fix a vulnerability issue if a provided port is not a number

ssnau · Mar 17, 2021 · bec8e37 · bec8e37
1 parent 5268f23
commit bec8e37
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/index.js b/index.js
@@ -5,6 +5,7 @@ var notEmpty = function(x) {return x};
 
 module.exports = function killport(port) {
   return (new Promise(function(resolve, reject) {
+    if (!/^\d+$/.test(port)) throw new Error('port must be a number.');
     var cmd = 'lsof -i:' + port; 
     cp.exec(cmd, function(err, stdout, stderr){
       // do not check `err`, if no process found