1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
package compiler
import (
"fmt"
"os"
"path/filepath"
"strings"
"github.com/rs/zerolog/log"
"github.com/authzed/spicedb/pkg/composableschemadsl/input"
)
type CircularImportError struct {
error
filePath string
}
func importFile(filePath string) (*dslNode, error) {
schemaBytes, err := os.ReadFile(filePath)
if err != nil {
return nil, fmt.Errorf("failed to read import in schema file: %w", err)
}
log.Trace().Str("schema", string(schemaBytes)).Str("file", filePath).Msg("read schema from file")
parsedSchema, _, err := parseSchema(InputSchema{
Source: input.Source(filePath),
SchemaString: string(schemaBytes),
})
return parsedSchema, err
}
// Take a filepath and ensure that it's local to the current context.
func validateFilepath(path string) error {
if strings.Contains(path, "..") {
return fmt.Errorf("path %s contains '..'; paths must stay within their directory and this is likely an error", path)
}
// NOTE: This is slightly overly restrictive; it should theoretically be possible
// to take a given filepath and figure out whether it's local to the context where
// the compiler is being invoked, rather than whether it's local to the source
// folder of the current context. The assumption is that that won't matter
// right now, and we can fix it if we need to.
if !filepath.IsLocal(path) {
return fmt.Errorf("import path %s does not stay within its folder", path)
}
return nil
}
|
