string {
+  const ext = filename.split('.').pop()
+
+  if (!ext || ![FileExtensions.JS, FileExtensions.SQL, FileExtensions.JS].includes(ext as FileExtensions)) {
+    throw new Error('Invalid file name or extension');
+  }
+
+  return filename
+}